Do you know if open-source Python package in your application is malicious/risky?
Learn to identify if your python (pypi), Ruby (Rubygems) and JavaScript - React (NPM) is malicious or risky to use in your own Python, Ruby or JavaScript application.
Packj - The vetting tool 🚀 behind our "dependency firewall" to block malicious/risky open-source packages in your software supply chain
https://github.com/ossillate-inc/packj
Various Command Sample:
$ python main.py audit -t -p pypi:tensorflow rubygems:overcommit
$ python main.py audit -t -p pypi:pandas npm:
$ python main.py -f npm:package.json pypi:requirements.txt
== Video Timeline ==
(00:00) Quick Intro
(00:30) Why the need?
(02:28) Quick tool overview
(05:50) Packj installation
(11:15) Audit Package
(15:40) End Credits
Please visit:
https://prodramp.com | @prodramp
/ prodramp
Content Creator:
Avkash Chauhan (@avkashchauhan)
/ avkashchauhan
Tags:
#python #ruby #react #developertools
