Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Nava is a Python library that allows users to play sound in Python without any dependencies or platform restrictions. It is a cross-platform solution that runs on any operating system, including Windows, macOS, and Linux. Its lightweight and easy-to-use design makes Nava an ideal choice for developers looking to add sound functionality to their Python programs.
PyPI Counter | |
Github Stars |
Branch | main | dev |
Linux CI | ||
Windows CI | ||
macOS CI |
Code Quality |
pip install nava==0.7
pip install .
conda update conda
conda install -c openscilab nava
from nava import play
play("alarm.wav")
⚠️ The async_mode
parameter has a default value of False
import time
from nava import play, stop
sound_id = play("alarm.wav", async_mode=True)
time.sleep(4)
stop(sound_id)
⚠️ The loop
parameter has a default value of False
⚠️ You should always set async_mode
flag when you are using loop
from nava import play, stop
sound_id = play("alarm.wav", async_mode=True, loop=True)
time.sleep(100)
stop(sound_id)
from nava import play, NavaBaseError
try:
play("alarm.wav")
except NavaBaseError as e:
print(str(e))
⚠️ The engine
parameter has a default value of AUTO
from nava import play, Engine
sound_id = play("alarm.wav", engine=Engine.AFPLAY)
$ nava [--file FILE_PATH] [--loop] FILE_PATH
List of different platforms and the corresponding engines that are used for sound playing.
Engine | Platform | References | Supported Formats |
---|---|---|---|
ALSA | Linux | Advanced Linux Sound Architecture | .wav |
WINSOUND | Windows | Winsound | .wav |
AFPLAY | macOS | Audio File Play | .wav ,.mp3 |
Just fill an issue and describe it. We'll check it ASAP! or send an email to nava@openscilab.com.
You can also join our discord server
Give a ⭐️ if this project helped you!
If you do like our project and we hope that you do, can you please support us? Our project is not and is never going to be working for profit. We need the money just so we can continue doing what we do ;-) .
All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog and this project adheres to Semantic Versioning.
Python 3.13
added to testsengine
parameter added to play
functionengine
parameter added to NavaThread
classREADME.md
modifiedNavaThread
exception bug fixed__play_win
function renamed to __play_winsound
__play_mac
function renamed to __play_afplay
__play_linux
function renamed to __play_alsa
play_cli
functionSECURITY.md
main
function updatedREADME.md
modifiedloop
parameter added to play
functionNavaThread
class modifiedREADME.md
modifiedfeature_request.yml
templateconfig.yml
for issue templateNavaThread.stop
method bug fixedREADME.md
modifiedNavaThread
classstop
functionstop_all
functionasync_mode
parameter added to play
functionREADME.md
modifiedPython 3.12
added to linux_test.yml
, macOS_test.yml
and windows_test.yml
quote
decorator bug fixedpath_check
decorator bug fixedREADME.md
modifiedREADME.md
__play_win
function__play_linux
function__play_mac
functionquote
functionpath_check
functionplay
functionFAQs
A Python library for playing sound everywhere natively and securely.
We found that nava demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.