
Security News
The Nightmare Before Deployment
Season’s greetings from Socket, and here’s to a calm end of year: clean dependencies, boring pipelines, no surprises.
raffiot
Advanced tools
Raffiot is small (almost) dependency-free python library providing some usual functional tools. It currently provides
IO monad which is stack-safe, fast, support
asynchronous, concurrent, parallel programming, has many other features.Resource data type for easy but reliable resource management.Result data structure to represent errorsFor a demo, just type this in a terminal:
curl https://raw.githubusercontent.com/chrilves/raffiot.py/main/demos/raffiot_demo.sh | /bin/sh
This demo runs 4 computations in parallel. It demonstrates how simple concurrent and parallel programing is in raffiot.
Note that this command will install raffiot in your current Python environment
The guide is online at https://chrilves.github.io/raffiot.py/index.html.
The API is online at https://chrilves.github.io/raffiot.py/api/index.html.
typing-extensions (for the
@final annotation).Python has the with construction, but Resource goes a step further.
Resource has everything IO has, including
its wonderful failure management.Did I mention Railway-Oriented Programming? Result is represent the 3 possible
result of a computation:
Ok(value): the computation successfully computed the this value.Error(error): the computation failed on some expected failure error, probably
from the business domain.Panic(exception): the computation failed on some unexpected failure exception.FAQs
Robust And Fast Functional IO Toolkit
We found that raffiot demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Season’s greetings from Socket, and here’s to a calm end of year: clean dependencies, boring pipelines, no surprises.

Research
/Security News
Impostor NuGet package Tracer.Fody.NLog typosquats Tracer.Fody and its author, using homoglyph tricks, and exfiltrates Stratis wallet JSON/passwords to a Russian IP address.

Security News
Deno 2.6 introduces deno audit with a new --socket flag that plugs directly into Socket to bring supply chain security checks into the Deno CLI.