Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
jupyter-server-fileid
Advanced tools
Jupyter Server extension providing an implementation of the File ID service.
A Jupyter Server extension providing an implementation of the File ID service.
To install the extension, execute:
pip install jupyter_server_fileid
To remove the extension, execute:
pip uninstall jupyter_server_fileid
If you are seeing the frontend extension, but it is not working, check that the server extension is enabled:
jupyter server extension list
# Clone the repo to your local environment
# Change directory to the jupyter_server_fileid directory
# Install package in development mode - will automatically enable
# The server extension.
pip install -e .
You can watch the source directory and run your Jupyter Server-based application at the same time in different terminals to watch for changes in the extension's source and automatically rebuild the extension. For example, when running JupyterLab:
jupyter lab --autoreload
If your extension does not depend a particular frontend, you can run the server directly:
jupyter server --autoreload
Install dependencies:
pip install -e ".[test]"
To run the python tests, use:
pytest
# To test a specific file
pytest jupyter_server_fileid/tests/test_handlers.py
# To run a specific test
pytest jupyter_server_fileid/tests/test_handlers.py -k "test_get"
pip uninstall jupyter_server_fileid
See RELEASE
FAQs
Jupyter Server extension providing an implementation of the File ID service.
We found that jupyter-server-fileid demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.