
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
.. image:: https://img.shields.io/pypi/v/pyenchant.svg :target: https://pypi.org/project/pyenchant
.. image:: https://img.shields.io/pypi/pyversions/pyenchant.svg :target: https://pypi.org/project/pyenchant
.. image:: https://github.com/pyenchant/pyenchant/workflows/tests/badge.svg :target: https://github.com/pyenchant/pyenchant/actions
.. image:: https://builds.sr.ht/~dmerej/pyenchant.svg :target: https://builds.sr.ht/~dmerej/pyenchant
.. image:: https://img.shields.io/badge/code%20style-black-000000.svg :target: https://github.com/psf/black
This package provides a set of Python language bindings for the Enchant spellchecking library. For more information, visit the project website:
http://pyenchant.github.io/pyenchant/
Enchant is used to check the spelling of words and suggest corrections for words that are miss-spelled. It can use many popular spellchecking packages to perform this task, including ispell, aspell and MySpell. It is quite flexible at handling multiple dictionaries and multiple languages.
More information is available on the Enchant website:
https://abiword.github.io/enchant/
For Windows users, install the pre-built binary packages using pip::
pip install pyenchant
These packages bundle a pre-built copy of the underlying enchant library. Users on other platforms will need to install "enchant" using their system package manager (brew on macOS).
Once the software is installed, python's on-line help facilities can get you started. Launch python and issue the following commands:
>>> import enchant
>>> help(enchant)
The credit for Enchant itself goes to Dom Lachowicz. Find out more details on the Enchant website listed above. Full marks to Dom for producing such a high-quality library.
The glue to pull Enchant into Python via ctypes was written by Ryan Kelly. He needed a decent spellchecker for another project he was working on, and all the solutions turned up by Google were either extremely non-portable (e.g. opening a pipe to ispell) or had completely disappeared from the web (what happened to SnakeSpell?) It was also a great excuse to teach himself about SWIG, ctypes, and even a little bit of the Python/C API.
Finally, after Ryan stepped down from the project, Dimitri Merejkowsky became the new maintainer.
FAQs
Python bindings for the Enchant spellchecking system
We found that pyenchant demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.