Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
This is a kibana client written in python. It provides two kind of utilities
index-pattern
, visualization
, dashboard
. This ORM provides:
visualization
definition into an elasticsearch query.visualization
and data fetched into a vega spec.The ORM was implemented to ease the automatic creation/update of kibana objects. For instance:
index-pattern
correspond to a table defined somewhere else (like a sql table), you may want to automate the creation of index-pattern
.dashboard
is defined in another database (like a sql db), you may want to delete the kibana object if the sql object is deleted.The translation layer was implemented to progressively get rid of kibana. Even if kibana is a fantastic tool, it's more meant for internal use than for an integration in another application.
The elastic translator aims to generate almost identical queries to elasticsearch as kibana.
The vega translator tries to provide an equivalent in vega of kibana visualisation. Currently, it supports a limited set of options. Vega was chosen as it provide a complex but almost exhaustive visualization grammar. Vega'sapi allows the rendering of visualizations both on the backend and frontend and has bridges with the main js frameworks (react, vue…).
Licensed under MIT license.
ContextVisualization.is_duration_agg
format_from_interval
for week intervalsContext
to Scope
BaseDocument.json_attrs
to simplify parsing of some fields (ex: Dashboard.panelsJSON)using
in clientSearch
modelVegaRenderer
and vega-cliFAQs
Python client for kibana. Provide ORM & vega rendering of visualizations
We found that pybana demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.