Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Qt is excellent, but it's also enormous. There's a lot of topics, and many of them have hidden gotchas. PySide2 and PyQt are also excellent, letting us leverage the powerful Qt libraries from up in the clouds in PythonLand, but this arrangement has its own gotchas.
The goal of qtstrap is get your applications up and running quickly, so you can focus on your problem instead of on Qt's idiosyncracies.
More complete docs are available here.
qtstrap
command line tool to bootstrap new projects$ mkdir test && cd test
$ python3 -m venv .venv
$ source .venv/bin/activate
$ python3 -m pip install qtstrap PySide6
$ qtstrap init
The init script will prompt you to enter the name of your application and the name of its publisher(which is probably you), and then it will generate an application skeleton.
You can test that everything installed properly by executing:
$ python3 app/main.py
If you see a window like this, then you're good to go:
LabelEdit
HLine
and VLine
LinkLabel
StateButton
IconToggleButton
ConfirmToggleButton
MenuButton
PersistentCheckableAction
PersistentCheckBox
PersistentComboBox
PersistentLineEdit
PersistentListWidget
PersistentPlainTextEdit
PersistentTabWidget
PersistentTextEdit
PersistentTreeWidget
Adapter
TimeStamp
StringBuilder
call_later()
@accepts_file_drops
@trace
@singleton
Defer
SignalBlocker
CommandPalette
, like VSCode or SublimeTextCodeEditor
: Custom QTextEditor subclass customized for code editingpip install qtstrap
Contributions are always welcome. Feel free to open an issue or start a new discussion on our GitHub.
FAQs
Like Bootstrap, but qt-er.
We found that qtstrap demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.