
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
debug dojo, a place for zen debugging
debug-dojo is a Python package providing utilities for enhanced debugging and inspection in the terminal.
It leverages rich
for beautiful output and offers helpers for side-by-side object comparison, improved tracebacks from rich
, and easy integration with different debuggers -- debugpy
, pudb
, pdb
, and ipdb
.
dojo.toml
or pyproject.toml
.Run your Python script with debugging tools enabled using the debug-dojo
command:
dojo my_script.py
You can optionally set configuration file and verbose mode:
dojo --config dojo.toml --verbose my_script.py
In the PuDB
style, you can install all debugging tools and enter the debugging mode with a single command:
import debug_dojo.install; b()
object_1 = {"foo": 1, "bar": 2}
object_2 = [1, 2, 3]
p(object_1) # Pretty print an object with Rich
i(object_1) # Inspect an object
c(object_1, object_2) # Compare two objects side-by-side
Where:
b()
is a builtin-injected function that sets a breakpoint using PuDB's set_trace()
.p(object_1)
is pretty printing of an object using Rich.i(object_1)
to inspect an object using Rich.c(object_1, object_2)
to compare two objects side-by-side.You can configure the debugging tools using a dojo.toml
or pyproject.toml
file. The configuration allows you to specify which debugger to use, enable or disable features, and set other options.
Example dojo.toml
:
debugger = "ipdb"
[features]
rich_inspect = true
rich_print = true
comparer = false
The package is available on PyPI and can be installed using standard Python package management tools.
pip install debug-dojo
You can also use poetry
or uv
to add it to your project:
poetry add debug-dojo
uv add debug-dojo
Note that dojo most likely will not work when installed via pipx
or uvx
, as it relies on the current Python environment dependencies.
ruff check src/debug_dojo --fix
basedpyright src/debug_dojo
release tag: [v0.3.2]
dojo.toml
or pyproject.toml
.debugpy
and ipdb
for debugging.release tag: [v0.2.0]
dojo
command for easy debugging setup.p()
function for rich printing.hatch
for building and packaging.pyproject.toml
to point to GitHub repository as the homepage.release tag: [v0.1.0]
FAQs
Debbugging dojo for Python developers
We found that debug-dojo demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.