Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Monitor new releases by a specified list of artists and auto download using the deemix library
About | Installation | Docker | Documentation | Support
deemon is a command line tool written in Python that monitors artists for new releases, provides email notifications and can also integrate with the deemix library to automatically download new releases.
$ pip install deemon
$ pip install -r requirements.txt
$ python3 -m deemon
Docker support has been added for amd64
, arm64
and armv7
architectures. It is recommended to save your docker run
command as a script to execute via cron/Task Scheduler.
Note: Inside deemon's config.json
, download_location must be set to /downloads
until I can integrate this myself.
Example: Refreshing an existing database
docker run --name deemon \
--rm \
-v /path/to/deemon/config:/config \
-v /path/to/music:/downloads \
-v /path/to/deemix/config:/deemix \
ghcr.io/digitalec/deemon:latest \
python3 -m deemon refresh
If you wish to install deemon and it's dependencies in a sandbox-style environment, I would recommend using venv.
Create a venv and install deemon (you may need to use python3
and pip3
depending on your system):
$ python -m venv venv
$ source ./venv/bin/activate
$ pip install deemon
When you are finished, close the terminal or exit our venv:
$ deactivate
Next time you want to run deemon, activate the venv first:
$ source ./venv/bin/activate
$ deemon refresh
If you are moving to venv from the Docker container, be sure to update your cron/Task Scheduler scripts.
If you need to generate a new default configuration, please rename or delete your current config.json
. The
configuration will be generated the next time you run deemon.
FAQs
Monitor new releases by a specified list of artists and auto download using the deemix library
We found that deemon demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.