Get a list of the top-10 rejected libraries in your WhiteSource inventory

WhiteSource-PS-tools

Last update: Mar 23, 2022

Related tags

Miscellaneous ws-top10-rejected-libs

Overview

WhiteSource Top 10 Rejected Libraries

Generate a spreadsheet listing the 10 most common libraries in your WhiteSource inventory that were rejected by policies.

Supported Operating Systems

Linux (Bash): CentOS, Debian, Ubuntu, RedHat
Windows (PowerShell): 10, 2012, 2016

Prerequisites

Python 3.6+

Installation

Clone the ws-top10-rejected-libs repository to your environment:
git clone https://github.com/whitesource-ft/ws-top10-rejected-libs.git
Navigate into the created directory and install the required dependencies:
cd ./ws-top10-rejected-libs
pip install -r requirements.txt
Navigate into the main application directory:
cd ./ws_top10_rejected_libs
Execute the application following the instructions below.
The first execution will require a one time configuration, prompting for the following parameters, which will be saved into an automatically-generated local top10_rejected.py.config file:
- Organization Name - your WhiteSource organization name
- API Key - your WhiteSource API Key (organization token)
- User Key - a WhiteSource User Key with admin permissions (this could be either an individual user or a service user)
- Domain - the domain prefix of your WhiteSource Server Url (e.g. saas, saas-eu, app, app-eu)
- Company Name - the display name to be used for the generated spreadsheet (defaults to the organization name, if not provided)
- Default Period - the default period in months to generate the spreadsheet for (defaults to 3)
- Use Header Image - whether the spreadsheet should include a header image
- Start Date - start date for the reported period in yyyy-MM-dd format (this parameter is not part of the one time configuration, it's part of the execution itself, and will only be prompted if not provided as a command-line argument as detailed below)

Execution

Show help and usage menu:
python top10_rejected.py --help

Interactive execution (mandatory parameters will be prompted for input):
python top10_rejected.py

Unattended execution (specifying command-line arguments):
python top10_rejected.py --argument "value"
python top10_rejected.py -arg "value"

Example:
python top10_rejected.py --start "2021-02-27"

Command-Line Arguments

The following command line arguments can be specified to override configuration set by the local top10_rejected.py.config file.
The parameters marked as Required are typically saved to the config file during the first execution and thus are not required for every execution, unless the config file is not present.

Parameter	Type	Required	Description
‑h, ‑‑help	switch	No	Show help and usage menu
‑s, ‑‑start	string	Yes	Start date in format `yyyy-MM-dd`. Default: config file option `DefaultPeriodMonths`.
‑e, ‑‑end	string	No	End date in format `yyyy-MM-dd`. Default: current date.
‑o, ‑‑organization	string	Yes	WhiteSource Organization Name
‑c, ‑‑company	string	No	Company name. If not provided, WhiteSource Organization name will be used.
‑d, ‑‑domain	string	Yes	WhiteSource server domain prefix: `https://DOMAIN.whitesourcesoftware.com` (e.g: `saas`).
‑apiKey	string	Yes	WhiteSource API Key (Organization Token).
‑userKey	string	Yes	A WhiteSource User Key with admin permissions (this could be either an individual user or a service user).

Comments

Consolidated information about all the affected versions of a library

Hello Team,

Generated report has only the version specific library data. We need to circulate this list to everyone in the organization. Due to the version specific alerts mentioned in report, it becomes partial data that we are rolling out to the general product teams. The teams using other affected versions would not be notified about their versions status. We would really like to see the consolidated data for all the affected versions of a particular library.

P.S.: WhiteSource scan results are regularly being inspected and verified by the experts.

For example: Report highlights that 58 projects are affected by library "pqr" with version 1.1.1. But other versions of library "pqr" used by other product teams are not highlighted. This will install the relief in those remaining product teams that though their version of "pqr" library is affected they do not have to worry as it is not listed in the list. The ask here is to have a consolidated data of all the affected versions of library "pqr" so every team using it would be notified and would take the corrective actions.

