
Security News
Node.js Homepage Adds Paid Support Link, Prompting Contributor Pushback
A new Node.js homepage button linking to paid support for EOL versions has sparked a heated discussion among contributors and the wider community.
This package contains utility functions used by devpi-server and devpi-client.
See http://doc.devpi.net for more information.
.. towncrier release notes start
__slots__
to reduce memory usage of Version
.Use filter='data'
for extractall
call on supported Python versions as additional guard to the existing out of path checks against malicious tar files.
Remove custom LegacyVersion
and use packaging-legacy
instead, which is also used by pypi.org.
is_prerelease
and other methods to LegacyVersion
to fix get_sorted_versions
with stable=True
and some other cases.None
from tox 4.x as failed.FAQs
Utilities jointly used by devpi-server, devpi-client and others.
We found that devpi-common demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
A new Node.js homepage button linking to paid support for EOL versions has sparked a heated discussion among contributors and the wider community.
Research
North Korean threat actors linked to the Contagious Interview campaign return with 35 new malicious npm packages using a stealthy multi-stage malware loader.
Research
Security News
The Socket Research Team investigates a malicious Python typosquat of a popular password library that forces Windows shutdowns when input is incorrect.