Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
A simple program which checks Python source files for errors.
Pyflakes analyzes programs and detects various errors. It works by parsing the source file, not importing it, so it is safe to use on modules with side effects. It's also much faster.
It is available on PyPI <https://pypi.org/project/pyflakes/>
_
and it supports all active versions of Python: 3.6+.
It can be installed with::
$ pip install --upgrade pyflakes
Useful tips:
Be sure to install it for a version of Python which is compatible
with your codebase: python#.# -m pip install pyflakes
(for example,
python3.10 -m pip install pyflakes
)
You can also invoke Pyflakes with python#.# -m pyflakes .
if you want
to run it for a specific python version.
If you require more options and more flexibility, you could give a look to Flake8_ too.
Pyflakes makes a simple promise: it will never complain about style, and it will try very, very hard to never emit false positives.
Pyflakes is also faster than Pylint_. This is largely because Pyflakes only examines the syntax tree of each file individually. As a consequence, Pyflakes is more limited in the types of things it can check.
If you like Pyflakes but also want stylistic checks, you want
flake8_, which combines
Pyflakes with style checks against
PEP 8
_ and adds
per-project configuration ability.
Share your feedback and ideas: subscribe to the mailing-list <https://mail.python.org/mailman/listinfo/code-quality>
_
Issues are tracked on GitHub <https://github.com/PyCQA/pyflakes/issues>
_.
Patches may be submitted via a GitHub pull request
.
If you are comfortable doing so, please rebase your changes
so they may be applied to main with a fast-forward merge, and each commit is
a coherent unit of work with a well-written log message. If you are not
comfortable with this rebase workflow, the project maintainers will be happy to
rebase your commits for you.
All changes should include tests and pass flake8_.
.. image:: https://github.com/PyCQA/pyflakes/workflows/Test/badge.svg :target: https://github.com/PyCQA/pyflakes/actions :alt: GitHub Actions build status
.. _Pylint: https://pylint.pycqa.org/
.. _flake8: https://pypi.org/project/flake8/
.. _PEP 8
: https://www.python.org/dev/peps/pep-0008/
.. _rebase your changes
: https://git-scm.com/book/en/v2/Git-Branching-Rebasing
.. _GitHub pull request
: https://github.com/PyCQA/pyflakes/pulls
Please see NEWS.rst <https://github.com/PyCQA/pyflakes/blob/main/NEWS.rst>
_.
FAQs
passive checker of Python programs
We found that pyflakes demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.