Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
STAC specification is a method of exposing spatial and temporal data collections in a standardized manner. Specifically, the SpatioTemporal Asset Catalog (STAC) specification describes and catalogs spatiotemporal assets using a common structure. This package creates STAC metadata by harvesting dataset details from the Thredds data server.
Install this package in a dedicated python environment via
python -m venv venv
source venv/bin/activate
pip install tds2stac
To use this in a development setup, clone the source code from gitlab, start the development server and make your changes::
git clone https://codebase.helmholtz.cloud/cat4kit/ds2stac/tds2stac
cd tds2stac
python -m venv venv
source venv/bin/activate
make dev-install
More detailed installation instructions might be found in the docs.
This package has been generated from the template https://codebase.helmholtz.cloud/hcdc/software-templates/python-package-template.git.
See the template repository for instructions on how to update the skeleton for this package.
Copyright © 2023 Karlsruher Institut für Technologie
Code files in this repository are licensed under the EUPL-1.2, if not stated otherwise in the file.
Documentation files in this repository are licensed under CC-BY-4.0, if not stated otherwise in the file.
Supplementary and configuration files in this repository are licensed under CC0-1.0, if not stated otherwise in the file.
Please check the header of the individual files for more detailed information.
License management is handled with reuse
.
If you have any questions on this, please have a look into the
contributing guide or contact the maintainers of
tds2stac
.
FAQs
TDS2STAC
We found that tds2stac demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.