
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Enrich is a customizable, privacy law-aware enterprise Feature Store
of Scribble Data
_. This SDK is part of the feature store stack. It
enables local development, testing and documentation of simple to
complex feature transformations and other modules required for
building and managing robust features.
This is not for general purpose use. Please get in touch with us at hello@scribbledata.io to discuss potential use of this SDK.
For enterprise users of Enrich, the documentation is available on the server. Please see the Developer section.
.. _Scribble Data: https://www.scribbledata.io
Add to $HOME/.bashrc. Make sure you source ~/.bashrc before using::
function git_move_tag { git push origin; git tag -d $1; git tag $1 ; git push origin --tags --force }
function git_push { git push origin $1; git push origin $1 --tags ; git push origin $1 refs/notes/* }
function git_rm_tag { git push origin; git tag -d $1; git push --delete origin $1 }
Bump the version. Version is typically a.b.c::
workon dev cd scribble-enrichsdk # cd to the root
pip install bump2version
git tag -l
bumpversion patch # for updating c bumpversion minor # for updating b bumpversion major # for updating a
Push the changes to github::
git_push master
Update deployment version::
cd scribble-deploy-v2/configuration
vi defaults.json
git commit -a -m "Updated enrichsdk version"
git push origin
Install at customer::
cd scribble-deploy fab install_enrichsdk:role=demo
Upload to pypi.::
python3 setup.py sdist
twine upload -r pypi dist/enrichsdk-5.0.4.tar.gz
cat ~/.pypirc [pypi] username = token password = pypi-AgEIcHlwaS5v...
Known issues
The package dependencies are a jungle.Problematic packages include:
boto3 botocore aiobotocore jupyter-events nbconvert
Use the fix environment script to monkey-patch any dependencies in the worst case::
./bin/fix-environment.py
Usage: fix-environment.py [OPTIONS] COMMAND [ARGS]...
This package will help fix the environment
Options:
--help Show this message and exit.
Commands:
lib Fix a library dependency
FAQs
Enrich Developer Kit
We found that enrichsdk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.