
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
A modern Python implementation of Paul Nasca's extreme time stretch algorithm with minimal dependencies.
A modern Python implementation of Paul Nasca's extreme sound stretch algorithm. It allows for extremely high stretch factors like 10 or 1000 without introducing the unpleasant grainy artifacts of other time stretch algorithms. It does smear all the transients though.
There was no modern and well maintained python package for this algorithm available on the package index, so I decided to make one. This is a fun DSP algorithm with a permissive license, so everyone should enjoy it!
If you want to use this package in your own project, install it from the python package index:
pip install paulstretch
If you want to work with the github repository, install the latest version of the uv package manager. A virtual environment will automatically be installed when you run or build the project with uv.
The project uses pytest as its testing framework. Run them like this:
uv run pytest
To build and publish this package on the python package index, this is what you (or rather I) should do:
Increment Version if appropriate
The package uses semantic versioning, so bump the version depending on the extent of changes.
uv version --bump patch
or
uv version --bump minor
or
uv version --bump major
Build both the source distribution and the wheels
uv build
Publish the package:
uv publish
Enter your pypi credentials when prompted.
FAQs
A modern Python implementation of Paul Nasca's extreme time stretch algorithm with minimal dependencies.
We found that paulstretch demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.