Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
simplelayoutpiglet94
Advanced tools
Sphinx is a powerful documentation generator that has many great features for writing technical documentation including:
- Generate web pages, printable PDFs, documents for e-readers (ePub), and more all from the same sources
- You can use reStructuredText or Markdown to write documentation
- An extensive system of cross-referencing code and documentation
- Syntax highlighted code samples
- A vibrant ecosystem of first and third-party extensions
Python 生态的文档大都以 Sphinx 进行发布,例如 Python 自身的官方文档、Pytorch 文档 等等。
Read the Docs 是一个可以自动化托管 Sphinx 文档的网站。
Read the Docs 有上手教程,参考。
2-simplelayout-generator
项目中的 simplelayout
目录复制到本次作业的 src
目录下。setup.py
setuptools.setup()
,确保能被 pip
正确安装,要求
simplelayout-github账号名
src/simplelayout
这个 packageinstall_requires
包含 simplelayout
的相关依赖entry_points
,使命令 simplelayout
对应 simplelayout/__main__.py
中的 main()
函数docs
目录,并创建 Sphinx
项目。
sphinx-quickstart
时输入相关信息Feedback
上本次作业的在线测试分为以下部分:
pip install .
分值:1 分
pip install .
simplelayout -h
分值:1 分
以上测试通过后,会在 Feedback
中打印相关信息(包括 PyPI 链接,生成图片),但不会对 PyPI
、Read the Docs
自动测试
FAQs
A small study package
We found that simplelayoutpiglet94 demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.