![Maven Central Adds Sigstore Signature Validation](https://cdn.sanity.io/images/cgdhsj6q/production/7da3bc8a946cfb5df15d7fcf49767faedc72b483-1024x1024.webp?w=400&fit=max&auto=format)
Security News
Maven Central Adds Sigstore Signature Validation
Maven Central now validates Sigstore signatures, making it easier for developers to verify the provenance of Java packages.
logging-toolbox
The logging-toolbox
module contains useful functions to help the user
with logging recurring things like command-line arguments and dependencies
on startup.
Suppose we have a Python program that has the dependencies dep1
and dep2
,
and takes the command-line arguments --server-url
, --one-argument
and
--some-hex-value
. We'll assume the module the program is a part of is
called simple_program
. Upon startup, we can log the versions of our
dependencies and all arguments.
from .utils import get_args, setup_logging
from logging_toolbox.startup import startup_log
from logging_toolbox.utils import clean_url
if __name__ == '__main__':
arguments = get_args()
setup_logging()
startup_log(arguments,
critical_modules=['simple_program', 'dep1', 'dep2'],
cleaners={'server_url': clean_url,
'some_hex_value': '0x{:04X}'.format})
This should log something like:
=================CONFIG=================
----------------Versions----------------
simple_program : UNKNOWN
dep1 : 0.3.2.dev23
dep2 : 1.0.1
---------------Arguments----------------
one_argument : argument value
server_url : https://user:******@server/
some_hex_value : 0x02FF
=======================================
FAQs
logging-toolbox
We found that logging-toolbox demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Maven Central now validates Sigstore signatures, making it easier for developers to verify the provenance of Java packages.
Security News
CISOs are racing to adopt AI for cybersecurity, but hurdles in budgets and governance may leave some falling behind in the fight against cyber threats.
Research
Security News
Socket researchers uncovered a backdoored typosquat of BoltDB in the Go ecosystem, exploiting Go Module Proxy caching to persist undetected for years.