Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
widget-periodictable
Advanced tools
widget-periodictable
: A Interactive Perodic Table in Jupyterpip install widget-periodictable
For usage examples, see examples/
.
Install the python code:
pip install -e .[dev]
You then need to install the JavaScript dependencies and run the development server.
npm install
npm run dev
Open the example notebook in JupyterLab, VS Code, or your favorite editor to start developing. Changes made in js/
will be reflected in the notebook.
In order to make a new release of the library and publish to PYPI, run
bumpver update --major/--minor/--patch
This will
git commit
and a git tag
;If the widget test
fails, it indicates there is something wrong with the code, and the widget is NOT
being displayed correctly in the test.
If the widget test
passes but the screenshot comparison
fails, it indicates the appearance of the widget
is different from the previous version. In this case, you'll need to manually download the artifact from
the widget test
and use it to replace the widget-sample.png
figure in the test
folder.
We acknowledge support from the EPFL Open Science Fund via the OSSCAR project.
FAQs
A jupyter widget of the periodic table of elements.
We found that widget-periodictable demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.