Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
⚠️ This library is on lifeline support and I am looking for a new maintainer. Please DM me if you are interested.
Songbird bindings for python. The goal is to provide an easy to use alternitive to Lavalink. Its written with rust-bindings to Songbird.
This library requires Opus to be installed. ffmpeg
functions also require FFmpeg to be installed.
:warning: The static-ffmpeg
package on pypi does not work
If you are not on windows, macos, or linux x86_64 or need to use a version of python different than 3.8-3.10 you will need to build the source dist. The only change to the installation process is that Rust will need to be installed before installing from pip.
Once you are connected to a channel, playing music is extremely easy.
from songbird import ytdl
# `voice` was created from a connection to the gateway.
track_handle = await voice.play_source(await ytdl("https://www.youtube.com/watch?v=r25MAkzkTF4"))
await sleep(5)
# Doesn't need to be awaited!
track_handle.pause()
await sleep(5)
track_handle.play()
Hikari and Pincer are currently the only supported libraries. See the examples directory for more information.
from asyncio import run
from songbird import Driver
async def main():
voice = await Driver.create()
# `server` is the server payload from the gateway.
# `state` is the voice state payload from the gateway.
await voice.connect(
token=server.token,
endpoint=server.endpoint,
session_id=state.session_id,
guild_id=server.guild_id,
channel_id=state.channel_id,
user_id=state.user_id
)
run(main())
Pyo3 asyncio is used with tokio.
Maturin should be installed though pip. This is used to build the Rust code to a python lib.
Run command maturin develop
when changes are made to the Rust src.
pyo3 asyncio docs You can also look at the async secion of the pyo3 docs.
Its a good idea to install all the dependencies.
Create API for songbird driver and everything that is needed with it it.
FAQs
A Discord voice library using Python Songbird bindings.
We found that songbird-py demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.