Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Python script to automatically lint new reviews to gerrit. Designed to be run from within Jenkins via the Gerrit Trigger plugin
Lint is a python package to assist with automatic code reviews. It provides the following tools:
Lint uses the environmental variables set by Gerrit Trigger to do almost all of the configuration. You can still use it via command-line (with options!) for manual testing.
You can also add a checkers to validators, which are simple functions to compare lint data that are passed to the validator.
pip install git+https://github.com/astraw38/Lint
For pylint, just use 'gpylinter.py'. It by default will use the 'Pylinter' plugin for .py files, as well as the default pylint validators.
Lint provides the ability to plugin your own Linter or Validator classes. All you need to do is run
.. code:: python
LintFactory.register_linter(NewLinter())
or
.. code:: python
ValidatorFactory.register_validator(NewValidator())
When you run 'run_linters()' or 'run_validators()', it'll pick them up and use them. Your new Linters should derive from BaseLinter, and your new Validators should derive from BaseValidator.
You can also customize the order of operations, or how comments/scores are posted to gerrit. Just look at gpylinter as an example.
FAQs
UNKNOWN
We found that lint demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.