Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
The Eclipse Zenoh: Zero Overhead Pub/sub, Store/Query and Compute.
Zenoh (pronounce /zeno/) unifies data in motion, data at rest and computations. It carefully blends traditional pub/sub with geo-distributed storages, queries and computations, while retaining a level of time and space efficiency that is well beyond any of the mainstream stacks.
Check the website zenoh.io and the roadmap for more detailed information.
This repository provides a Python binding based on the main Zenoh implementation written in Rust.
The Eclipse zenoh-python library is available on Pypi.org.
Install the latest available version using pip
:
pip install eclipse-zenoh
:warning:WARNING:warning: zenoh-python is developped in Rust.
On Pypi.org we provide binary wheels for the most common platforms (Linux x86_64, i686, ARMs, MacOS universal2 and Windows amd64). But also a source distribution package for other platforms.
However, for pip
to be able to build this source distribution, there are some prerequisites:
pip
version 19.3.1 minimum (for full support of PEP 517).
(if necessary upgrade it with command: 'sudo pip install --upgrade pip'
)zenoh-python has been tested with Python 3.8, 3.9, 3.10, 3.11 and 3.12
It relies on the zenoh Rust API which require the full std
library. See the list in Rust Platform Support.
:warning: WARNING :warning: : Zenoh and its ecosystem are under active development. When you build from git, make sure you also build from git any other Zenoh repository you plan to use (e.g. binding, plugin, backend, etc.). It may happen that some changes in git are not compatible with the most recent packaged Zenoh release (e.g. deb, docker, pip). We put particular effort in mantaining compatibility between the various git repositories in the Zenoh project.
Requirements:
Python >= 3.8
pip >= 19.3.1
(Optional) A Python virtual environment (for instance virtualenv or miniconda)
Rust and Cargo. If you already have the Rust toolchain installed, make sure it is up-to-date with:
rustup update
Steps:
Install developments requirements:
pip install -r requirements-dev.txt
Ensure your system can find the building tool maturin
(installed by previous step).
For example, it is placed at $HOME/.local/bin/maturin by default on Ubuntu 20.04.
export PATH="$HOME/.local/bin:$PATH"
Build and install zenoh-python:
With a virtual environment active:
maturin develop --release
Without one:
maturin build --release
pip install ./target/wheels/<there should only be one .whl file here>
You can install Zenoh Router first (See the instructions). Then, run the zenoh-python examples following the instructions in examples/README.md
FAQs
The python API for Eclipse zenoh
We found that eclipse-zenoh demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.