
Product
Introducing the Alert Details Page: A Better Way to Explore Alerts
Socket's new Alert Details page is designed to surface more context, with a clearer layout, reachability dependency chains, and structured review.
omdev
Advanced tools
Development utilities and support code.
cli - The codebase's all-in-one CLI. This is not
installed as an entrypoint / command when this package is itself installed - that is separated into the omdev-cli
installable package so as to not pollute users' bin/ directories when depping this lib for its utility code.
amalg - The amalgamator.
pyproject
(amalg) - python project management tool.
wrangles but does not replace tools like venv, pip, setuptools, and uv. does things like sets up venvs, generates
.pkg directories and their pyproject.toml's (from their
__about__.py's), and packages them. this should grow to eat more and more of the Makefile. as it is amalgamated it
requires no installation and can just be dropped into other projects / repos.
ci
(amalg) - ci runner. given a
compose.yml
and requirements.txt files, takes care of building and caching of containers and venvs and execution of required ci
commands. detects and natively uses
github-action's caching system. unifies ci execution between local dev and github runners.
tools.json (cli: om j) - a tool for json-like
data, obviously in the vein of jq but using the internal
jmespath engine. supports
true streaming json input and output, as
well as various other non-streaming input
formats.
tools.git (cli: om git) - a tool for various lazy
git operations, including the one that (poorly) writes all of these commit messages.
Amalgamation is the process of stitching together multiple python source files into a single self-contained python script. 'lite' code is written in a style conducive to this.
Some of this code, when asked, will store things on the local filesystem. The only directories used (outside of ones explicitly specified as command or function arguments) are managed in home.paths, and are the following:
$OMLISH_HOME, default of ~/.omlish - persistent things like config and state.$OMLISH_CACHE, default of ~/.cache/omlish - used for things like the local ci cache and
various other cached data.FAQs
omdev
We found that omdev demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Socket's new Alert Details page is designed to surface more context, with a clearer layout, reachability dependency chains, and structured review.

Product
Campaign-level threat intelligence in Socket now shows when active supply chain attacks affect your repositories and packages.

Research
Malicious PyPI package sympy-dev targets SymPy users, a Python symbolic math library with 85 million monthly downloads.