Thanks! Rahul

opened by RWavdhane 1
Missing - Resolution to the affected libraries

Hello Team,

The generated report lists the affected library but does not have the fixing (mitigation) information in it. Although, there is a link to library details page from WhiteSource, but it would be very handy and quick to fix the alerts if the resolution (top fix(es)) are included in reports.

Thanks! Rahul

opened by RWavdhane 1
Missing - CVE IDs of affected Libraries

Hello Team,

Final generated report does not contain CVE ID information for affected libraries. It would be very useful to have the CVE IDs for the affected libraries in the final report. This will allow the Security Subject Matter Experts to analyze the CVE of the library and advice the teams on whether the alert really affects the used functionality of the open source code or not.

Thanks! Rahul

opened by RWavdhane 1
Action Required: Fix Renovate Configuration

There is an error with this repository's Renovate configuration that needs to be fixed. As a precaution, Renovate will stop PRs until it is resolved.

Error type: Cannot find preset's package (schedule:every weekend)

opened by mend-for-github-com[bot] 0
Update dependency requests to ~=2.28.1 (master) - autoclosed
This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | requests (source, changelog) | ~=2.25.1 -> ~=2.28.1 | | | | |

Release Notes

psf/requests

v2.28.1

Compare Source

Improvements

Speed optimization in iter_content with transition to yield from. (#6170)

Dependencies

Added support for chardet 5.0.0 (#6179)

Added support for charset-normalizer 2.1.0 (#6169)

v2.28.0

Compare Source

Deprecations

⚠️ Requests has officially dropped support for Python 2.7. ⚠️ (#6091)

Requests has officially dropped support for Python 3.6 (including pypy3.6). (#6091)

Improvements

Wrap JSON parsing issues in Request's JSONDecodeError for payloads without an encoding to make json() API consistent. (#6097)

Parse header components consistently, raising an InvalidHeader error in all invalid cases. (#6154)

Added provisional 3.11 support with current beta build. (#6155)

Requests got a makeover and we decided to paint it black. (#6095)

Bugfixes

Fixed bug where setting CURL_CA_BUNDLE to an empty string would disable cert verification. All Requests 2.x versions before 2.28.0 are affected. (#6074)

Fixed urllib3 exception leak, wrapping urllib3.exceptions.SSLError with requests.exceptions.SSLError for content and iter_content. (#6057)

Fixed issue where invalid Windows registry entires caused proxy resolution to raise an exception rather than ignoring the entry. (#6149)

Fixed issue where entire payload could be included in the error message for JSONDecodeError. (#6036)

v2.27.1

Compare Source

Bugfixes

Fixed parsing issue that resulted in the auth component being dropped from proxy URLs. (#6028)

v2.27.0

Compare Source

Improvements

Officially added support for Python 3.10. (#5928)

Added a requests.exceptions.JSONDecodeError to unify JSON exceptions between Python 2 and 3. This gets raised in the response.json() method, and is backwards compatible as it inherits from previously thrown exceptions. Can be caught from requests.exceptions.RequestException as well. (#5856)

Improved error text for misnamed InvalidSchema and MissingSchema exceptions. This is a temporary fix until exceptions can be renamed (Schema->Scheme). (#6017)

Improved proxy parsing for proxy URLs missing a scheme. This will address recent changes to urlparse in Python 3.9+. (#5917)

Bugfixes

Fixed defect in extract_zipped_paths which could result in an infinite loop for some paths. (#5851)

Fixed handling for AttributeError when calculating length of files obtained by Tarfile.extractfile(). (#5239)

Fixed urllib3 exception leak, wrapping urllib3.exceptions.InvalidHeader with requests.exceptions.InvalidHeader. (#5914)

Fixed bug where two Host headers were sent for chunked requests. (#5391)

Fixed regression in Requests 2.26.0 where Proxy-Authorization was incorrectly stripped from all requests sent with Session.send. (#5924)

Fixed performance regression in 2.26.0 for hosts with a large number of proxies available in the environment. (#5924)

Fixed idna exception leak, wrapping UnicodeError with requests.exceptions.InvalidURL for URLs with a leading dot (.) in the domain. (#5414)

