Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Manokit is a simple, fully native library for sending emails. It provides an easy-to-use API for creating and sending emails, as well as offers a very customizable structure.
Manokit provides 2 modules: the base module name manokit
, where the Email
base class is defined, and a module called manokit.exceptions
where custom exceptions, used by manokit, are defined.
Manokit can be installed from the PyPI using the following command:
pip install manokit
You can also download the package from the releases section, or assemble it from source.
Manokit has reached a point of version separation. Manokit v2's API has been overhauled to provide a more consistent and predictable experience.
These changes include:
See additional info in our Changelog.
All these changes and updates are aimed at bringing a more pleasant experience to the end user, but they break compatibility. If you are currently using manokit and want to upgrade, make sure to update your codebase accordingly.
This section describes the parts of Manokit, and how to use them.
The Email
class is where all the functionality resides.
To begin working with Manokit, simply import the Email
class and create an instance.
from manokit import Email
email = Email(smtp_host="smtp.gmail.com", smtp_port=587)
During initialization you can also adjust the attachment size limit (see attachment size limit for details), by specifying the new limit in bytes, like this:
from manokit import Email
small_email = Email("smtp.gmail.com", 587, filesize_limit=100)
In the example above we have reduced the attachment size limit from 25 MB to 100 bytes.
In order to send an email, the client must first authenticate themselves with their SMTP server. Using Manokit, the authentication process looks like this:
from manokit import Email
email = Email("smtp.gmail.com", 587)
email.login(username="manokit@gmail.com", password="manokit_is_cool")
This example passes the credentials as plain text for the sake of illustration. Please use environment variables/other secure ways of storing credentials when logging in!
As of May 30, 2022, Google introduced some changes to their API that now require users to have an App Password. Manokit supports logging in with your App Password. Just pass your App Password instead of your regular password, like this:
from manokit import Email
email = Email("smtp.gmail.com", 587)
email.login(username="manokit@gmail.com", password="ccfv jels tttm hshe")
By default, Manokit uses STARTTLS to encrypt the communication and make it more secure. If you would like to use SSL instead, simply disable STARTTLS during authentication and updating the port.
from manokit import Email
email = Email("smtp.gmail.com", 465)
email.login(
username="manokit@gmail.com",
password="manokit_is_cool",
use_starttls=False,
)
Manokit does not support unencrypted communication over SMTP port 25.
After you have finished with Manokit, you need to call logout()
function to close the SMTP session.
from manokit import Email
email = Email("smtp.gmail.com", 465)
email.login(
username="manokit@gmail.com",
password="manokit_is_cool",
use_starttls=False,
)
# Your email stuff
email.logout()
To add an email address to the list of recipients, simply call the appropriate function:
from manokit import Email
email = Email("smtp.gmail.com", 587)
email.login(username="manokit@gmail.com", password="manokit_is_cool")
email.add_recipient("buddy@examplecorp.com")
email.logout()
For now, you can add recipients one at a time, so for each one you need to call the add_recipient
function separately.
If you want to CC a person instead, replace the add_recipient
function with add_cc
:
from manokit import Email
email = Email("smtp.gmail.com", 587)
email.login(username="manokit@gmail.com", password="manokit_is_cool")
email.add_recipient("boss@examplecorp.com") # This is important
email.add_cc("buddy@examplecorp.com")
email.logout()
However, make sure to add at least one recipient, or else the email will not be sent.
Same thing for BCC:
from manokit import Email
email = Email("smtp.gmail.com", 587)
email.login(username="manokit@gmail.com", password="manokit_is_cool")
email.add_recipient("boss@examplecorp.com")
email.add_bcc("spy@rivalcorp.com")
email.logout()
It is important to know that if you try to add an email address to either recipients, CC, or BCC when it already is added to one of them, these function will have no effect.
from manokit import Email
email = Email("smtp.gmail.com", 587)
email.login(username="manokit@gmail.com", password="manokit_is_cool")
email.add_recipient("buddy@examplecorp.com")
email.add_cc("buddy@examplecorp.com")
print(len(email.rec)) # Output: 1
print(len(email.cc)) # Output: 0
email.logout()
A simple email consists of a subject and a body. Both of these things are set by Manokit's set_subject
and set_body
functions, respectively.
from manokit import Email
email = Email("smtp.gmail.com", 587)
email.login(username="manokit@gmail.com", password="manokit_is_cool")
email.add_recipient("buddy@examplecorp.com")
email.set_subject("Manokit is kinda cool!")
email.set_body("Hey, you heard about that library called Manokit? I tried it and it is nice ngl. Give it a try!")
email.logout()
The use of these functions is not compulsory, however. Manokit defaults the subject and the body to <no subject>
and <no body>
, respectively.
Manokit encodes the body of an email as text/html
, rather than text/plain
. This allows you to use HTML markup for styling and emphasis.
