Research
Security News
Kill Switch Hidden in npm Packages Typosquatting Chalk and Chokidar
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
libcomcat is a project designed to provide a Python equivalent to the ANSS ComCat search API. This includes a Python library that provides various classes and functions wrapping around the ComCat API, and a number of command line programs that use those:
findid
Find the ID of an event closest to input parameters (time, latitude, longitude). Also can provide the authoritative ID if an event id is provided.getcsv
Generate csv or Excel files with basic earthquake information.geteventhist
Generate csv or Excel files with a history of product submission for an event.getmags
Download all available magnitudes from all sources.getpager
Download information that represents the PAGER exposure and loss results.getphases
Generate csv or Excel files with phase information.getproduct
Download ComCat product contents (shakemap grids, origin quakeml, etc.)libcomcat
is now installable via pip:
pip install usgs-libcomcat
To uninstall:
pip uninstall usgs-libcomcat
To update:
pip install --upgrade usgs-libcomcat
libcomcat is a python wrapper for the Comprehensive Catalog (ComCat), which has a web page interface and API. ComCat contains information in Events which contain Products. Products contain Contents in the form of files, maps, etc.
The ComCat interface is very user friendly, but does not support automation. The API supports automation, but limits the number of events that can be returned to 20,000. libcomcat uses the API in a way that allows for:
Documentation can be found in the docs folder:
Example Jupyter notebooks show how the API can be used to get and manipulate information from ComCat:
Note: The ShakeMap/DYFI Station Pairs Notebook requires a geodetic distance calculation function
, which can be installed via: pip install geopy
Any questions about libcomcat can be directed to the primary author:
Mike Hearne mhearne@usgs.gov
If you wish to cite this work in your own publication, you may use this DOI: https://doi.org/10.5066/P91WN1UQ
FAQs
Python wrapper around ComCat web API
We found that usgs-libcomcat demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.