Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Django app template, using poetry-python
as dependency manager.
This project is a template that can be cloned and re-used for redistributable apps.
It includes the following:
poetry
for dependency managementisort
, black
, pyupgrade
and flake8
lintingpre-commit
to run lintingmypy
for type checkingtox
and Github Actions for builds and CIThere are default config files for the linting and mypy.
The motivation for this project is to provide a consistent set of standards across all YunoJuno public Python/Django projects. The principles we want to encourage are:
black
, isort
, flake8
)pyupgrade
)mypy
)We currently support Python 3.7+, and Django 3.2+. We will aggressively upgrade Django versions, and we won't introduce hacks to support breaking changes - if Django 4 introduces something that 2.2 doesn't support we'll drop it.
The package tests themselves are outside of the main library code, in
a package that is itself a Django app (it contains models
, settings
,
and any other artifacts required to run the tests (e.g. urls
).) Where
appropriate, this test app may be runnable as a Django project - so that
developers can spin up the test app and see what admin screens look
like, test migrations, etc.
The tests themselves use pytest
as the test runner. If you have
installed the poetry
evironment, you can run them thus:
$ poetry run pytest
or
$ poetry shell
(my_app) $ pytest
The full suite is controlled by tox
, which contains a set of
environments that will format, lint, and test against all
support Python + Django version combinations.
$ tox
...
______________________ summary __________________________
fmt: commands succeeded
lint: commands succeeded
mypy: commands succeeded
py37-django22: commands succeeded
py37-django32: commands succeeded
py37-djangomain: commands succeeded
py38-django22: commands succeeded
py38-django32: commands succeeded
py38-djangomain: commands succeeded
py39-django22: commands succeeded
py39-django32: commands succeeded
py39-djangomain: commands succeeded
There is a .github/workflows/tox.yml
file that can be used as a
baseline to run all of the tests on Github. This file runs the oldest
(2.2), newest (3.2), and head of the main Django branch.
FAQs
Django app,to sync feishu contacts to ldap.
We found that lark2ldap demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.