Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
This project aims to implement the Flemish data standard OTL (https://wegenenverkeer.data.vlaanderen.be/) in Python. It is split into different packages to reduce compatibility issues
The core functionality of this library is creating instances of otlmow_model classes by converting or creating them. The instances can then be manipulated and finally exported to a different format. When exporting to a file, a DAVIE compliant format can be chosen so that the data can be imported in the DAVIE application.
Using this library, you can convert between the following objects and formats
The main class in this library is the OtlmowConverter class. This class is a facade class and has a couple of methods to convert between the different types of objects. The main methods are:
These methods can use any of the supported formats as input (subject). The methods determine the format of the subject and convert it to the desired format.
There are also from_A_to_B methods (i.e. from_dicts_to_objects) where either A or B are otlmow class objects. These methods are more efficient as they do not need to determine the format of the subject.
OTLMOW-Converter has a couple of dependencies besides the standard Python libraries. It depends on another OTLMOW package: otlmow-model. These libraries will be automatically installed when installing this library. Currently, you need at least Python version 3.8 to use this library.
To install the OTL MOW project into your Python project, use pip to install it:
pip install otlmow_converter
To upgrade an existing installation use:
pip install otlmow_converter --upgrade
See the Readme notebook
The following file formats are supported in OtlmowConverter
File format | Read | Write | DAVIE compliant |
---|---|---|---|
CSV | Yes | Yes | Yes |
Excel | Yes | Yes | Yes |
JSON | Yes | Yes | Yes |
GeoJSON | Yes | Yes | Yes |
JSON-LD | Yes | Yes | No |
Pandas Dataframe | Yes | Yes | No |
TTL | No | Yes | No |
FAQs
Unknown package
We found that otlmow-converter demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.