Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
.. image:: https://raw.githubusercontent.com/sematic-ai/sematic/main/docs/images/Logo_README.png :target: https://raw.githubusercontent.com/sematic-ai/sematic/main/docs/images/Logo_README.png :alt: Sematic Logo
.. image:: https://img.shields.io/pypi/v/sematic/0.40.0?style=for-the-badge :target: https://img.shields.io/pypi/v/sematic/0.40.0?style=for-the-badge :alt: PyPI
.. image:: https://img.shields.io/circleci/build/github/sematic-ai/sematic/main?label=CircleCI&style=for-the-badge&token=60d1953bfee5b6bf8201f8e84a10eaa5bf5622fe :target: https://app.circleci.com/pipelines/github/sematic-ai/sematic?branch=main&filter=all :alt: CircleCI
.. image:: https://img.shields.io/pypi/l/sematic?style=for-the-badge :target: https://img.shields.io/pypi/l/sematic?style=for-the-badge :alt: PyPI - License
.. image:: https://img.shields.io/badge/Python-3.8-blue?style=for-the-badge&logo=none :target: https://python.org :alt: Python 3.8
.. image:: https://img.shields.io/badge/Python-3.9-blue?style=for-the-badge&logo=none :target: https://python.org :alt: Python 3.9
.. image:: https://img.shields.io/badge/Python-3.10-blue?style=for-the-badge&logo=none :target: https://python.org :alt: Python 3.10
.. image:: https://img.shields.io/badge/Python-3.11-blue?style=for-the-badge&logo=none :target: https://python.org :alt: Python 3.11
.. image:: https://img.shields.io/badge/Python-3.12-blue?style=for-the-badge&logo=none :target: https://python.org :alt: Python 3.12
.. image:: https://img.shields.io/discord/983789877927747714?label=DISCORD&style=for-the-badge :target: https://img.shields.io/discord/983789877927747714?label=DISCORD&style=for-the-badge :alt: Discord
.. image:: https://img.shields.io/badge/Made_by-Sematic_🦊-E19632?style=for-the-badge&logo=none :target: https://sematic.dev :alt: Made By Sematic
.. image:: https://img.shields.io/pypi/dm/sematic?style=for-the-badge :target: https://img.shields.io/pypi/dm/sematic?style=for-the-badge :alt: PyPI - Downloads
.. image:: https://raw.githubusercontent.com/sematic-ai/sematic/main/docs/images/Screenshot_README_2.png :target: https://raw.githubusercontent.com/sematic-ai/sematic/main/docs/images/Screenshot_README_2.png :alt: Sematic Screenshot
Sematic <https://sematic.dev>
_ is an open-source ML development platform. It
lets ML Engineers and Data Scientists write arbitrarily complex end-to-end
pipelines with simple Python and execute them on their local machine, in a cloud
VM, or on a Kubernetes cluster to leverage cloud resources.
Sematic is based on learnings gathered at top self-driving car companies. It enables chaining data processing jobs (e.g. Apache Spark) with model training (e.g. PyTorch, Tensorflow), or any other arbitrary Python business logic into type-safe, traceable, reproducible end-to-end pipelines that can be monitored and visualized in a modern web dashboard.
Read our documentation <https://docs.sematic.dev>
_ and join our Discord channel <https://discord.gg/4KZJ6kYVax>
_.
To get started locally, simply install Sematic in your Python environment:
.. code-block:: shell
$ pip install sematic
Start the local web dashboard:
.. code-block:: shell
$ sematic start
Run an example pipeline:
.. code-block:: shell
$ sematic run examples/mnist/pytorch
Create a new boilerplate project:
.. code-block:: shell
$ sematic new my_new_project
Or from an existing example:
.. code-block:: shell
$ sematic new my_new_project --from examples/mnist/pytorch
Then run it with:
.. code-block:: shell
$ python3 -m my_new_project
To deploy Sematic to Kubernetes and leverage cloud resources, see our
documentation <https://docs.sematic.dev>
_.
Learn more about Sematic and get in touch with the following resources:
Sematic landing page <https://sematic.dev>
_Documentation <https://docs.sematic.dev>
_Discord channel <https://discord.gg/4KZJ6kYVax>
_YouTube channel <https://www.youtube.com/@sematic-ai>
_Our Blog <https://sematic.dev/blog>
_To contribute to Sematic, check out open issues tagged "good first issue" <https://github.com/sematic-ai/sematic/issues?q=is%3Aopen+is%3Aissue+label%3A%22good+first+issue%22>
\ ,
and get in touch with us on Discord <https://discord.gg/4KZJ6kYVax>
.
You can find instructions on how to get your development environment set up
in our developer docs <./developer-docs/README.md>
. If you'd like to add
an example, you may also find
this guide <https://docs.sematic.dev/project/contributor-guide/contribute-example>
helpful.
.. image:: https://static.scarf.sh/a.png?x-pxid=80c3593f-25a0-4b06-90a1-0b670a6567d4 :target: https://static.scarf.sh/a.png?x-pxid=80c3593f-25a0-4b06-90a1-0b670a6567d4 :alt: scarf pixel
FAQs
Unknown package
We found that sematic demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.