Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
This is a plugin for Flake8 that will emulate pylint json output.
.. code-block:: bash
pip install flake8-for-pycharm
flake8 will be automaitcally installed in the same enviroment.
To validate installation run flake8_pycharm.py --help-msg=E1101
.
Output should look like that:
.. code-block::
:no-member (E1101): *%s %r has no %r member%s*
Used when a variable is accessed for an unexistent member. This message
belongs to the typecheck checker.
pylint will also be installed because pycharm plugin refuses to work if it's not installed.
flake8_pycharm.py
in your python environment (in linux use command which flake8_pycharm.py
)If you want support for both pylint and flake8, you'll need to add --with-pylint
parameter.
In PyCharm, add this value in the Arguments
field in pylint settings page.
Initially Pycharm call pylint with the following arguments
.. code-block:: bash
pylint --help-msg=E1101
Once this command has succeeded, it assumes that pylint is installed and starts using it with command like that.
.. code-block:: bash
pylint --rcfile=pylintrc -f json my_file.py
The flake8_pycharm.py
script understand those pylint arguments,
query flake8 accordingly and return result in same format that pylint produces.
If you did everything correctly but pycharm kept complaining about pylint being not installed, you might have to install it anyway. It's a bug reported by a colleague but I wasn't able to reproduce it locallay.
If you received errors from pycharm, you can try to run the command manually to see if it's producing errors.
.. code-block:: bash
flake8_pycharm.py --rcfile=<your flake8 configuration> -f json my_file.py
FAQs
Add flake8 support to pycharm. See README for how to use.
We found that flake8-for-pycharm demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.