Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
A client to BioPortal and other OntoPortal instances.
One of several OntoPortal clients can be instantiated and accessed with the same API:
from ontoportal_client import BioPortalClient
bioportal_client = BioPortalClient()
ontologies = bioportal_client.get_ontologies()
Complete documentation can be found on ontoportal-client.readthedocs.io
$ pip install ontoportal_client
The most recent code and data can be installed directly from GitHub with:
$ pip install git+https://github.com/cthoyt/ontoportal-client.git
Configuration of the API tokens for for each of the clients is mediated by
pystow
. Using BioPortal as an example,
you can either:
BIOPORTAL_API_KEY
environment variable~/.config/bioportal.ini
and set the api_key
value under
the [bioportal]
section.Contributions, whether filing an issue, making a pull request, or forking, are appreciated. See CONTRIBUTING.md for more information on getting involved.
The code in this package is licensed under the MIT License.
This package was created with @audreyfeldroy's cookiecutter package using @cthoyt's cookiecutter-snekpack template.
The final section of the README is for if you want to get involved by making a code contribution.
To install in development mode, use the following:
$ git clone git+https://github.com/cthoyt/ontoportal-client.git
$ cd ontoportal-client
$ pip install -e .
After cloning the repository and installing tox
with pip install tox
, the unit tests in the tests/
folder can be
run reproducibly with:
$ tox
Additionally, these tests are automatically re-run with each commit in a GitHub Action.
The documentation can be built locally using the following:
$ git clone git+https://github.com/cthoyt/ontoportal-client.git
$ cd ontoportal-client
$ tox -e docs
$ open docs/build/html/index.html
The documentation automatically installs the package as well as the docs
extra specified in the setup.cfg
. sphinx
plugins
like texext
can be added there. Additionally, they need to be added to the
extensions
list in docs/source/conf.py
.
After installing the package in development mode and installing
tox
with pip install tox
, the commands for making a new release are contained within the finish
environment
in tox.ini
. Run the following from the shell:
$ tox -e finish
This script does the following:
setup.cfg
,
src/ontoportal_client/version.py
, and docs/source/conf.py
to not have the -dev
suffixbuild
twine
. Be sure to have a .pypirc
file configured to avoid the need for manual input at this
steptox -e bumpversion minor
after.FAQs
A client to BioPortal and other OntoPortal instances.
We found that ontoportal-client demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.