Deprecations

Requests support for Python 2.7 and 3.6 will be ending in 2022. While we don't have exact dates, Requests 2.27.x is likely to be the last release series providing support.

v2.26.0

Compare Source

Improvements

Requests now supports Brotli compression, if either the brotli or brotlicffi package is installed. (#5783)

Session.send now correctly resolves proxy configurations from both the Session and Request. Behavior now matches Session.request. (#5681)

Bugfixes

Fixed a race condition in zip extraction when using Requests in parallel from zip archive. (#5707)

Dependencies

Instead of chardet, use the MIT-licensed charset_normalizer for Python3 to remove license ambiguity for projects bundling requests. If chardet is already installed on your machine it will be used instead of charset_normalizer to keep backwards compatibility. (#5797)

You can also install chardet while installing requests by specifying [use_chardet_on_py3] extra as follows:

pip install "requests[use_chardet_on_py3]"

Python2 still depends upon the chardet module.

Requests now supports idna 3.x on Python 3. idna 2.x will continue to be used on Python 2 installations. (#5711)

Deprecations

The requests[security] extra has been converted to a no-op install. PyOpenSSL is no longer the recommended secure option for Requests. (#5867)

Requests has officially dropped support for Python 3.5. (#5867)

Configuration

📅 Schedule: At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

[ ] If you want to rebase/retry this PR, click this checkbox.
opened by mend-for-github-com[bot] 0
certifi-2022.6.15-py3-none-any.whl: 1 vulnerabilities (highest severity is: 6.8)
Vulnerable Library - certifi-2022.6.15-py3-none-any.whl

Python package for providing Mozilla's CA Bundle.

Library home page: https://files.pythonhosted.org/packages/e9/06/d3d367b7af6305b16f0d28ae2aaeb86154fa91f144f036c2d5002a5a202b/certifi-2022.6.15-py3-none-any.whl

Path to dependency file: /requirements.txt

Path to vulnerable library: /requirements.txt,/tmp/ws-scm/ws-top10-rejected-libs

Vulnerabilities

| CVE | Severity | CVSS | Dependency | Type | Fixed in (certifi version) | Remediation Available | | ------------- | ------------- | ----- | ----- | ----- | ------------- | --- | | CVE-2022-23491 | Medium | 6.8 | certifi-2022.6.15-py3-none-any.whl | Direct | certifi - 2022.12.07 | ✅ |

Details

CVE-2022-23491

Vulnerable Library - certifi-2022.6.15-py3-none-any.whl

Python package for providing Mozilla's CA Bundle.

Library home page: https://files.pythonhosted.org/packages/e9/06/d3d367b7af6305b16f0d28ae2aaeb86154fa91f144f036c2d5002a5a202b/certifi-2022.6.15-py3-none-any.whl

Path to dependency file: /requirements.txt

Path to vulnerable library: /requirements.txt,/tmp/ws-scm/ws-top10-rejected-libs

Dependency Hierarchy:

:x: certifi-2022.6.15-py3-none-any.whl (Vulnerable Library)

Found in base branch: master

Vulnerability Details

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process of being removed from Mozilla's trust store. TrustCor's root certificates are being removed pursuant to an investigation prompted by media reporting that TrustCor's ownership also operated a business that produced spyware. Conclusions of Mozilla's investigation can be found in the linked google group discussion.

Publish Date: 2022-12-07
URL: CVE-2022-23491

CVSS 3 Score Details (6.8)

Base Score Metrics:

Exploitability Metrics:

Attack Vector: Network

Attack Complexity: Low

Privileges Required: High

User Interaction: None

Scope: Changed

Impact Metrics:

Confidentiality Impact: None

Integrity Impact: High

Availability Impact: None

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: https://www.cve.org/CVERecord?id=CVE-2022-23491

Release Date: 2022-12-07

Fix Resolution: certifi - 2022.12.07

:rescue_worker_helmet: Automatic Remediation is available for this issue

:rescue_worker_helmet: Automatic Remediation is available for this issue.
security vulnerability
opened by mend-for-github-com[bot] 0
Dependency Dashboard
This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository problems

These problems occurred while renovating this repository.

