Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
A general tool chain integration framework for multidisciplinary analysis and optimization
TopDesign is a general tool chain integration platform for multidisciplinary analysis and optimization, developed in DTU Wind as an open source tool.
The concept of the platform and the usage example on wind farm design can be found in:
Feng, Ju, and Jens Nørkær Sørensen. "Towards a general tool chain integration platform for multi-disciplinary analysis and optimization in wind energy." In Journal of Physics: Conference Series, vol. 2767, no. 8, p. 082014. IOP Publishing, 2024. [link]
Source code of the platform is hosted in DTU Wind's GitLab site:
Development of this platform has been partially supported by the MERIDIONAL project, which receives funding from the European Union’s Horizon Europe Programme under the grant agreement No. 101084216.
You can install the TopDesign package from PyPI using the following command:
pip install topdesign
You can also install TopDesign from GitLab (includes any recent updates):
pip install git+https://gitlab.windenergy.dtu.dk/topdesign/topdesign.git
We highly recommend developers to install TopDesign into a dedicated environment. The commands to clone and install TopDesign with developer options including dependencies required to run the tests into the current active environment in an Anaconda Prompt are as follows:
git clone https://gitlab.windenergy.dtu.dk/topdesign/topdesign.git cd topdesign pip install -e .
The standard topdesign platform relies only on numpy, matplotlib and scipy.
To run the example on wind farm design, you need to have py_wake and floris (==3.5) installed.
To run the example on multi-language model integration, you need to have matlabengine and juliacall installed.
FAQs
A general tool chain integration framework for multidisciplinary analysis and optimization
We found that topdesign demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.