Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
This package wraps @visa/charts web components for use in Python and jupyter notebooks, leveraging the widget-cookiecutter Python package. You can find pyvisacharts on pypi, installation steps provided below.
pip
:
$ pip install pyvisacharts
conda
:
$ conda install -c conda-forge pyvisacharts
Ready
status in this bundleStep 1: Install:
$ pip install pyvisacharts
Step 2: Use component as any other Python function
import pyvisacharts as vcc
import pandas as pd
bar_chart_data = pd.read_json("https://github.com/visa/visa-chart-components/tree/main/packages/charts-pythondocs/demo_data/bar_chart_data.json")
line_chart_data = pd.read_json("https://github.com/visa/visa-chart-components/tree/main/packages/charts-pythondocs/demo_data/line_chart_data.json")
vcc.BarChart(
accessibility={
"purpose": "Demonstration of a bar chart built with VCC and minimal properties provided.",
"statisticalNotes": "This chart is using dummy data."
},
data=bar_chart_data,
ordinalAccessor="item",
valueAccessor="value"
)
vcc.LineChart(
accessibility={
"purpose": "Demonstration of a line chart built with VCC and minimal properties provided.",
"statisticalNotes": "This chart is using dummy data."
},
data=line_chart_data, # a pandas data frame
ordinalAccessor="date",
valueAccessor="value",
seriesAccessor="category",
config={
"hoverOpacity": 0.25
}
)
See our VCC Demo Notebook for more examples.
To the python widget locally, you will need to follow the below installation and build steps to symlink the necessary packages across the monorepo.
$ yarn
$ yarn dev --i
$ yarn dev --b
$ yarn dev --ipy
$ yarn dev --spy (spins up a local jupyter notebook)
or
$ yarn dev --lpy (spins up a local jupyter lab)
After running these commands, the js lib @visa/charts
will by symlink'd and a jupyter notebook will be spun up locally for development and testing work. If you update the js build and/or python code you will likely need to restart/refresh the juptyer notebook to see development changes reflected.
In addition to the core project team, special thanks to Luis Chaves Rodriguez (@visa) for his assistance in development of pyvisacharts
.
FAQs
A Jupyter Widget for Visa Chart Components
We found that pyvisacharts demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.