By default, Manokit will validate user emails in certain cases (e.g. adding recipients, logging in, adding addresses to CC and BCC, etc) using a general-purpose regular expression.
Specifically, the regular expression used is this one: ^[-_+.\d\w]+@[-_+\d\w]+(?:\.{1}[\w]+)+$
However, if you find this validation mechanism unsuitable for their needs, like if you need to limit the domain that can be used, you can easily override it by providing your own validation logic.
The validator must be callable that accepts a single parameter of type str
and returns a value of type bool
. Validator type: Callable[[str], bool]
from manokit import Email
def better_email_validator(addr: str) -> bool:
return addr.endswith("@our_company.com")
email = Email("smtp.gmail.com", 587)
email.login(username="you@our_company.com", password="manokit_is_cool")
email.set_custom_email_validator(better_email_validator)
email.add_recipient("buddy@our_company.com") # This will pass
email.add_bcc("spy@rival_corp.com") # This will raise an exception
Manokit also implements validation scopes. That means that, if you want to apply your custom validator only to certain parts, e.g. only to people who are BCC'd into the email, you can do it.
from manokit import Email
def check_who_is_in_bcc(addr: str) -> bool:
return addr.endswith("@our_company.com")
email = Email("smtp.gmail.com", 587)
email.login(username="you@our_company.com", password="manokit_is_cool")
email.set_custom_email_validator(check_who_is_in_bcc, scopes=["bcc"])
email.add_recipient("client@clientperonal.org") # This will pass
email.add_cc("clientswife@gmail.com") # This will also pass
email.add_bcc("spy@rival_corp.com") # This will raise an exception
Available scopes:
all
-- apply your validation rules to all addresses. This is the default option used by Manokitauthor
-- apply your validation rules only to the sender's email. This validator will be applied during login()
, so the setter needs to be called before thatrecipients
-- apply your validation rules only to recipients' addressescc
-- apply your validation rules only to addresses that will be CC'd into the emailbcc
-- apply your validation rules only to addresses that will be BCC'd into the emailSometimes we need to send an email with a file attached to it. To attach the file to your email, simply call the add_attachment
function and provide a path to the file.
from manokit import Email
email = Email("smtp.gmail.com", 587)
email.login(username="manokit@gmail.com", password="manokit_is_cool")
email.add_recipient("boss@examplecorp.com")
email.add_attachment("./reports/quarterly_q3_q4.pdf")
email.logout()
Just as with add_recipient
, add_bcc
and add_cc
, the add_attachment
function adds one file at a time.
If an attachment has already been added, or if the size of the file being attach is 0, the function will have no effect.
from manokit import Email
email = Email("smtp.gmail.com", 587)
email.login(username="manokit@gmail.com", password="manokit_is_cool")
email.add_recipient("boss@examplecorp.com")
email.add_attachment("./reports/empty_report.pdf")
print(len(email.attachments)) # Output: 0
email.logout()
By default, Manokit limits the combined size of the attachments to 25 MB (can be adjusted during the Initialization).
Manokit also maintains an internal counter of how much space is available for future attachments.
from manokit import Email
email = Email("smtp.gmail.com", 587, filesize_limit=100)
email.login(username="manokit@gmail.com", password="manokit_is_cool")
email.add_recipient("boss@examplecorp.com")
email.add_attachment("./reports/40kb_report.txt")
print(email.available_filesize) # Output: 60
email.logout()
If the attachment's size exceeds the limit, an AttachmentError
will be raised.
To send an email, just call send()
from manokit import Email
email = Email("smtp.gmail.com", 587)
email.login(username="manokit@gmail.com", password="manokit_is_cool")
email.add_recipient("buddy@examplecorp.com")
email.add_cc("buddy@examplecorp.com")
email.send()
email.logout()
This function can raise an EmailError
if no recipients are defined or there was a problem while sending an email.
Manokit's functions support method chaining
from manokit import Email
email = Email("smtp.gmail.com", 587)
email.login(
username="manokit@gmail.com",
password="manokit_is_cool",
).add_recipient("buddy@examplecorp.com")
.add_cc("buddy@examplecorp.com")
.send()
.logout()
The logout()
function, however, is considered a logical endpoint, and thus does not support method chaining. In other words, the logout()
function must be the last to be called.
This exception is raised when the email address fails validation.
Functions that can raise it:
login()
add_recipient()
add_cc()
add_bcc()
This exception is raised when there is a problem with the email itself. For now this exception is only raised by the send()
function if there is no recipients or if there was a problem with sending an email
This exception is raised when there is a problem with email's attachments. for now this exception is only raised by the add_attachment()
function if the path provided does not point to a file or the attachment's size is larger that the available space.
See the full changelog here.
FAQs
An easy-to-use, purely native email sender
We found that manokit demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.