Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Collection of utilities used in other python projects.
caching
: Cache objects to disk (using joblib
) or to memoryconstclass.Const
: Base class for defining constants, as alternative to enum.Enum
debugging
: Connect to PyCharm debug serverdtime
: Wrappers and formatters for datetime
and other timing utilitieslog
: Wrapper for loguru
, utilities for stdlib logging
iotools
: Index paths, compress and read files, git utilities, wrappers to load json/yamlmagic
: Wrapper around importlib
maths
: Various small mathematical utilitiesmisc
:
format_exception(e)
outputs the exception as it appears in the stacktrace.suppress_stdout_stderr
context manager to suppress all output of a block of code.multiproc
: Multiprocessing utilitiespackaging
: Code to handle creation and running of python packagespaths
: Load paths from the global environment or .env files using python-dotenv
stats
: Simple statistics utilitiesstrings
: Base64, quote strings, create random strings, create hashes of objectssystem
: Wrapper for subprocess.Popen
testing
: Import all modules from a package and other utilitiestqdmext
: Wrapper tqdm_max_ncols
that limits the width of a tqdm
progressbar by defaulttypext
: Type definitionsweb
: Download file and resume a partial download, disable web accessRequires python>=3.8
pip install packg
# show environment
python -m packg.cli.show_env
# or
packg show_env
To override the defaults with your own values:
.env
in the root of your project as follows:ENV_DATA_DIR=data
ENV_RESULT_DIR=results
ENV_ANNO_DIR=annotations
ENV_CODE_DIR=/home/${USER}/code
ENV_CACHE_DIR=/home/${USER}/.cache
Clone repository and cd into, then:
pip install -e .
pip install pytest pytest-cov pylint
python -m pytest --cov
pylint packg
pylint tests
FAQs
Collection of utilities used in other python projects.
We found that packg demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.