Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
This repo contains a Python library with some classes to easily access the Unified API of the Transport for London which allows the access to the BikePoints, Bus Lines and Places services among others. These services are part of the public TfL open data platform.
In addition to the Python wrapper some test applications are included; this will help you know how everything works and, on top of that, you can use it to interact with the service. No credentials are needed to use the services covered at the moment.
The following are the requirements needed to make it work:
This Python library has been successfully tested with OSBDET S21R1 on a Debian 10 x64 host.
Remember to add the library to the PYTHONPATH environment variable if you want to use it from your code or if you want to run the tests Python scripts; you can do so by running the following line within the folder where the repo was cloned:
$ export PYTHONPATH=$PYTHONPATH:`pwd`
If you want to persist this environment variable, add it to your user's profile and it'll be created everytime you log into your computer.
The BikePoint
class allows you to leverage information about bike point locations in the great city of London; this class wrapps the BikePoint API, although not all the functions/webmethods are wrapped.
The following are the functions/webmethods wrapped at the moment:
test_bikepoint.py
let you test this service easily; no credentials are needed. test_bikepoint.py -h
will give you all the details on how to run it:
$ python3 tests/test_bikepoint.py -h
usage: test_bikepoint.py [-h] [-bid BIKEPOINT_ID]
{info_bikepoint_locations,info_bikepoint}
positional arguments:
{info_bikepoint_locations,info_bikepoint}
what is going to be requested to the Unified API
service
optional arguments:
-h, --help show this help message and exit
-bid BIKEPOINT_ID, --bikepoint_id BIKEPOINT_ID
bikepoint identifier for action 'info_bikepoint'
The BusService
class allows you to leverage information about bus lines in the great city of London; this class wrapps the Line API, although not all the functions/webmethods are wrapped.
The following are the functions/webmethods wrapped at the moment:
test_busservice.py
let you test this service easily; no credentials are needed. test_busservice.py -h
will give you all the details on how to run it:
$ python3 tests/test_busservice.py -h
usage: test_busservice.py [-h] [-bid BUS_LINE_ID]
{info_bus_lines,status_bus_lines,status_bus_line}
positional arguments:
{info_bus_lines,status_bus_lines,status_bus_line}
what is going to be requested to the Unified API
service
optional arguments:
-h, --help show this help message and exit
-bid BUS_LINE_ID, --bus_line_id BUS_LINE_ID
bus line identifier for action 'status_bus_line'
The Places
class allows you to leverage information about places in the great city of London; this class wrapps the Place API, although not all the functions/webmethods are wrapped. Only ChargeStation and ChargeConnector places are considered at the moment.
The following are the functions/webmethods wrapped at the moment:
test_places.py
let you test this service easily; no credentials are needed. test_places.py -h
will give you all the details on how to run it:
$ python3 tests/test_places.py -h
usage: test_places.py [-h] {info_charge_connectors,info_charge_stations}
positional arguments:
{info_charge_connectors,info_charge_stations}
what is going to be requested to the Unified API
service
optional arguments:
-h, --help show this help message and exit
FAQs
A Python wrapper for the Unified API of the Transport for London
We found that tfl-bsdprof demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.