
Security News
Risky Biz Podcast: Making Reachability Analysis Work in Real-World Codebases
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Weasel lets you manage and share end-to-end workflows for
different use cases and domains, and orchestrate training, packaging and
serving your custom pipelines. You can start off by cloning a pre-defined
project template, adjust it to fit your needs, load in your data, train a
pipeline, export it as a Python package, upload your outputs to a remote storage
and share your results with your team. Weasel can be used via the
weasel
command and we provide templates in our
projects
repo.
The easiest way to get started is to clone a project template and run it – for example, this end-to-end template that lets you train a spaCy part-of-speech tagger and dependency parser on a Universal Dependencies treebank.
python -m weasel clone pipelines/tagger_parser_ud
Note
Our
projects
repo includes various project templates for different NLP tasks, models, workflows and integrations that you can clone and run. The easiest way to get started is to pick a template, clone it and start modifying it!
Get started with the documentation:
Weasel is a standalone replacement for spaCy Projects. There are a few backward incompatibilities that you should be aware of:
SPACY_CONFIG_OVERRIDES
environment variable is no longer checked.
You can set configuration overrides using WEASEL_CONFIG_OVERRIDES
.spacy_version
configuration key has been dropped.check_requirements
configuration key has been dropped.SPACY_PROJECT_USE_GIT_VERSION
environment variable has been dropped.Weasel checks for the first three incompatibilities and will issue a warning if you're using it with spaCy-specific configuration options.
FAQs
Weasel: A small and easy workflow system
We found that weasel demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
Security News
CISA’s 2025 draft SBOM guidance adds new fields like hashes, licenses, and tool metadata to make software inventories more actionable.