
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
To extract the text from an image:
::
$ transcribe ocr /path/to/image.jpg
To extract the text from an audio file:
::
$ transcribe speech /path/to/audio.mp3
Google Cloud setup
Transcribe uses Google’s cloud services to perform the text extraction,
that means you have to setup a Google cloud project. Below is roughly
how I did that…
I went to `The console <https://console.cloud.google.com>`__
Selected *Project* in the top left corner (to the right of *Google Cloud
Platform*) and then create a new project, wait a bit for it to create
the project and switch to it (this took like 20 seconds while I was
trying to figure out what the heck was going on). Then activate the
vision and speech apis (I think storage is automatically activated) and
then select Credentials, and create an api key. `More auth info
here <https://cloud.google.com/vision/docs/common/auth>`__.
Turns out I also needed to `create a service json
file <https://cloud.google.com/storage/docs/authentication#generating-a-private-key>`__.
To do this I needed to go to `the dashboard for the
project <https://console.cloud.google.com/apis/credentials?project=vision-157908>`__
and then click **Create credentials** and choose **Service account
key**.
Then add this to your ``.bash_profile`` or something similar:
::
export GOOGLE_APPLICATION_CREDENTIALS="/path/to/keyfile.json"
ffmpeg
~~~~~~
If you’re on a Mac and you use Homebrew, you can install ffmpeg like:
::
$ brew install --with-opus ffmpeg
If you’re not on a Mac or don’t use Homebrew you’re on your own.
.. _transcribe-1:
Transcribe
~~~~~~~~~~
Install using pip:
::
$ pip install transcribe
or the latest and greatest:
::
$ pip install "git+https://github.com/Jaymon/transcribe#egg=transcribe"
FAQs
Convert images or audio files to plain text on the command line
We found that transcribe demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.