WARN: Base branch does not exist - skipping

Pending Approval

These branches will be created by Renovate only once you click their checkbox below.

[ ] Update all dependencies (staging) (actions/checkout, actions/setup-python, docker/build-push-action, docker/login-action, docker/setup-buildx-action, requests, rsa, xlsxwriter)

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

[ ] Update all dependencies (master) (actions/checkout, actions/setup-python, docker/build-push-action, docker/login-action, docker/setup-buildx-action, requests, rsa, xlsxwriter)

Detected dependencies

Branch master

github-actions

.github/workflows/ci.yml

actions/checkout v2

actions/setup-python v2

papeloto/action-zip v1

ncipollo/release-action v1

docker/setup-buildx-action v1

docker/login-action v1

docker/build-push-action v2

cupcakearmy/confluence-markdown-sync v1

cupcakearmy/confluence-markdown-sync v1

pip_requirements

requirements.txt

requests ~=2.25.1

rsa ~=4.7.2

python-dateutil ~=2.8.1

tkcalendar ~=1.6.1

xlsxwriter ~=1.4.3

Branch staging

github-actions

.github/workflows/ci.yml

actions/checkout v2

actions/setup-python v2

papeloto/action-zip v1

ncipollo/release-action v1

docker/setup-buildx-action v1

docker/login-action v1

docker/build-push-action v2

cupcakearmy/confluence-markdown-sync v1

cupcakearmy/confluence-markdown-sync v1

pip_requirements

requirements.txt

requests ~=2.25.1

rsa ~=4.7.2

python-dateutil ~=2.8.1

tkcalendar ~=1.6.1

xlsxwriter ~=1.4.3
opened by mend-for-github-com[bot] 0
Update all dependencies (master)
This PR contains the following updates:

| Package | Type | Update | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---|---|---| | actions/checkout | action | major | v2 -> v3 | | | | | | actions/setup-python | action | major | v2 -> v4 | | | | | | docker/build-push-action | action | major | v2 -> v3 | | | | | | docker/login-action | action | major | v1 -> v2 | | | | | | docker/setup-buildx-action | action | major | v1 -> v2 | | | | | | requests (source, changelog) | | minor | ~=2.25.1 -> ~=2.28.1 | | | | | | rsa (source) | | minor | ~=4.7.2 -> ~=4.9.0 | | | | | | xlsxwriter | | major | ~=1.4.3 -> ~=3.0.6 | | | | |

Release Notes

actions/checkout

v3

Compare Source

Use @actions/core saveState and getState

Add github-server-url input

actions/setup-python

v4

Compare Source

v3

Compare Source

docker/build-push-action

v3

Compare Source

docker/login-action

v2

Compare Source

docker/setup-buildx-action

v2

Compare Source

psf/requests

v2.28.1

Compare Source

Improvements

Speed optimization in iter_content with transition to yield from. (#6170)

Dependencies

Added support for chardet 5.0.0 (#6179)

Added support for charset-normalizer 2.1.0 (#6169)

v2.28.0

Compare Source

Deprecations

⚠️ Requests has officially dropped support for Python 2.7. ⚠️ (#6091)

Requests has officially dropped support for Python 3.6 (including pypy3.6). (#6091)

Improvements

Wrap JSON parsing issues in Request's JSONDecodeError for payloads without an encoding to make json() API consistent. (#6097)

Parse header components consistently, raising an InvalidHeader error in all invalid cases. (#6154)

Added provisional 3.11 support with current beta build. (#6155)

Requests got a makeover and we decided to paint it black. (#6095)

Bugfixes

Fixed bug where setting CURL_CA_BUNDLE to an empty string would disable cert verification. All Requests 2.x versions before 2.28.0 are affected. (#6074)

Fixed urllib3 exception leak, wrapping urllib3.exceptions.SSLError with requests.exceptions.SSLError for content and iter_content. (#6057)

