
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
This is a public repo for SUEWS source code and documentation.
Documentation site: https://suews.readthedocs.io/
Documentation source: docs
folder in this repo
For users who want to run SUEWS simulations:
Install from PyPI (simplest):
pip install supy
Run a simulation:
suews-run /path/to/config.yml
For developers, see the Developer Note section below.
[!NOTE] the following is deprecated and will be updated
For enhanced development productivity, SUEWS includes integration with Claude Code in a containerised environment:
claude-dev/README.md
for complete setup instructions./claude-dev/claude.sh start myproject
./claude-dev/setup-claude-dev.sh
from repository rootFor local development without containerisation, follow these steps:
Essential Tools:
brew install gcc
sudo apt-get install gfortran
# Install mambaforge (if not already installed)
curl -L -O "https://github.com/conda-forge/miniforge/releases/latest/download/Miniforge3-$(uname)-$(uname -m).sh"
bash Miniforge3-$(uname)-$(uname -m).sh
Recommended Tools:
Clone the repository:
git clone https://github.com/UMEP-dev/SUEWS.git
cd SUEWS
Initialise submodules (required for SPARTACUS dependency):
git submodule init
git submodule update
Note: If permission denied, configure SSH for GitHub
Create development environment:
mamba env create -f env.yml
This creates suews-dev
environment with all required packages.
Activate environment:
mamba activate suews-dev
Build SUEWS:
# Quick development build (recommended)
make dev
# Or full build with tests
make
Verify installation:
pip show supy
suews-run --help
Build commands:
make dev # Fast development build
make # Full build with tests
make test # Run test suite only
make clean # Clean build artifacts
make wheel # Build distribution wheels
make docs # Build documentation
make livehtml # Live documentation preview
Environment management:
make help # Show all available commands
make deactivate # Show deactivation command
Common issues:
make clean
before rebuildingsuews-dev
environmentSUEWS/
├── src/
│ ├── suews/ # Fortran physics engine
│ ├── supy/ # Python interface
│ └── supy_driver/ # F2Py wrapper
├── test/ # Test suite
├── docs/ # Documentation source
├── env.yml # Development environment
└── Makefile # Build commands
GDB is a generic debugging tool used along with gfortran. Here are some tips to debug SUEWS code:
Recent macOS (since High Sierra) introduces extra security procedures for system level operations that makes installation GDB more tedious than before.
The best practice, in TS's opinion, to avoid hacking your macOS, is to use Linux docker images with gfortran & gdb installations: e.g., alpine-gfortran
(otherwise, this guide might be useful for installation of GDB on macOS; also run set startup-with-shell off
inside GDB before run
the debuggng process)
Once the docker image is installed, simply run this from the SUEWS root folder for debugging:
docker run --rm -it -v $(pwd):/source sunt05/alpine-gfortran /bin/bash
which will mount the current SUEWS
directory to docker's path /source
and enter the interactive mode for debugging.
Makefile
under SUEWS-SourceCode
by removing the #
after the equal sign =
:FCNOOPT = -O0
FFLAGS = -O3 $(STATIC) $(FCDEBUG) -Wall -Wtabs -fbounds-check -cpp \
-Wno-unused-dummy-argument -Wno-unused-variable
SUEWS
:make clean; make
SUEWS
binary into your SUEWS testing folder (e.g., Test/BaseRun/2019a
) and load it into GDB:gdb SUEWS
run
then you should have stack info printed out by GDB if any runtime error occurs.
More detailed GDB tutorial can be found here.
FAQs
The SUEWS model that speaks Python.
We found that supy demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.