
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Framework / toolkit for building bots with telebot.
Clone repository
git clone git@github.com:bots-against-war/telebot-components.git baw
cd ./baw
The project requires Poerty 1.5.1 (see installation instruction).
For example, to install 1.5.1
on Unix, run
curl -sSL https://install.python-poetry.org | python3 - --version 1.5.1
Then, to install the library with all dependencies, run from project root
poetry install
0.0.0
):
poetry self add poetry-dynamic-versioning-plugin
poetry config virtualenvs.in-project false --local
Run pre-commit
to set up git hook scripts
pre-commit install
Use command below for run tests
poetry run pytest tests -vv
To also generate test coverage report
poetry run coverage run -m pytest tests -vv && poetry run coverage report
By default, all tests are run with in-memory Redis emulation. But if you want you can run them
locally on real Redis by specifying REDIS_URL
environment variable before running pytest
.
Note: Tests must be able to find an empty Redis DB to use; they also clean up after themselves.
For first start you need to do 3 things:
cp ./examples/example.env ./examples/.env
Note: After
.env
file is generated you will need to add your bot's token to it.
Also for bot withtrello integration
you need to addtrello
token and api key. You can get it here.
docker run --name baw-redis -d -p 6379:6379 redis redis-server --save 60 1 --loglevel warning
./examples
python3 ./examples/feedback_bot.py // or run with IDE from bot file
FAQs
Framework/toolkit for building Telegram bots with telebot and redis
We found that telebot-components demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.