Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Provides a Maybe
class which serves as a pseudo-implementation of null-aware operators in python:
var if var is not None else handle_none(var)
structuresTo install use pip:
$ pip install maybe-else
Or clone the repo:
$ git clone https://github.com/matthewgdv/maybe.git
$ python setup.py install
The simplest use-case is to wrap the value in the Maybe
class and call Maybe.else_()
with an alternative value. If the initial value was None
,
the alternative value will be returned. Otherwise the original value will be returned.
Maybe(None).else_("other") # "other"
Maybe("hi").else_("other") # "hi"
More complex uses involve chaining item/attribute access and method calls off the initial value.
If at any point an IndexError
or KeyError
(item access), AttributeError
(attribute access), or TypeError
(method call) is raised, the alternative value will be returned
upon calling Maybe.else_()
. Other exception classes are not caught by Maybe
(intentionally) and will have be to handled normally.
Maybe("hi").monkeyweasel[3].else_("other") # "other"
Maybe({"one": "1"})["one"].isnumeric().else_("other") # True
Most operators can be used with Maybe
. Actions involving operators will ignore TypeError
, but other types of exceptions will have to be handled outside the Maybe
construct.
(Maybe(8) / 2).else_("other") # 4.0
(Maybe("hi").upper() + "!").else_("other") # "HI!"
(Maybe(None) // 3).else_("other") # "other"
(Maybe(11) % 4).else_("other") # 3
If None would be returned as a result of operations performed on the Maybe
object, then None will be returned from Maybe.else_()
, rather than the alternative value.
This is because None
is a legitimate output value, so long as it was not the original input value.
Maybe({1: "1"}).get(2).else_("other") # None
The Maybe
class will be truthy whenever it would return what it is currently holding on calling Maybe.else_()
, and will be falsy when it would return the alternative.
Contributions are welcome, and they are greatly appreciated! Every little bit helps, and credit will always be given.
You can contribute in many ways:
Report bugs at https://github.com/matthewgdv/maybe/issues
If you are reporting a bug, please include:
Look through the GitHub issues for bugs. Anything tagged with "bug" and "help wanted" is open to whoever wants to implement a fix for it.
Look through the GitHub issues for features. Anything tagged with "enhancement" and "help wanted" is open to whoever wants to implement it.
The repository could always use more documentation, whether as part of the official docs, in docstrings, or even on the web in blog posts, articles, and such.
The best way to send feedback is to file an issue at https://github.com/matthewgdv/maybe/issues.
If you are proposing a new feature:
Before you submit a pull request, check that it meets these guidelines:
If the pull request adds functionality, it should include tests and the docs should be updated. Write docstrings for any functions that are part of the external API, and add the feature to the README.md.
If the pull request fixes a bug, tests should be added proving that the bug has been fixed. However, no update to the docs is necessary for bugfixes.
The pull request should work for the newest version of Python (currently 3.7). Older versions may incidentally work, but are not officially supported.
Inline type hints should be used, with an emphasis on ensuring that introspection and autocompletion tools such as Jedi are able to understand the code wherever possible.
PEP8 guidelines should be followed where possible, but deviations from it where it makes sense and improves legibility are encouraged. The following PEP8 error codes can be safely ignored: E121, E123, E126, E226, E24, E704, W503
This repository intentionally disallows the PEP8 79-character limit. Therefore, any contributions adhering to this convention will be rejected. As a rule of thumb you should endeavor to stay under 200 characters except where going over preserves alignment, or where the line is mostly non-algorythmic code, such as extremely long strings or function calls.
FAQs
Provides a Maybe class as a Python implementation of null-aware operators.
We found that maybe-else demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.