
Research
SANDWORM_MODE: Shai-Hulud-Style npm Worm Hijacks CI Workflows and Poisons AI Toolchains
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.
vale
Advanced tools
⚠️ Vale is a software developed by errata.ai and a community of open-source contributors. This repository just makes that software available to Python users. The author is not affiliated nor endorsed by errata.ai.
Vale is a command-line tool that can enforce an editorial style guide onto your text. It's written in Go. The purpose of this package is to allow Python users to have Vale as a dependency of a Python application or library and this way allow installing Vale without resorting to manual installation or similar.
You can add vale package as a dependency in your setup.py,
requirements.txt or pyproject.toml file depending on how are you managing
dependencies. For example, in requirements.txt:
vale==3.13.0
The version of this Python package corresponds exactly to Vale's version. That
is, if you add vale==2.20.0 as a dependency, Vale with that same version will
be installed. Note that Vale as such is not included in this package but
downloaded the first time you execute vale.
New releases using the last Vale versions are delivered in an automated way. See Version Bump if Vale Updated workflow. The new versions of Vale are checked once a day.
pyproject.toml. Changing the version changes the
version of Vale that gets downloaded. See note below.Note: Pypi doesn't allow to re-release (even if releases or projects are
deleted). If you want to release this package for a new version of Vale, just
update the version attribute found in pyproject.toml so that it matches the
version of Vale that you want to release. If something needs to be fixed in
this package, use or increase the 4th number in the version in
pyproject.toml. The 4th number will be ignored when it comes to downloading
Vale but will be used to release the package to PyPi.. For example, if you use
2.20.0.1, this package will try to download vale==2.20.0. The python
package version will still be 2.20.0.1 in PyPi.
FAQs
Install and use Vale (grammar & style check tool) in python environments.
We found that vale demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.

Company News
Socket is proud to join the OpenJS Foundation as a Silver Member, deepening our commitment to the long-term health and security of the JavaScript ecosystem.

Security News
npm now links to Socket's security analysis on every package page. Here's what you'll find when you click through.