Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
This is the Python interface to the Lab Streaming Layer (LSL). LSL is an overlay network for real-time exchange of time series between applications, most often used in research environments. LSL has clients for many other languages and platforms that are compatible with each other.
Let us know if you encounter any bugs (ideally using the issue tracker on the GitHub project).
On all non-Windows platforms and for some Windows-Python combinations, you must first obtain a liblsl shared library. See the liblsl repo documentation for further details.
pip install pylsl
This should only be necessary if you need to modify or debug pylsl.
git clone https://github.com/labstreaminglayer/pylsl.git && cd pylsl
pylsl
working directory, run pip install .
.
pip install -e .
to install while keeping the files in-place. This is convenient for developing pylsl.See the examples in pylsl/examples. Note that these can be run directly from the commandline with (e.g.) python -m pylsl.examples.{name-of-example}
.
You can get a list of the examples with python -c "import pylsl.examples; help(pylsl.examples)"
pylsl
will search for liblsl
first at the filepath specified by an environment variable named PYLSL_LIB
, then in the package directory (default location for Windows), then finally in normal system library folders.
If the shared object is not installed onto a standard search path (or it is but can't be found for some other bug), then we recommend that you copy it to the pylsl installed module path's lib
subfolder. i.e. {path/to/env/}site-packages/pylsl/lib
.
site-packages/pylsl
path will only exist after you install pylsl
in your Pyton environment.lib
subfolder.python -m site
to find the "site-packages" path.cp -L
on platforms that use symlinks.Alternatively, you can use an environment variable. Set the PYLSL_LIB
environment variable to the location of the library or set LD_LIBRARY_PATH
to the folder containing the library. For example,
PYLSL_LIB=/usr/local/lib/liblsl.so python -m pylsl.examples.{name-of-example}
, orLD_LIBRARY_PATH=$LD_LIBRARY_PATH:/usr/local/lib python -m pylsl.examples.{name-of-example}
pylsl uses continuous integration and distribution. GitHub Actions will upload a new release to pypi whenever a Release is created in GitHub.
Before creating the GitHub release, be sure to bump the version number in pylsl/version.py
and consider updating the liblsl dependency
in .github/workflows/publish-to-pypi.yml
.
We recently stopped building binary wheels for Linux. In practice, the manylinux
dependencies were often incompatible with real systems.
rm -Rf build dist *.egg-info
python setup.py sdist bdist_wheel
auditwheel repair dist/*.whl -w dist
rm dist/*-linux_x86_64.whl
twine upload dist/*
conda build ../liblsl/
conda build .
pylsl
functions from a thread that is not the main thread. This has been reported to cause access violations, and can occur during pulling from an inlet, and also from accessing an inlets info structure in a thread.Pylsl was primarily written by Christian Kothe while at Swartz Center for Computational Neuroscience, UCSD. The LSL project was funded by the Army Research Laboratory under Cooperative Agreement Number W911NF-10-2-0022 as well as through NINDS grant 3R01NS047293-06S1. pylsl is maintained primarily by Chadwick Boulay. Thanks for contributions, bug reports, and suggestions go to Bastian Venthur, David Medine, Clemens Brunner, and Matthew Grivich.
FAQs
Python interface to the Lab Streaming Layer
We found that pylsl demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.