Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
|CI Build Status| |Coverage Status| |Python Versions| |PyPI Version|
Defcon is a set of UFO based objects optimized for use in font editing
applications. The objects are built to be lightweight, fast and
flexible. The objects are very bare-bones and they are not meant to be
end-all, be-all objects. Rather, they are meant to provide base
functionality so that you can focus on your application’s behavior, not
object observing or maintaining cached data. Defcon implements UFO3 as
described by the UFO font format <http://unifiedfontobject.org>
. If
needed, the
ufo2-deprecated <https://github.com/typesupply/defcon/tree/ufo2-deprecated>
branch has the older, UFO2, version of Defcon.
Install
To download and install the latest stable release of defcon from the
`Python Package Index <https://pypi.python.org/pypi/defcon>`_, use the
`pip <https://pip.pypa.io/en/stable/installing/>`_ command line tool:
.. code::
pip install --upgrade defcon
To install with the `fontPens <https://github.com/robofab-developers/fontPens>`_ package —used for ``Glyph.correctDirection()`` and ``Contour.contourInside()``— do:
.. code::
pip install --upgrade defcon[pens]
To optionally install defcon with support for `lxml <https://github.com/lxml/lxml>`_,
a faster XML reader and writer library, you can do:
.. code::
pip install --upgrade defcon[lxml]
You can separate multiple extras using a comma: ``defcon[pens,lxml]``.
Documentation
Documentation for Defcon lives at
defcon.robotools.dev <http://defcon.robotools.dev/en/latest/>
_.
Copyrights
This package is distributed under the MIT license. See the
`license <License.txt>`_. Defcon is built in
`Python <http://www.python.org>`_. Parts of RoboFab use
`fontTools <https://github.com/behdad/fonttools>`_, an OpenSource font
toolkit started by Just van Rossum. Parts of Defcon implement the
Property List file format in XML, copyright
`Apple Computer <http://www.apple.com>`_. Parts of Defcon implement tables and
names from PostScript and the OpenType FDK, copyright
`Adobe <http://www.adobe.com>`_.
.. |CI Build Status| image:: https://github.com/robotools/defcon/workflows/Tests/badge.svg
:target: https://github.com/robotools/defcon/actions?query=workflow%3ATests
.. |Coverage Status| image:: https://codecov.io/gh/robotools/defcon/graph/badge.svg?token=cJyogdvWZ2
:target: https://codecov.io/gh/robotools/defcon
.. |Python Versions| image:: https://img.shields.io/badge/python-3.8%2C%203.10%2C%203.11-blue.svg
.. |PyPI Version| image:: https://img.shields.io/pypi/v/defcon.svg
:target: https://pypi.org/project/defcon/
FAQs
A set of flexible objects for representing UFO data.
We found that defcon demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.