Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
The website is deployed on heroku and can be accessed on the following url: https://kanban-app-cs162.herokuapp.com/
/web
contains application code.
/web/static
css files.
/web/templates
html files.
/web/__init__.py
project initializer file.
/web/auth.py
routes related to authorization/authentication.
/web/config.py
different configurations based on running environment (test/dev/prod).
/web/models.py
ORM mapping (from DB models to python classes) using SQLAlchemy.
/web/routes.py
application routes.
/unit_test
contains 25 unit tests in total. Tests for: registration, login, reset password, and kanban operations (todo, doing, done).
/migrations
directory used to control DB migrations, using Flask-migrate.
.env/example
contains all variables needed on your .env so the project runs on production or locally.
Procfile
used for heroku deployment.
Creation of virtualenv:
$ virtualenv -p python3 venv
If the above code does not work, you could also do
$ python3 -m venv venv
To activate the virtualenv:
$ source venv/bin/activate
Or, if you are using Windows - reference source:
$ venv\Scripts\activate
To deactivate the virtualenv (after you finished working):
$ deactivate
Install dependencies in virtual environment:
$ pip3 install -r requirements.txt
.env.example
is a file containing all the environment variables that you need to define in a .env
file for this project to run.
Start the server on a mac locally by running:
$ source venv/bin/activate
$ pip install -r requirements.txt
$ export FLASK_ENV=dev
$ export FLASK_APP=web
$ python3 -m flask run
To run the unit tests on mac use the following commands:
$ source venv/bin/activate
$ pip install -r requirements.txt
$ export FLASK_ENV=test
$ export SECRET_KEY='test-key'
$ python -m pytest unit_test
FAQs
Initializing flask project
We found that pykanban demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.