
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
A library for converting a token stream into a data structure for use in web form posts
A library for converting a token stream into a data structure comprised of sequences, mappings, and scalars, developed primarily for converting HTTP form post data into a richer data structure. It runs on Python 2.7, 3.4, 3.5, 3.6 and 3.7.
Please see https://docs.pylonsproject.org/projects/peppercorn/en/latest/ for the documentation.
See https://github.com/Pylons/peppercorn for in-development version.
Add support for Python 3.4, 3.5, 3.6 and 3.7.
Drop support for Python 2.6, 3.2 and 3.3.
Add contributing.md and update docs. See https://github.com/Pylons/peppercorn/issues/13
Switch to an iterative parser rather than a recursive parser to avoid DoS attacks.
Add the ignore
operation. The subsequent data elements in the stream
will be ignored until the corresponding __end__
marker. This feature
is useful for form elements designed for client-side scripting, such as a
"select all" checkbox in the middle of a list of other kinds of fields.
Add support for Python 3.3.
Drop support for Python 2.5 and Jython.
Drop support for Python 2.4.
Add support for Python 3.2.
Move project to GitHub.
Switch to Pylons Project Sphinx theme.
Add tox configuration.
rename
operation types
may not have children.rename
. rename
begins a special mode.
The value of the first subsequent data element in the stream will be
used within its parent sequence or mapping. Any remaining data
elements until the corresponding __end__
marker are ignored.
This is mostly in support of radio buttons. See the rename
docs
within https://docs.pylonsproject.org/projects/peppercorn/en/latest/ <https://docs.pylonsproject.org/projects/peppercorn/en/latest/>
_ for more
information.FAQs
A library for converting a token stream into a data structure for use in web form posts
We found that peppercorn demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.