
Security News
OpenGrep Restores Fingerprinting in JSON and SARIF Outputs
OpenGrep has restored fingerprint and metavariable support in JSON and SARIF outputs, making static analysis more effective for CI/CD security automation.
This package provides various utilities used by the Delphi group at Carnegie Mellon University for its data pipelines and analyses.
Submodules:
archive
: Diffing and archiving CSV files.export
: DataFrame to CSV export.geomap
: Mappings between geographic resolutions.logger
: Structured JSON logger.nancodes
: Enum constants encoding not-a-number cases.runner
: Orchestrator for running an indicator pipeline.signal
: Indicator (signal) naming.slack_notifier
: Slack notification integration.smooth
: Data smoothing functions.utils
: JSON parameter interactions.validator
: Data sanity checks and anomaly detection.Source code can be found here: https://github.com/cmu-delphi/covidcast-indicators/
To make our structured logging as useful as it can be, particularly within the context of how we use logs in Elastic, the event
argument (typically the first unnamed arg) should be a static string (to make filtering easier), and each dynamic/varying value should be specified in an individual meaningfully- and consistently-named argument to the logger call (for use in filtering, thresholding, grouping, visualization, etc).
Single-thread usage.
from delphi_utils.logger import get_structured_logger
logger = get_structured_logger('my_logger')
logger.info('Hello', name='World')
Multi-thread usage.
from delphi_utils.logger import get_structured_logger, pool_and_threadedlogger
def f(x, threaded_logger):
threaded_logger.info(f'x={x}')
return x*x
logger = get_structured_logger('my_logger')
logger.info('Hello, world!')
with pool_and_threadedlogger(logger, n_cpu) as (pool, threaded_logger):
for i in range(10):
pool.apply_async(f, args=(i, threaded_logger))
FAQs
Shared Utility Functions for Indicators
We found that delphi-utils demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
OpenGrep has restored fingerprint and metavariable support in JSON and SARIF outputs, making static analysis more effective for CI/CD security automation.
Security News
Security experts warn that recent classification changes obscure the true scope of the NVD backlog as CVE volume hits all-time highs.
Security Fundamentals
Attackers use obfuscation to hide malware in open source packages. Learn how to spot these techniques across npm, PyPI, Maven, and more.