Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Modules and tools useful for use with advanced data solutions on Google Ads, Google Marketing Platform and Google Cloud.
This is not an official Google product.
This repository contains modules and tools useful for use with advanced data solutions on Google Ads, Google Marketing Platform and Google Cloud. It is maintained by a team of Customer Solutions Engineers (CSE) and Data Scientists (DS) working within Google's Technical Solutions (gTech) Professional Services organization (gPS).
Contributions are highly encouraged; see CONTRIBUTING.md.
Install via pip:
pip install gps-building-blocks
The following assumes you have successfully created and started a clean
virtual environment. For more information, see the documentation for
venv
.
Install dependencies via pip:
#in gps_building_blocks root folder in the GitHub repo, clean virtualenv
cd py
pip install -r requirements.txt
IMPORTANT: Please verify that you update any external dependencies on
setup.py
. requirements.txt
should be
generated from setup.py
and not edited manually. See instructions below.
setup.py
and requirements.txt
both
contain a list of dependencies. Both of these list serve a similar purpose, but
differ in a fundamental way. Basically, setup.py
is used for dependency
management during deployment, and requirements.txt
is used for development.
setup.py
is edited manually and requirements.txt
is automatically generated
from the contents of setup.py
using pip-compile
setup.py
: When the user executes pip install gps-building-blocks
,
this package and all packages listed in setuptools.install_requires()` will
be installed. This list should not include any libraries needed for
development, and version requirements should generally be as generic as
possible to reduce the chance that the end user is installing multiple
versions of the same libraries.requirements.txt
: When the user executes pip install -r requirements.txt
,
all packages listed in the file will be installed. This command is generally
used when the user has cloned the project and is planning to modify it.
Therefore, requirements.txt
should include all packages that are necessary
to develop and test your code. Version requirements can be as strict as
necessary.If need to import a new package or update a dependency:
setup.py
.package_name==1.2.3
.pip-compile --allow-unsafe --generate-hashes --resolver=backtracking
to update
requirements.txt
.FAQs
Modules and tools useful for use with advanced data solutions on Google Ads, Google Marketing Platform and Google Cloud.
We found that gps-building-blocks demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.