
Research
npm Malware Targets Telegram Bot Developers with Persistent SSH Backdoors
Malicious npm packages posing as Telegram bot libraries install SSH backdoors and exfiltrate data from Linux developer machines.
Automatically generate docstrings for your python functions
Requires python 3.6+
NOTE THAT, if you are getting an error (in a fresh virtualenv in ubuntu it is observed) like error: invalid command 'bdist_wheel'
then please install wheel by doing pip install wheel
ALSO NOTE that if you are getting an error to build tree-sitter because you do not have gcc installed then you can install it using sudo apt-get install gcc python3-dev
for other distros please check here
First install setuptools-rust by
pip install setuptools-rust
Then
pip install docly
To generate comments -
docly-gen /path/to/file_or_folder_with_python_files
Please note that if you do not have the necessary engine (models) downloaded before running the command (which is going to be case the first time you run this command) then it will download and set them up. Which may take a bit of time
It will produce something like this (Shown on a single file but you can run it on a directory full of files also)
The diff has been generated, do you want to see the suggestions for missing Docstrings? [Y/n]
Y
+-----------------+------------------------------+---------------------------------------+
| File Name | Function Name | Docstring |
+-----------------+------------------------------+---------------------------------------+
| simple_funcs.py | add | Add two numbers . |
| simple_funcs.py | check_if_even | Checks if number is even . |
| simple_funcs.py | check_even_numbers_in_a_list | Return list of numbers in base_list . |
| simple_funcs.py | open_file | Open a file . |
+-----------------+------------------------------+---------------------------------------+
Do you want to apply the suggestions? [Y/n]
Y
Applying diff
Diff applied. Good bye!
Instead if you just want the above report and not to apply the chages then do this -
docly-gen --no_generate_diff --print_report /path/to/file_or_folder_with_python_files
If you want to revert the changes we applied then use
docly-restore
This will bring back ALL the files that we had touched to the exact state before we applied the changes
FAQs
Generate docstrings for your python functions. Automatically!
We found that docly demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Malicious npm packages posing as Telegram bot libraries install SSH backdoors and exfiltrate data from Linux developer machines.
Security News
pip, PDM, pip-audit, and the packaging library are already adding support for Python’s new lock file format.
Product
Socket's Go support is now generally available, bringing automatic scanning and deep code analysis to all users with Go projects.