Security News
Weekly Downloads Now Available in npm Package Search Results
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.
Python dependency injection library for your projects or for dependency injection in Django!!
The Injector API is a lightweight dependency injection library designed to simplify the management of dependencies in Python projects.
To install the Injector API, simply run the following pip command:
pip install injector-api
First, call configure
in your main file app configuration to set up the Injector API:
import injector_api
injector_api.initializate("your_directory_name_here")
If you specify "your_directory_name_here" (or any other directory name) as the directory for the Injector API to search, make sure that your main execution file is located in the same parent directory as "your_directory_name_here".
or
injectorConfig.json
Instead of directly using the initializate
method, you can also configure the library by creating an injectorConfig.json
at the root of your project. This file should specify the directory name:
{
"MODULE_APPLICATION": "your_directory_name_here"
}
Replace your_directory_name_here
with the name of the directory where your module.py
resides.
module.py
The module.py
file plays a pivotal role in the Injector API library structure. Here, you define and register the dependencies you wish to inject into your application.
To register dependencies, first import the container from the library. Then, use the register
method. This method takes the interface you wish to implement and its concrete implementation as arguments.
from injector_api.container import container # absolute routes, DO NOT USE RELATIVE ROUTES from application.src.interfaces import IExampleService,InterfaceWithoutOtherService import application
Your interfaces and classes here
container.register_module(application) container.register(IExampleService, implementation_name='ExampleServiceImpl1' ,override=True) container.register(IExampleService,implementation_name='ExampleServiceImpl2',override=True,lifecycle=SINGLETON ) container.register(InterfaceWithoutOtherService, implementation_name='WithoutOtherService')
# absolute routes, DO NOT USE RELATIVE ROUTES
from application.src.interfaces import IExampleService,InterfaceWithoutOtherService
from application.src.class import ExampleServiceImpl1,ExampleServiceImpl2,WithoutOtherService
import application
container.register_module(application)
container.register(IExampleService, ExampleServiceImpl1 ,override=True)
container.register(IExampleService,ExampleServiceImpl2,override=True,lifecycle=SINGLETON )
container.register(InterfaceWithoutOtherService, WithoutOtherService)
The override
parameter is optional and its default value is False
. If set to True
, it allows a new registration to replace an existing one for the specified interface. This is useful when you want to change the implementation for an interface without removing the previous registration manually.
With dependencies registered in module.py
, you can utilize the @inject
decorator to inject these dependencies into functions or methods.
from injector_api.dynamically import inject
""" Use @inject() only when specifying the type of implementation. For correct usage, employ @inject() with the format {interface:0}, where 0 corresponds to the first registered injection. Without specifying the type of implementation, simply use @inject """
@inject({IExampleService: 0}) def some_function(service: IExampleService): return service.do_something()
@inject def some_function_two(service: InterfaceWithoutOtherService): return service.do_something()
In the example above, the IExampleService
dependency will be injected into some_function
, granting access to its methods and properties.
module.py
Ensure the module.py
file is located in the directory you've specified in injectorConfig.json
. This file will be automatically read by the library during execution to load and manage dependencies.
In Django, call configure
in your app configuration:
from django.apps import AppConfig
import injector_api
class ApplicationConfig(AppConfig):
name = 'application' # Ensure to use the correct name of your app here
def ready(self):
"""
It should be intuited that the new_src must be in the same apps.py directory, with new_src being a dywan
"""
injector_api.initializate("application")
If in application/apps.py it doesn't work, try adding
default_app_config = 'application.apps.ApplicationConfig'
Use the common library as if it were your own project
If you're integrating the Injector API within a Django project, you have the option to use the ScopeMiddleware
to manage scoped dependencies. This middleware ensures that dependencies with a "scoped" lifecycle are correctly managed within the context of a web request.
However, do note that using scoped dependencies requires your Django application to run in a server mode where each request is handled by a separate thread or process (e.g., using gunicorn with threaded workers). Using scoped dependencies in a single-threaded server (like Django's default development server) might lead to unexpected behaviors.
To use the middleware, add it to your Django project's middleware list:
MIDDLEWARE = [
...
'path_to_your_library.ScopeMiddleware',
...
]
While the Injector API simplifies dependency management, there are potential security risks when using dynamic loading. We recommend the following precautions:
ScopeMiddleware
in Django, ensure your server is configured correctly for scoped dependencies.When considering the use of the Injector API library, it's essential to weigh the benefits against potential challenges. Here's our take:
In conclusion, we recommend the Injector API library for developers who understand the importance of dependency injection and are willing to adopt best practices to ensure security. However, as with any tool, it's crucial to understand its workings fully and be aware of potential pitfalls.
Contributions are welcome! Please submit pull requests or open issues on our GitHub repository.
This library is licensed under the MIT License. See the LICENSE
file for details.
FAQs
Python dependency injection library for your projects or for dependency injection in Django!!
We found that injector-api demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.
Security News
A Stanford study reveals 9.5% of engineers contribute almost nothing, costing tech $90B annually, with remote work fueling the rise of "ghost engineers."
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.