
Research
Using Trusted Protocols Against You: Gmail as a C2 Mechanism
Socket uncovers malicious packages on PyPI using Gmail's SMTP protocol for command and control (C2) to exfiltrate data and execute commands.
An application for collaboratively working on plans with our team. Planning can take resource availability into account. Timeline visualization for tasks and resources makes it easy to modify and sense check. Buffer management features provide early indicators that actual and planned activity requires intervention.
An application for collaboratively working on plans with our team. Planning can take resource availability into account. Timeline visualisation for tasks and resources makes it easy to modify and sense check your plans. Buffer management features provide early indicators that actual and planned activity requires intervention.
Good plans are co-created with the team that will do the work. For that digital whiteboarding tools such as Miro & Mural are very helpful to map out features and dependencies. Invariably the question is going to be asked "When will you be done?". The team will need to make some estimates of how long the individual tasks are going to take. This requires caputing data on estimates and taking into account the availability of the people required to do the work. The current crop of whiteboarding tools do not make this easy. Quickly moving araound dependant tasks, with updated durations, on a timeline takes so much effort, it kills collaboration.
There are many excellent commercial tools in the market that could do the job but as a consultant to large enterprises it's not practical to change the existing corporate planning and task management tooling stack. Consequently I needed;
Thus this app is written in Python, which is the data analysts' tool of choice, and should be available in most enterprise user desktop builds. Code is hosted on Github and open for inspection, with releases distributed on PyPi for easy installation.
brew install python3 # Install Python
brew install python-tk # Install Tkinter
sudo apt-get install python3-tk
sudo dnf install python3-tkinter
Tkinter is installed by default with every Python installation on MS-Windows.
# Clone the repository
git clone https://github.com/rnwolf/our-planner.git
cd our-planner
# Create and activate a virtual environment
python -m venv .venv
source .venv/bin/activate # On Windows: .venv\Scripts\activate
# Install the package and dependencies
pip install -r requirements.txt
# Install the package
pip install -e .
pip install -r requirements.txt
cd our-planner
# Create and activate a virtual environment (optional but recommended)
python -m venv .venv
source .venv/bin/activate # On Windows: .venv\Scripts\activate
pip install our-planner
# Run app
our-planner
This also installs the tool uvx
. See more options on astral website.
# Install and run app
uvx -p "C:\Python313\python.exe" our-planner@latest
NOTE: The python builds provided via UV does not include the Tkinter libraries, and thus you need to install and specify Python from https://www.python.org/downloads/
our-planner/
βββ src/ # Main source code directory
β βββ model/ # Model components
β βββ view/ # View components
β βββ controller/ # Controller components
β βββ operations/ # Business logic operations
β βββ utils/ # Utility and helper functions
βββ resources/ # Static resources
βββ tests/ # Test directory
βββ docs/ # Documentation
βββ examples/ # Example files
pytest
or
python run_test.py
Our-planner is distributed under the terms of the GPLv3 or later Licence.
See CHANGELOG.md on GitHub.
FAQs
An application for collaboratively working on plans with our team. Planning can take resource availability into account. Timeline visualization for tasks and resources makes it easy to modify and sense check. Buffer management features provide early indicators that actual and planned activity requires intervention.
We found that our-planner demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago.Β It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious packages on PyPI using Gmail's SMTP protocol for command and control (C2) to exfiltrate data and execute commands.
Product
We redesigned Socket's first logged-in page to display rich and insightful visualizations about your repositories protected against supply chain threats.
Product
Automatically fix and test dependency updates with socket fixβa new CLI tool that turns CVE alerts into safe, automated upgrades.