Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Scorched is a sunburnt offspring and like all offspring it tries to make things better or at least different.
Git Repository and issue tracker: https://github.com/lugensa/scorched
Documentation: http://scorched.readthedocs.org/en/latest/
.. |travisci| image:: https://travis-ci.org/lugensa/scorched.png .. _travisci: https://travis-ci.org/lugensa/scorched
.. image:: https://coveralls.io/repos/lugensa/scorched/badge.png :target: https://coveralls.io/r/lugensa/scorched
|travisci|_
.. _Solr : http://lucene.apache.org/solr/ .. _Lucene : http://lucene.apache.org/java/docs/index.html
Following some major differences:
No validation of queries in client code (make code much more lightweight)
Send and receive as json. (Faster 20k docs from 6.5s to 1.3s)
API is more lightweight e.g. add
consumes now only dicts.
Wildcard search strings need to be explicitly set.
Python 3
Drops support for Solr < 4.3.0
...
First checkout the sources::
https://github.com/lugensa/scorched.git
Now create a virtual-env and install some dependencies::
cd scorched virtualenv ./ bin/pip install -e . bin/pip install -e .[test]
Start the Solr server to test against::
SOLR_VERSION=4.10.2 SOLR_PORT=44177 DEBUG=true SOLR_CONFS="scorched/tests/solrconfig.xml" ./testing-solr.sh
kill -9 $pid
Running the tests::
SOLR_URL=http://localhost:44177/solr/core0 ./bin/nosetests -s scorched
Add extract handler support (mamico)
Allow user to pass an http_connection to SolrInterface ctor (quinot)
BaseSearch
has now a count
function (mlissner)
Support atomic updates (ale-rt)
Highlighting is now available in the result documents as the
solr_highlights
field (mlissner)
smaller documentation cleanup
Fix is_iter implementation #30 (mamico)
Multi-value date fields work (mlissner)
Fixes error in the readme so that DEBUG mode works as documented (mlissner)
Return response for update actions (mamico)
Add support for Solr cursors (Chronial)
Added stats option (rlskoeser)
Better check datetime dynamicfields (mamico)
RealTime Get (Chronial)
TermVector support (Chronial)
use compat.basestring over compat.str in date convert (mamico)
remove test from core requirements (mamico)
added search_timeout paramter to SolrConnection (mamico)
fix. Do not alter documents while adding new documents
Test against Solr 4.10.2 and added Python 3.4 to travis.
Added support for dismax queries.
Added support edismax field aliases.
Added support for facet ranges.
Add debugQuery
parameter to search. (#9903)
Add possibility to specify the request handler to use per query. (#9704)
Fixed fields convert to arrays.
Added FacetPivotOptions.
Added PostingsHighlightOptions.
Added boundaryScanner to HighlightOptions.
Added more tests
Added description in setup.py
Python 3
Cleaner api moved redundant functions
Cleaner api removed filter_exclude use ~si.Q()
Cleaner api removed exclude use ~si.Q()
Fixed mlt_search (mlt component and handler)
Removed mx.DateTime
Removed redundant more_like_this
Offspring of sunburnt is born
FAQs
solr search orm like query builder
We found that scorched demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.