
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
A fancy plugin to boost up your logging with loguru
logoru-mypy
should be compatible with mypy>=0.770
.
Currently there is no limit as far as the compatibility can go. If you are interested to see
how far loguru_mypy
goes you can visit CI/CD action and check its
matrix.
Simply execute:
pip install loguru-mypy
And later on modify your mypy.ini
configuration file with
[mypy]
plugins = loguru_mypy
That is all, your code is now ready to be linted.
loguru-mypy
is obviously a mypy plugin that allows to avoid
some of those little runtime trickeries :).
Here is a short attempt to list some of those:
logger.opt(lazy=True)
in facts returns a logger
that we call lazy. Lazy loggers accept only
typing.Callable[[], t.Any]
in place of positional or named arguments. Passing a callable that
accepts even a single argument thus results in runtime error. loguru-mypy
detects that fact
and lets you know before your runtime reaches that portion of a code.
FAQs
Unknown package
We found that loguru-mypy demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.