Fixed issue where invalid Windows registry entires caused proxy resolution to raise an exception rather than ignoring the entry. (#6149)

Fixed issue where entire payload could be included in the error message for JSONDecodeError. (#6036)

v2.27.1

Compare Source

Bugfixes

Fixed parsing issue that resulted in the auth component being dropped from proxy URLs. (#6028)

v2.27.0

Compare Source

Improvements

Officially added support for Python 3.10. (#5928)

Added a requests.exceptions.JSONDecodeError to unify JSON exceptions between Python 2 and 3. This gets raised in the response.json() method, and is backwards compatible as it inherits from previously thrown exceptions. Can be caught from requests.exceptions.RequestException as well. (#5856)

Improved error text for misnamed InvalidSchema and MissingSchema exceptions. This is a temporary fix until exceptions can be renamed (Schema->Scheme). (#6017)

Improved proxy parsing for proxy URLs missing a scheme. This will address recent changes to urlparse in Python 3.9+. (#5917)

Bugfixes

Fixed defect in extract_zipped_paths which could result in an infinite loop for some paths. (#5851)

Fixed handling for AttributeError when calculating length of files obtained by Tarfile.extractfile(). (#5239)

Fixed urllib3 exception leak, wrapping urllib3.exceptions.InvalidHeader with requests.exceptions.InvalidHeader. (#5914)

Fixed bug where two Host headers were sent for chunked requests. (#5391)

Fixed regression in Requests 2.26.0 where Proxy-Authorization was incorrectly stripped from all requests sent with Session.send. (#5924)

Fixed performance regression in 2.26.0 for hosts with a large number of proxies available in the environment. (#5924)

Fixed idna exception leak, wrapping UnicodeError with requests.exceptions.InvalidURL for URLs with a leading dot (.) in the domain. (#5414)

Deprecations

Requests support for Python 2.7 and 3.6 will be ending in 2022. While we don't have exact dates, Requests 2.27.x is likely to be the last release series providing support.

v2.26.0

Compare Source

Improvements

Requests now supports Brotli compression, if either the brotli or brotlicffi package is installed. (#5783)

Session.send now correctly resolves proxy configurations from both the Session and Request. Behavior now matches Session.request. (#5681)

Bugfixes

Fixed a race condition in zip extraction when using Requests in parallel from zip archive. (#5707)

Dependencies

Instead of chardet, use the MIT-licensed charset_normalizer for Python3 to remove license ambiguity for projects bundling requests. If chardet is already installed on your machine it will be used instead of charset_normalizer to keep backwards compatibility. (#5797)

You can also install chardet while installing requests by specifying [use_chardet_on_py3] extra as follows:

pip install "requests[use_chardet_on_py3]"

Python2 still depends upon the chardet module.

Requests now supports idna 3.x on Python 3. idna 2.x will continue to be used on Python 2 installations. (#5711)

Deprecations

The requests[security] extra has been converted to a no-op install. PyOpenSSL is no longer the recommended secure option for Requests. (#5867)

Requests has officially dropped support for Python 3.5. (#5867)

sybrenstuvel/python-rsa

v4.9

Remove debug logging from rsa/key.py (#194).

Remove overlapping slots in PrivateKey and PublicKey. (#189).

Do not include CHANGELOG/LICENSE/README.md in wheel (#191).

Fixed Key Generation Unittest: Public and Private keys are assigned the wrong way around (#188).

v4.8

Switch to Poetry for dependency and release management.

Compatibility with Python 3.10.

Chain exceptions using raise new_exception from old_exception (#157)

Added marker file for PEP 561. This will allow type checking tools in dependent projects to use type annotations from Python-RSA (#136).

Use the Chinese Remainder Theorem when decrypting with a private key. This makes decryption 2-4x faster (#163).

jmcnamara/XlsxWriter

v3.0.6

Added simulated worksheet :func:autofit method.

:feature:936.

v3.0.5

Added OverlappingRange exception which is raised during Worksheet :func:add_table() or :func:merge_range() if the range overlaps an existing worksheet table or merge range. This is a file corruption error in Excel. See :ref:exceptions.

