Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Drag and drop plotting, data selection, and filtering.
Developed by the Deverman lab.
Polygon selection
Drag and drop to make a plot
Create subsets of data via polygon, string, or categorical selection
Filter on string columns
.csv
files that are pivot tables (columns are measurements, rows are values):Sequence | Binding | Transduction |
---|---|---|
SAQAQAQ | 0.1 | 0.231 |
TTTQQQA | 5.12 | 4.1212 |
AAATAAT | 0.32 | 0.5423 |
or
Month | Savings |
---|---|
January | 250 |
February | 80 |
March | 450 |
.h5ad
files also have experimental support. If you try them, please file any issues you experience.You can install Plotplot from pip and run it yourself:
pip install plotplot
plotplot
See plotplot.ini
and plotplot/plotplot_config.py
for list of configuration options.
Plotplot works well on a high-powered server, espeically when colocated with your data.
A few features are specifically for shared systems:
To deploy on a server, use Docker.
git clone git@github.com:vector-engineering/plotplot.git
DOCKER_BUILDKIT=1 docker build -f Dockerfile -t plotplot .
--build-arg URL_PREFIX=/my-custom-plotplot
if you want to change the URL_PREFIX# This will run on port 9042
docker run --restart=unless-stopped -p 0.0.0.0:9042:9042 -d plotplot
docker run --restart=unless-stopped -p 0.0.0.0:9042:9042 -d -v /my/dir/plotplot.ini:/app/plotplot.ini -e PLOTPLOT_CONFIG_PATH=/app/plotplot.ini plotplot
Then navigate to your-server.com:9042 and you should see Plotplot.
A reverse proxy like Nginx is well supported.
Run with a Docker command like this:
docker run --restart=unless-stopped -p 127.0.0.1:9042:9042 -d plotplot
Example Nginx configuration:
location = /plotplot/ {
proxy_pass http://localhost:9042/plotplot/index.html;
proxy_set_header Host $http_host;
proxy_redirect default;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
add_header xv-nginx-remote_user $remote_user;
}
location /plotplot/ {
proxy_pass http://localhost:9042/plot/;
proxy_set_header Host $http_host;
proxy_redirect default;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
add_header xv-nginx-remote_user $remote_user;
}
Development is done with 2 processes:
This is so you can live-reload the frontend while working.
git clone git@github.com:vector-engineering/plotplot.git
cd frontend
npm install
cd plotplot
pip install -r requirements.txt
cd plotplot
flask run --no-debugger --cert=adhoc
# In a new terminal
cd frontend
npm start
cd frontend
npm run build
cd ..
poetry build
Plotly has a bug that causes heatmaps with repeated values to be very slow.
The best way to generate this yourself is to use the Docker image that creates it on build.
cd plotly.js
# I used node 18.18.0
npm install
npm install regl-scatter2d@2.1.17 # <--- this is the key step
npm run build
# Then copy the dist/plotly[.min].js file into ./custom-plotly.js
# then in this repo
cd ../plotplot
cp -r ../plotly.js/dist/plotly.min.js frontend/custom-plotly.js
npm install ./custom-plotly.js
FAQs
Drag and drop plotting, data selection, and filtering
We found that plotplot demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.