
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
pyforcedirectedlayout
Advanced tools
This project is the Python implementation of Brad Smith's article on A Forced-Directed Diagram Layout Algorithm. There were a few bumps on the road to get Brad's code manually converted from a Microsoft graphics platform to a pseudo-platform independent platform like wxPython running on Mac OS. I will not go into detail on what those bumps were. But I want to make sure and document those here.
pip install pyforcedirectedlayout
Parameter | Default Value | Description |
---|---|---|
damping | 0.1 | Value between 0 and 1 that slows the motion of the nodes during layout. |
springLength | 100 | Value in pixels representing the length of the imaginary springs that run along the connectors. |
maxIterations | 500 | Maximum number of iterations before the algorithm terminates |
attractionForce | 0.1 | The spring value |
repulsionForce | 10000 | The repulsion value |
Parameter | Default Value | Description |
---|---|---|
minPoint | Point(x=10, y=10) | |
maxPoint | Point(x=60, y=60) |
Parameter | Default Value | Description |
---|---|---|
minimumTotalDisplacement | 10 | |
stopCount | 15 | Stop execution after this many number of iterations where the totalDisplacement is less that minimumTotalDisplacement |
This project uses buildlackey for day-to-day development builds
For all kinds of problems, requests, enhancements, bug reports, etc., drop me an e-mail. Written by Humberto A. Sanchez II (C) 2024
I am concerned about GitHub's Copilot project.
I urge you to read about the Give up GitHub campaign from the Software Freedom Conservancy.
While I do not advocate for all the issues listed there, I do not like that a company like Microsoft may profit from open source projects.
I continue to use GitHub because it offers the services I need for free. But I continue to monitor their terms of service.
Any use of this project's code by GitHub Copilot, past or present, is done without my permission. I do not consent to GitHub's use of this project's code in Copilot.
FAQs
Python Implementation of a Force Directed Layout Algorithm
We found that pyforcedirectedlayout demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.