Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
.. _GitHub python-rope / rope: https://github.com/python-rope/rope
|Build status badge| |Latest version badge| |Download count badge| |ReadTheDocs status badge| |Codecov badge|
.. |Build status badge| image:: https://github.com/python-rope/rope/actions/workflows/main.yml/badge.svg :target: https://github.com/python-rope/rope/actions/workflows/main.yml :alt: Build Status
.. |Latest version badge| image:: https://badge.fury.io/py/rope.svg :target: https://badge.fury.io/py/rope :alt: Latest version
.. |Download count badge| image:: https://img.shields.io/pypi/dm/rope.svg :alt: Download count
.. |ReadTheDocs status badge| image:: https://readthedocs.org/projects/rope/badge/?version=latest :target: https://rope.readthedocs.io/en/latest/?badge=latest :alt: Documentation Status
.. |Codecov badge| image:: https://codecov.io/gh/python-rope/rope/graph/badge.svg?token=pU08MBXFIS :target: https://codecov.io/gh/python-rope/rope :alt: Codecov
Rope
_ is the world's most advanced open source Python refactoring library
(yes, I totally stole that tagline from Postgres).
.. _rope
: https://github.com/python-rope/rope
Most Python syntax up to Python 3.10 is supported. Please file bugs and contribute patches if you encounter gaps.
Since version 1.0.0, rope no longer support running on Python 2.
If you need Python 2 support, then check out the python2
branch or the 0.x.x
releases.
Documentation <https://rope.readthedocs.io/en/latest/overview.html>
_How to use Rope in my IDE or Text editor? <https://github.com/python-rope/rope/wiki/How-to-use-Rope-in-my-IDE-or-Text-editor%3F>
_Configuration <https://rope.readthedocs.io/en/latest/configuration.html>
_List of features <https://rope.readthedocs.io/en/latest/rope.html>
_Overview of some of rope's features <https://rope.readthedocs.io/en/latest/overview.html>
_Using as a library <https://rope.readthedocs.io/en/latest/library.html>
_Contributing <https://rope.readthedocs.io/en/latest/contributing.html>
_Send your bug reports and feature requests at python-rope's issue tracker
_ in GitHub.
.. _python-rope's issue tracker
: https://github.com/python-rope/rope/issues
Current active maintainer of Rope is Lie Ryan (@lieryan
_).
Many thanks the following people:
@aligrudi
_) for initially creating the initial Rope project and most of Rope's code@mcepl
_) as former long-time Rope maintainer@soupytwist
_) as former Rope maintainerall of our current and former contributors
_all authors of editor integrations
_.. _@aligrudi
: https://github.com/aligrudi
.. _@soupytwist
: https://github.com/soupytwist
.. _@lieryan
: https://github.com/lieryan
.. _@mcepl
: https://github.com/mcepl
.. _all of our current and former contributors
: https://github.com/python-rope/rope/blob/master/CONTRIBUTORS.md
.. _all authors of editor integrations
: https://github.com/python-rope/rope/wiki/How-to-use-Rope-in-my-IDE-or-Text-editor%3F
.. image:: https://repology.org/badge/vertical-allrepos/python:rope.svg?exclude_unsupported=1 :target: https://repology.org/project/python:rope/versions :alt: Packaging status
.. image:: https://repology.org/badge/vertical-allrepos/rope.svg?exclude_unsupported=1 :target: https://repology.org/project/rope/versions :alt: Packaging status
This program is under the terms of LGPL v3+ (GNU Lesser General Public License).
Have a look at COPYING
_ for more information.
.. _COPYING
: COPYING
FAQs
a python refactoring library...
We found that rope demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.