Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
ehelply-bootstrapper
Advanced tools
Bootstrapper is used to quickly establish generic microservices.
Bootstrapper takes care of several tedious and menial microservice tasks including:
The quick and dirty answer is probably. eHelply is using Bootstrapper to power all of our microservices. For this reason, this project continues to mature and evolve over time. At this point, we would consider it to be reasonably stable. By no means is it feature complete, and it is possible for breaking changes to be introduced in the near or long term, but we don't expect the Bootstrapper to fail in production scenarios at this time.
In addition to this information, eHelply plans to launch microservices into production in late 2020 or early 2021, so we would expect this project to be officially production ready at that point in time.
The goal of Bootstrapper is to be a generic microservice bootstrapper. This means that it should provide value to any company, organization, or individual that wishes to utilize it. For this reason, all contributions must also be generic and refrain from opinionated choices.
Since eHelply is sponsoring the development of this project, it is unlikely that breaking changes would be accepted and merged in from third parties. However, we always welcome new (non-breaking) additions and bug fixes. And, who knows, if your breaking change is necessary, it will be merged in.
pytest
pytest --cov=ehelply_bootstrapper
poetry cache clear pypi --all
poetry add fastapi@latest pymongo@latest redis@latest python-socketio@latest sentry-asgi@latest boto3@latest pymysql@latest SQLAlchemy@latest alembic@latest wheel@latest bcrypt@latest python-jose@latest pyjwt@latest passlib@latest cryptography@latest pyopenssl@latest typer@latest GitPython@latest python-multipart@latest email-validator@latest requests@latest python_dateutil@latest python-slugify@latest isodate@latest pymlconf@latest pylint@latest ehelply-logger@latest ehelply-batcher@latest ehelply-cacher@latest uvicorn@latest hiredis@latest pytest-cov@latest pytest-asyncio@latest pdoc3@latest
FAQs
Unknown package
We found that ehelply-bootstrapper demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.