Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Extensible HTML/XML generator, cross-platform templating language, Oracle utilities and various other tools
XIST provides an extensible HTML and XML generator. XIST is also a XML parser with a very simple and pythonesque tree API. Every XML element type corresponds to a Python class and these Python classes provide a conversion method to transform the XML tree (e.g. into HTML). XIST can be considered 'object oriented XSLT'.
XIST also includes the following modules and packages:
ll.ul4c
is compiler for a cross-platform templating language with
similar capabilities to Django's templating language
__. UL4
templates
are compiled to an internal format, which makes it possible to implement
template renderers in other languages and makes the template code "secure"
(i.e. template code can't open or delete files).
__ https://docs.djangoproject.com/en/1.5/topics/templates/
There are implementations for Python, Java and Javascript.
ll.ul4on
provides functions for encoding and decoding a lightweight
machine-readable text-based format for serializing the object types supported
by UL4. It is extensible to allow encoding/decoding arbitrary instances
(i.e. it is basically a reimplementation of pickle
, but with string
input/output instead of bytes and with an eye towards cross-plattform
support).
There are implementations for Python, Java and Javascript.
ll.orasql
provides utilities for working with cx_Oracle_:
It allows calling functions and procedures with keyword arguments.
Query results will be put into Record objects, where database fields are accessible as object attributes.
The Connection
class provides methods for iterating through the
database metadata.
Importing the modules adds support for URLs with the scheme oracle
to
ll.url
.
.. _cx_Oracle: https://oracle.github.io/python-cx_Oracle/
ll.make
is an object oriented make replacement. Like make it allows
you to specify dependencies between files and actions to be executed
when files don't exist or are out of date with respect to one
of their sources. But unlike make you can do this in a object oriented
way and targets are not only limited to files.
ll.color
provides classes and functions for handling RGB color values.
This includes the ability to convert between different color models
(RGB, HSV, HLS) as well as to and from CSS format, and several functions
for modifying and mixing colors.
ll.sisyphus
provides classes for running Python scripts as cron jobs.
ll.url
provides classes for parsing and constructing RFC 2396
compliant URLs.
ll.nightshade
can be used to serve the output of PL/SQL
functions/procedures with CherryPy__.
ll.misc
provides several small utility functions and classes.
ll.astyle
can be used for colored terminal output (via ANSI escape
sequences).
ll.daemon
can be used on UNIX to fork a daemon process.
ll.xml_codec
contains a complete codec for encoding and decoding XML.
The code has been updated to use X | Y
for union types in some type
annotations, so Python 3.10 is required now.
ll.orasql
has been updated to use oracledb
.
Instead of clientinfo
ll.orasql
now automatically includes
the running script in program
. If you don't want that (for example
when the path includes characters that are not allowed, so you get
DPY-3029
), pass program=None
(or your own custom value).
The SQL output by ll.orasql.Job.dropsql
now includes the argument
p_force=>true
, so a job can be dropped even if it is currently running.
UL4 gained the type operator.itemgetter
.
FAQs
Extensible HTML/XML generator, cross-platform templating language, Oracle utilities and various other tools
We found that ll-xist demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.