:issue:848

v3.0.4

Roll up release of several minor fixes.

Drop support for EOL Python 3.4 and 3.5.

v3.0.3

Added :func:print_black_and_white worksheet method to set "Black and White" print options.

:feature:862.

v3.0.2

Added :func:set_top_left_cell worksheet method to position the first visible cell in a worksheet.

:feature:837.

v3.0.1

Add python_requires version to setup.py to help pip find the correct matching version for Python 2 and 3.

v2.0.0

This is the last XlsxWriter release to support Python 2. From now bug fixes and new features will only be available for Python 3. The deprecation notice for Python 2 support in XlsxWriter has been in place since May 2020 and the Python community support for Python 2 ended in January 2020. Downloads of XlsxWriter for Python 2 is currently less than 6% of all downloads of the library, and decreasing month by month.

Python 2 users should still be able to install versions of XlsxWriter up to this release but not any releases afterwards.

:feature:720.

Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

[ ] If you want to rebase/retry this PR, click this checkbox.
opened by mend-for-github-com[bot] 0
Missing - Violation Description of Libraries

Hello Team,

The generated report does not have the violation description - licensing alert or security vulnerability. Having this details would help teams to connect correct experts (IP attorney for licensing issues and Security experts for vulnerabilities issue) and get their advice on alerts quickly.

Thanks! Rahul

opened by RWavdhane 1
Missing - List of Affected Projects

Hello Team,

When the final excel sheet is generated, it gives only the occurrences number. We would also require the list of projects affected by the library/alert. Having the list of affected project, would be very useful to locate and get the alerts fixed.

Thanks! Rahul

opened by RWavdhane 1

Owner

WhiteSource-PS-tools

GitHub

An ongoing curated list of frameworks, libraries, learning tutorials, software and resources in Python Language.

Python Development Welcome to the world of Python. An ongoing curated list of frameworks, libraries, learning tutorials, software and resources in Pyt

2 Dec 24, 2021

Takes output from RedLime's SpeedRunIGT mod (igt_timer.log) to get the top run retime as per the rules in speedrun.com/mc as well as generating a new file which is a copy of igt_timer.log which specifies what type of pause each one was.

top-run-time Takes output from RedLime's SpeedRunIGT mod (igt_timer.log) to get the top run retime as per the rules in speedrun.com/mc as well as gene

2 May 12, 2022

Insert a Spotify Playlist, Get a list of YouTube URLs from it.

spotbee This is a module that spits out YouTube URLs from Spotify Playlist URLs Why use this? It is asynchronous which makes it compatible to use with

10 Apr 6, 2022

Use this function to get list of routes for particular journey

route-planner Functions api_processing Use this function to get list of routes for particular journey. Function has three parameters: Origin Destinati

2 Nov 28, 2021

Get a list of all offline/online members in a discord server

Discord server insights Get a list of all offline/online members in a discord server. Uses Selenium to crawl invite links. Config Download Chrome driv

3 Oct 21, 2022

Tool to generate wrappers for Linux libraries allowing for dlopen()ing them without writing any boilerplate

Dynload wrapper This program will generate a wrapper to make it easy to dlopen() shared objects on Linux without writing a ton of boilerplate code. Th

25 Oct 24, 2022

Control System Packer is a lightweight, low-level program to transform energy equations into the compact libraries for control systems.

Control System Packer is a lightweight, low-level program to transform energy equations into the compact libraries for control systems. Packer supports Python ?? , C ?? and C++ ?? libraries.

31 Sep 15, 2022

🌈Python cheatsheet for all standard libraries(Continuously Updated)

Python Standard Libraries Cheatsheet Depend on Python v3.9.8 All code snippets have been tested to ensure they work properly. Fork me on GitHub. 中文 En

12 Dec 27, 2022

Load dependent libraries dynamically.

dypend dypend Load dependent libraries dynamically. A few days ago, I encountered many users feedback in an open source project. The Problem is they c

5 Mar 2, 2022

That is a example of a Book app on Python, made with support of all JS libraries on React framework

React+Python Books App You can use this repository whenever you want Used for a video Create the database: python -m dbutils Start the web server: pyt

1 Apr 20, 2022

Minutaria is a basic educational Python timer used to learn python and software testing libraries.

minutaria minutaria is a basic educational Python timer. The project is educational, it aims to teach myself programming, python programming, python's

1 Jul 16, 2021

A Blender addon to enable reloading linked libraries from UI.

library_reload_linked_libraries A Blender addon to enable reloading linked libraries from UI.

