Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
types-confluent-kafka
Advanced tools
types-confluent-kafka
is a package that provides type hints for the confluent-kafka
Python package. It's designed to enhance your development experience by enabling type checking with tools like mypy
and providing auto-completion support in your LSP (language server).
Important Note: Confluent does not officially endorse this package.
please check the table
The package can be installed from PyPI
pip install --no-cache-dir types-confluent-kafka
alternatively, if you use poetry
, for example,
poetry add --group dev types-confluent-kafka
types-confluent-kafka
follows Semantic Versioning 2.0.0. This means that we use version numbers like MAJOR.MINOR.PATCH
to indicate changes in the package:
MAJOR
version for incompatible API changes,MINOR
version for adding new features in a backward-compatible manner,PATCH
version for backward-compatible bug fixes.This package will be released as frequently as possible to iterate faster and provide you with the latest features and improvements. Frequent releases also allow us to quickly address and release bug fixes to ensure the stability of the package.
The commit follows conventional commits, which is the driver of how the versioning works.
Contributions to types-confluent-kafka
are welcome and encouraged! If you want to contribute, please follow these steps:
git checkout -b feature/your-feature-name
.Please note that this project follows the Contributor Covenant Code of Conduct. By participating, you are expected to uphold this code.
please check the development guide
This project is licensed under the Apache 2.0 License. You are free to use, modify, and distribute the code according to the terms of this license.
FAQs
Unknown package
We found that types-confluent-kafka demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.