Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Wildcard Match provides an enhanced fnmatch
, glob
, and pathlib
library in order to provide file matching and
globbing that more closely follows the features found in Bash. In some ways these libraries are similar to Python's
builtin libraries as they provide a similar interface to match, filter, and glob the file system. But they also include
a number of features found in Bash's globbing such as backslash escaping, brace expansion, extended glob pattern groups,
etc. They also add a number of new useful functions as well, such as globmatch
which functions like fnmatch
, but for
paths.
Wildcard Match also adds a file search utility called wcmatch
that is built on top of fnmatch
and globmatch
. It
was originally written for Rummage, but split out into this project to be
used by other projects that may find its approach useful.
Bash is used as a guide when making decisions on behavior for fnmatch
and glob
. Behavior may differ from Bash
version to Bash version, but an attempt is made to keep Wildcard Match up with the latest relevant changes. With all of
this said, there may be a few corner cases in which we've intentionally chosen to not exactly mirror Bash. If an issue
is found where Wildcard Match seems to deviate in an illogical way, we'd love to hear about it in the
issue tracker.
A quick overview of Wildcard Match's Features:
fnmatch
, glob
, and pathlib
.**
in glob.***
recursive glob for symlinks.\
.[[:alnum:]]
, etc. The C
locale is used.a{b,{c,d}}
--> ab ac ad
.~
or ~username
to the appropriate user path.@(...)
, +(...)
, *(...)
, ?(...)
, and !(...)
.globmatch
.pathlib
variant that uses Wildcard Match's glob
library instead of Python's default.wcmatch
.Installation is easy with pip:
pip install wcmatch
https://facelessuser.github.io/wcmatch/
MIT
FAQs
Wildcard/glob file name matcher.
We found that wcmatch demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.