3 Nov 27, 2022

A proof-of-concept package manager for Cairo contracts/libraries

glyph A proof-of-concept package manager for Cairo contracts/libraries. Distribution through pypi. Installation through existing package managers -- p

11 Jun 6, 2022

:fishing_pole_and_fish: List of `pre-commit` hooks to ensure the quality of your `dbt` projects.

pre-commit-dbt List of pre-commit hooks to ensure the quality of your dbt projects. BETA NOTICE: This tool is still BETA and may have some bugs, so pl

262 Nov 25, 2022

To lazy to read your homework ? Get it done with LOL

LOL To lazy to read your homework ? Get it done with LOL Needs python 3.x L:::::::::L OO:::::::::OO L:::::::::L L:::::::

4 Dec 8, 2022

Automatically re-open threads when they get archived, no matter your boost level!

ThreadPersist Automatically re-open threads when they get archived, no matter your boost level! Installation You will need to install poetry to run th

7 Sep 18, 2022

A python script to get your activity

activities A python script to get your activity Not complete Requirements Python (>=3.7) Pip (for python >= 3.7) Git Pip packages psutil asyncio aioht

3 Nov 7, 2021

Secret santa is a fun and easy way to get together with your friends and/or family with a gift for them.

Secret Santa What is Secret Santa? Secret santa is a fun and easy way to get together with your friends and/or family with a gift for them. The idea i

2 Dec 6, 2021

Tiling manager which runs on top of EWMH window managers.

PyTyle is an extremely versatile and extensible tiling manager that is meant to be used on top of EWMH window managers. Its feature set was modeled af

55 Jul 29, 2021

Get a list of the top-10 rejected libraries in your WhiteSource inventory

Related tags

Overview

Supported Operating Systems

Prerequisites

Installation

Execution

Command-Line Arguments

Comments

Release Notes

Configuration

Vulnerabilities

Details

Vulnerable Library - certifi-2022.6.15-py3-none-any.whl

Vulnerability Details

CVSS 3 Score Details (6.8)

Suggested Fix

Repository problems

Pending Approval

Open

Detected dependencies

Release Notes

Configuration

Owner

WhiteSource-PS-tools

An ongoing curated list of frameworks, libraries, learning tutorials, software and resources in Python Language.

Takes output from RedLime's SpeedRunIGT mod (igt_timer.log) to get the top run retime as per the rules in speedrun.com/mc as well as generating a new file which is a copy of igt_timer.log which specifies what type of pause each one was.

Insert a Spotify Playlist, Get a list of YouTube URLs from it.

Use this function to get list of routes for particular journey

Get a list of all offline/online members in a discord server

Tool to generate wrappers for Linux libraries allowing for dlopen()ing them without writing any boilerplate

Control System Packer is a lightweight, low-level program to transform energy equations into the compact libraries for control systems.

🌈Python cheatsheet for all standard libraries(Continuously Updated)

Load dependent libraries dynamically.

That is a example of a Book app on Python, made with support of all JS libraries on React framework

Minutaria is a basic educational Python timer used to learn python and software testing libraries.

A Blender addon to enable reloading linked libraries from UI.

A proof-of-concept package manager for Cairo contracts/libraries

:fishing_pole_and_fish: List of `pre-commit` hooks to ensure the quality of your `dbt` projects.

To lazy to read your homework ? Get it done with LOL

Automatically re-open threads when they get archived, no matter your boost level!

A python script to get your activity

Secret santa is a fun and easy way to get together with your friends and/or family with a gift for them.

Tiling manager which runs on top of EWMH window managers.