
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Please see the Python integration docs for details.
We recommend using uv. It's super fast.
uv venv env
(creates virtual environment called "env")
python3 -m venv env
source env/bin/activate
(activates the virtual environment)uv sync --extra dev --extra test
(installs the package in develop mode, along with test dependencies)
pip install -e ".[dev,test]"
pre-commit install
to have auto linting pre commitmake test
pytest -k test_no_api_key
uv
so...uv python install 3.9.19
uv python pin 3.9.19
uv venv
source env/bin/activate
uv sync --extra dev --extra test
pre-commit install
make test
Assuming you have a local version of PostHog running, you can run python3 example.py
to see the library in action.
Updates are released automatically using GitHub Actions when version.py
is updated on master
. After bumping version.py
in master
and adding to CHANGELOG.md
, the release workflow will automatically trigger and deploy the new version.
If you need to check the latest runs or manually trigger a release, you can go to our release workflow's page and dispatch it manually, using workflow from master
.
You can run make prep_local
, and it'll create a new folder alongside the SDK repo one called posthog-python-local
, which you can then import into the posthog project by changing pyproject.toml to look like this:
dependencies = [
...
"posthoganalytics" #NOTE: no version number
...
]
...
[tools.uv.sources]
posthoganalytics = { path = "../posthog-python-local" }
This'll let you build and test SDK changes fully locally, incorporating them into your local posthog app stack. It mainly takes care of the posthog -> posthoganalytics
module renaming. You'll need to re-run make prep_local
each time you make a change, and re-run uv sync --active
in the posthog app project.
FAQs
Integrate PostHog into any python application.
We found that posthoganalytics demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.