Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
PartCAD is the first package manager for CAD models and a framework for managing assemblies. It aims to complement Git with everything necessary to substitute commercial Product Lifecycle Management (PLM) tools.
PartCAD maintains information about mechanical parts and how they come together to form larger assemblies. The same parts are reused in multiple assemblies and multiple projects. And all of that is supercharged by the ultimate versioning and collaboration features of Git.
This Python module is the core part of PartCAD. It can be used in Python scripts to instantiate parts, assemblies and scenes implemented as PartCAD packages. Such instances can be used in CadQuery and build123d scripts. They can also be used in custom web, mobile and desktop applications that render CAD models. This module can also be used to generate BoMs (bills of materials) and assembly instructions.
For PartCAD command line tools, see the Python module partcad-cli
instead.
See the main PartCAD repo for more information.
FAQs
Package manager for CAD models and a modelling framework
We found that partcad demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.