New Show Hacker News story: Show HN: Panoptisch – A recursive dependency scanner for Python projects

Show HN: Panoptisch – A recursive dependency scanner for Python projects
8 by r9295 | 2 comments on Hacker News.
Hello all, Very excited to share this project with you all! Panoptisch scans your Python file or module to find it's imports (aka dependencies) and recursively does so for all dependencies and sub-dependencies. It then generates a dependency tree in JSON for you to parse and enforce import policies. Supply chain attacks are no joke, and this is one way to transparently analyze your dependencies to see if any malicious imports are taking place. For example, your yaml parser, nor it's sub-dependencies should import socket, or sys. Panoptisch is in early stages, with known limitations (for now). I welcome feedback, testing and contributions. Also, happy to answer any questions!

Comments

Post a Comment

Popular posts from this blog

New Show Hacker News story: Show HN: Sora, Personal Publishing Platform

Show HN: Sora, Personal Publishing Platform 10 by chrispuska | 3 comments on Hacker News. We wanted to create, to express ourselves without being judged either by strangers or some algorithm. We wanted our own space on the internet, where our photos and words would matter. So we started to build an app that can showcase our content, without having to pick a platform. You can use Sora to publish a few different content types. - Blog - Polaroid - Poster - Microblog You can either display them all on your Sora profile as a summary (like mine https://ift.tt/x8oP2en ), or put any of them forward for the world to see. We plan to run this app for a long time and looking for feedback, so let us know what you think! (feedback@sora.city, or link on website) --- Our stack today is Node, Typescript, NextJS, atomic CSS, with everything stored on Supabase.
Read more

New Show Hacker News story: Show HN: KrotoDC – gRPC in Kotlin with Dataclasses

Show HN: KrotoDC – gRPC in Kotlin with Dataclasses 2 by mscheong | 0 comments on Hacker News. - A protoc plugin data class generator that can be used as a substitute for existing Java protobuf classes that need to be constructed by a builder (which isn't very kotlin-ish). - generates coroutine service base and stubs that use the generated classes as request/response types, allowing you to completely avoid using Java classes. - Since it also generates converter extension functions between the generated types and Java types, you can still easily use protobuf-specific features such as serialization. - Additionally provides Kotlin-specific features (optional fields as nullable, oneof fields as sealed classes).
Read more