Security News
New Python Packaging Proposal Aims to Solve Phantom Dependency Problem with SBOMs
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
Banjo is an abstraction over django which provides a simplified subset of django's functionality, meant for beginners. All the django documentation can be used for reference, and many django patterns are replicated here.
The purpose of Banjo is to introduce databases as a persistence layer behind an API server, while abstracting away details for which students are not yet ready and creating as few misconceptions as possible. Banjo should be thought of as scaffolding; when they are ready, students should be able to seamlessly transition to django.
Specific concepts which we target for simplification include:
models.py
and
views.py
.banjo
, which
effectively runs django's makemigrations
, migrate
, and runserver
in sequence.
banjo --shell
enters the REPL with all user-defined models loaded.from_dict
(class method) and to_dict
(instance method) helpers.Banjo was designed for use by teachers familiar with django; this is intentionally a leaky abstraction which provides a structured introduction into the power and the complexity of the underlying system.
Banjo can be installed with pip install django-banjo
.
To write a Banjo app, create a folder called app
, define models in models.py
and
define views in views.py
. Here's a simple example.
First, we define our models. Banjo provides five field types:
BooleanField
(True
, False
)IntegerField
(1
, -102
)FloatField
(0.045
, 11.5
)StringField
("alligator"
, "hazelnut"
)ForeignKey
(An instance of another model)Create a Model for each object your app will interact with.
# app/models.py
from banjo.models import Model, StringField
class Animal(Model):
name = StringField()
sound = StringField()
Next we define our views. Each view is a function which receives a dict (called
params
in the example below) and which must return a dict. Use the
banjo.urls.route_get
and banjo.urls.route_post
decorators to route URLs to
your view functions.
# app/views.py
from banjo.urls import route_get, route_post
from app.models import Animal
@route_post('newanimal', args={'name': str, 'sound': str})
def add_animal(params):
animal = Animal.from_dict(params)
animal.save()
return animal.to_dict()
@route_get('listen')
def list_animal_sounds(params):
sounds = []
for animal in Animal.objects.all():
sounds.append('{} says {}'.format(animal.name, animal.sound))
return {'sounds': sounds}
Some views, such as "newanimal," require arguments. When a view requires arguments,
pass an args
dict to the decorator to specify the expected names and types of arguments.
Argument types must be str
, bool
, int
, or float
.
If something goes wrong and it's the client's fault, you can raise an error.
For example, you might add another view to app/views.py
:
from banjo.http import Forbidden
@route_get('secrets')
def do_not_show_the_secrets(params):
raise Forbidden("Nice try.")
Again, from the command line:
$ http GET localhost:5000/secrets
HTTP/1.1 403 Forbidden
{
"error": "Nice try."
}
The following errors are available in banjo.http
:
BadRequest
(400)Forbidden
(403)NotFound
(404)NotAllowed
(405)ImATeapot
(418)Now you can run banjo
from the directory containing the app
folder and the server
will start. Use the --port
command to serve from a custom port; the default is
5000.
Banjo provides a visual API browser at /api
.
Here is an example of interacting with this app using the httpie
command-line
utility:
$ http localhost:5000/newanimal name=elehpant sound=pffffftttttt
{
"id": 1,
"name": "elephant",
"sound": "pffffftttttt"
}
$ http localhost:5000/newanimal name=squirrel sound=chcheee
{
"id": 2,
"name": "squirrel",
"sound": "chcheee"
}
$ http localhost:5000/listen
{
"sounds": [
"elephant says pffffftttttt",
"squirrel says chcheee"
]
}
You can also interact with your app's models from a Python shell. Just pass the
--shell
argument to banjo:
$ banjo --shell
> Animal.objects.count()
2
FAQs
A simplified abstraction over django for beginners.
We found that django-banjo demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
Security News
Socket CEO Feross Aboukhadijeh discusses open source security challenges, including zero-day attacks and supply chain risks, on the Cyber Security Council podcast.
Security News
Research
Socket researchers uncover how threat actors weaponize Out-of-Band Application Security Testing (OAST) techniques across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.