
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
isogeo-scan-metadata-processor
Advanced tools
Command-line to read metadata produced by FME scripts of Isogeo Scan, convert it into Isogeo model, apply rules and export it to a database or Isogeo.
Middleware used to process metadata issued by Isogeo Scan.
Available as:
# create virtual env
py -3.7 -m venv .venv
# activate it
.\.venv\Scripts\activate
# update basic tooling
python -m pip install -U pip setuptools wheel
# install requirements
python -m pip install -U -r ./requirements.txt
# install package for development
python -m pip install --editable .
.env.example
into .env
and fill the settingsFor example, get the help:
scan-metadata-processor --help
Check:
# for all default formats
scan-metadata-processor --label "CheckProcessConfig" --settings .\.env check
Process metadata:
scan-metadata-processor --label "ProcessInputMetadata" --settings .\.env process
There is also a clean task to automatically remove outdated logs and output files:
scan-metadata-processor --label "CleanLogs" --settings .\.env clean
Just replace scan-metadata-processor
by the executable filename:
.\Isogeo_ScanMetadataProcessor.exe --label "ProcessInputMetadata" --settings .\.env process
Every tagged commit pushed to master
triggers a deployment to:
FAQs
Command-line to read metadata produced by FME scripts of Isogeo Scan, convert it into Isogeo model, apply rules and export it to a database or Isogeo.
We found that isogeo-scan-metadata-processor demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.