
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Cross platform replacement for EP-Launch for EnergyPlus, written in Python using the tkinter
graphics library.
The project is documented (currently very sparsely) using Sphinx, and automatically generated in html by ReadTheDocs.
The project is tested using standard Python unit testing practices. Each commit is automatically tested with Github Actions on Windows, Mac, Ubuntu 20.04 and Ubuntu 22.04. The code coverage across platforms is collected on Coveralls.
When a tag is created in the GitHub Repo, Github Actions builds a Python wheel and uploads it to PyPi: https://pypi.org/project/ep-launch/.
The packages can be downloaded using standard pip install energyplus-launch
commands.
Once Pip installed, desktop shortcuts and launchers can be configured using the energyplus-launch-configure
command from the same Python environment.
Basic development dependencies are installed with pip install -r requirements.txt
.
This cross platform GUI application is built around the tkinter framework, so no additional dependencies are needed for the GUI.
The application can be run by executing the module as python -m eplaunch
file.
To run the unit test suite, simply execute nosetests
.
Unit test results will appear in the console, and coverage results will be in a cover
directory.
FAQs
Graphical Interface and Workflow Manager for EnergyPlus
We found that energyplus-launch demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.