Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
pip install popoto
from popoto import Model, KeyField, Field
class Person(Model):
name = KeyField()
fav_color = Field()
Person.create(name="Lalisa Manobal", fav_color = "yellow")
lisa = Person.query.get(name="Lalisa Manobal")
print(f"{lisa.name} likes {lisa.fav_color}.")
> 'Lalisa Manobal likes yellow.'
Popoto is ideal for streaming data. The pub/sub module allows you to trigger state updates in real time. Currently being used in production for:
import popoto
class Person(popoto.Model):
uuid = popoto.AutoKeyField()
username = popoto.UniqueKeyField()
title = popoto.KeyField()
level = popoto.SortedField(type=int)
last_active = popoto.SortedField(type=datetime)
location = popoto.GeoField()
invited_by = popoto.Relationship(model=Person)
lisa = Person(username="@LalisaManobal")
lisa.title = "Queen"
lisa.level = 99
lisa.location = (48.856373, 2.353016) # Hôtel de Ville, Fashion Week 2021
lisa.last_active = datetime.now()
lisa.save()
paris_lat_long = (48.864716, 2.349014)
yesterday = datetime.now() - timedelta(days=1)
query_results = Person.query.filter(
title__startswith="Queen",
level__lt=100,
last_active__gt=yesterday,
location=paris_lat_long,
location_radius=5, location_radius_unit='km'
)
len(query_results)
>>> 1
print(query_results)
>>> [{
'uuid': 'f1063355b14943ed91fa1e1697806c4f',
'username': '@LalisaManobal',
'title': 'Queen',
'level': 99,
'last_active': datetime.datetime(2021, 11, 21, 14, 47, 19, 911023),
'location': (48.856373, 2.353016)
}, ]
lisa = query_results[0]
lisa.delete()
>>> True
Documentation is available at popoto.readthedocs.io
Please create new feature and documentation related issues github.com/tomcounsell/popoto/issues or make a pull request with your improvements.
Popoto ORM is released under the MIT Open Source license.
Please post your questions on Stack Overflow.
Popoto gets it's name from the Māui dolphin subspeciesis - the world's smallest dolphin subspecies. Because dolphins are fast moving, agile, and work together in social groups. In the same way, Popoto wraps Redis and RedisGraph to make it easy to manage streaming timeseries data on a social graph.
For help building applications with Python/Redis, contact Tom Counsell on LinkedIn.com/in/tomcounsell
FAQs
A Python Redis ORM
We found that popoto demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.