![Maven Central Adds Sigstore Signature Validation](https://cdn.sanity.io/images/cgdhsj6q/production/7da3bc8a946cfb5df15d7fcf49767faedc72b483-1024x1024.webp?w=400&fit=max&auto=format)
Security News
Maven Central Adds Sigstore Signature Validation
Maven Central now validates Sigstore signatures, making it easier for developers to verify the provenance of Java packages.
gravatarcontacts-cmenon12
Advanced tools
A package to copy Gravatar profile pictures to your Google Contacts.
This is a Python package to copy Gravatar profile pictures to your Google Contacts.
When run as a script (by running __main__.py
) the program will first ask a user to grant the Google Cloud Platform app access to their contacts in their Google Account. It will then download all of their contacts and remove those that don't have an email address and a name.
For each email address in each contact it will attempt to download the corresponding Gravatar photo. If a Gravatar photo is found for that contact then it will update the contact with that photo. If there are multiple possible Gravatar photos (due to a contact having multiple email addresses) then a GUI will be presented to choose one. The user is notified which contacts have been updated, and those contacts have the custom Gravatar Photo
field set to "True"
(so that the program can safely update them in the future).
This program will not update contacts that already have a user-supplied photo that didn't previously come from Gravatar.
You can install it using pip install gravatarcontacts-cmenon12
.
Note that the versions specified here are what I have been running it on, it may well work on older versions.
You will need to create your own Google Cloud Platform Project, enable the People API, and create & download some OAuth 2.0 Client ID credentials as credentials.json
.
If you've not used Google Cloud Platform before then you can do all of this really easily by clicking on the large blue button labelled Enable the People API
here. Choose to create a Desktop app
and as per the instructions there in the resulting dialog click DOWNLOAD CLIENT CONFIGURATION and save the file credentials.json
to where you're working. You mustn't share credentials.json
or token.pickle
with anyone.
Use of the Google People API is (at the time of writing) free.
Creating your own project helps to keep your contacts safe because you control the app that is asking to access them (and you can see my all of my source code here). You can stop your app accessing your contacts by revoking it at https://myaccount.google.com/permissions.
python -m gravatarcontacts
will run the program after installation. Where necessary, the browser window and GUI will open automatically so this program should be run locally (and not over SSH for example).
FAQs
A package to copy Gravatar profile pictures to your Google Contacts.
We found that gravatarcontacts-cmenon12 demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Maven Central now validates Sigstore signatures, making it easier for developers to verify the provenance of Java packages.
Security News
CISOs are racing to adopt AI for cybersecurity, but hurdles in budgets and governance may leave some falling behind in the fight against cyber threats.
Research
Security News
Socket researchers uncovered a backdoored typosquat of BoltDB in the Go ecosystem, exploiting Go Module Proxy caching to persist undetected for years.