Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
The tracking backend for freemocap. Collects different pose estimation tools and aggregates them using a consistent API. Can run pose estimation on images, webcams, and videos.
Installation: pip install skellytracker
Then it can be run with skellytracker
.
Running the basic skellytracker
will open the first webcam port on your computer and run pose estimaiton in realtime with mediapipe holistic as a tracker. You can specify the tracker with skellytracker TRACKER_NAME
, where TRACKER_NAME
is the name of an available tracker. To view the names of all available trackers, see RUN_ME.py
.
It will take some time to initialize the tracker the first time you run it, as it will likely need to download the model.
To use skellytracker in your project, import a tracker like from skellytracker import YOLOPoseTracker
, then instantiate it with your desired parameters like tracker = YOLOPoseTracker(model_size="medium")
, and then use tracker.process_image(frame)
or tracker.process_video(video_filepath)
. Processing image by image will let you access each individual annotated frame with tracker.annotated_image
, and you can optionally record the data with tracker.recorder.record()
. Access recorded data with tracker.recorder.process_tracked_objects()
. The running, recording, and processing are done separately to give control over the amount of processing done at each step in the pipeline. Processing an entire video allows you to save the annotated frames as a video, and optionally saves and returns the data as a numpy array. Each tracker has an associated ModelInfo
class to access model attributes.
Skellytracker is still under development, so version updates may make breaking changes to the API. Please report any issues and pull requests to the skellytracker repo.
To extend the API, import the BaseTracker
and BaseRecorder
abstract base classes from skellytracker. Then create a new tracker and recorder inheriting from the base classes and implement all of the abstract methods.
We love your input! We want to make contributing to this project as easy and transparent as possible, whether it's:
Pull requests are the best way to propose changes to the codebase (we use Github Flow). We actively welcome your pull requests:
main
.pip install -e '.[dev]'
.pytest skellytracker/tests
.FAQs
Top-level package for skellytracker
We found that skellytracker demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.