Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
SWIG is a software development tool that connects programs written in C and C++ with a variety of high-level programming languages.
A project that packages SWIG as a Python package, enabling swig
to be installed from PyPI:
pip install swig
or used as part of build-system.requires
in a pyproject.toml file:
[build-system]
requires = ["swig"]
PyPI package versions will follow the major.minor.patch
version numbers of SWIG releases.
Binary wheels for Windows, macOS, and Linux for most CPU architectures supported on PyPI are provided. ARM wheels for Raspberry Pi available at https://www.piwheels.org/project/swig/.
SWIG License: GPL-3.0-or-later with portions under LICENSE-UNIVERSITIES (see LICENSE-SWIG for details)
SWIG can be installed by pip with:
pip install swig
or:
python -m pip install swig
Building from the source dist package requires internet access in order to download a copy of the SWIG source code.
Using pipx run swig <args>
will run SWIG without any install step, as long as the machine has pipx installed (which includes GitHub Actions runners).
SWIG can be added to the build-system.requires
key in a pyproject.toml file for building Python extensions that use SWIG to generate bindings.
[build-system]
requires = ["swig"]
The code for this project is covered by the Apache License, Version 2.0. Source distributions do not include a copy of the SWIG source code or binaries. Binary wheels are covered by the SWIG license (GPLv3), due to their inclusion of a compiled SWIG binary and library files.
SWIG is distributed under the GNU General Public License v3 or later with portions under the file LICENSE-UNIVERSITIES. For more information about SWIG, visit http://www.swig.org
FAQs
SWIG is a software development tool that connects programs written in C and C++ with a variety of high-level programming languages.
We found that swig demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.