Unable to verify the project's public source code repository.

Package Health Score

36 / 100

security
Security issues found
popularity
Limited
maintenance
Healthy
community
Limited

This is a malicious package

convocations is a malicious package. This instance of the convocations package contains malware and attempts to compromise users by adopting dependency confusion techniques. A dependency confusion attack is a type of supply chain attack where malicious software is inserted into the development process by replacing a legitimate software package with a malicious one. Users are exposed if they've installed the convocations package from public repositories. Installations of this package from private repositories or CDNs are likely safe to use. This package contains a malicious code. Avoid using all malicious instances of the package.

Popularity

Limited

GitHub Stars: ?
Forks: ?
Contributors: -

Direct Usage Popularity

Based on project statistics from the GitHub repository for the PyPI package convocations, we found that it has been starred ? times.

Security

Security issues found

Security and license risk for latest version

Release Date: Nov 13, 2024
Direct Vulnerabilities: 1
C
0
H
0
M
0
L
Indirect Vulnerabilities: 0
C
0
H
0
M
0
L
License Risk: 0
H
2
M
0
L

All security vulnerabilities belong to production dependencies of direct and indirect packages.

License

BSD-2-Clause

Security Policy

We found a way for you to contribute to the project! Looks like convocations is missing a security policy.

You can connect your project's repository to Snyk to stay up to date on security alerts and receive automatic fix pull requests.

Keep your project free of vulnerabilities with Snyk

Maintenance

Healthy

Commit Frequency

Unavailable commit data

Open Issues: ?
Open PR: ?
Last Release: 9 days ago
Last Commit: unknown

Further analysis of the maintenance status of convocations based on released PyPI versions cadence, the repository activity, and other data points determined that its maintenance is Healthy.

We found that convocations demonstrates a positive version release cadence with at least one new version released in the past 3 months.

In the past month we didn't find any pull request activity or change in issues status has been detected for the GitHub repository.

Community

Limited

Readme: Yes
Contributing.md: No
Code of Conduct: No
Contributors: 0
Funding: No

This project has seen only 10 or less contributors.

Embed Package Health Score Badge

Keep your project healthy

Check your requirements.txt

Ensure all the packages you're using are healthy and well-maintained

Snyk Vulnerability Scanner

Get health score & security insights directly in your IDE

Package

Python Versions Compatibility: ==3.10.*, ==3.6.*, ==3.7.*, ==3.8.*, ==3.9.*

Age: 2 years
Latest Release: 9 days ago
Dependencies: N/A
Versions: 67
Maintainers: 2
Wheels: No

Readme

convocations

a set of invoke-inspired, raft-based convocations that we hope can help make development and devops a little easier. powered by angry penguins.

pypi

useful utilities when working on projects intended to be published in a python repository like pypi

pypi.template

creates a template project that you can use to create packages / modules that will be deployed to pypi or another python repository.

python

useful utilities to make life easier for those getting started with using a repository.

python.setup

creates a standard virtual environment for running the project

python.build

builds the project using setup.py or pyproject.toml

python.clean

cleans any builds

python.test

runs test via pytest and prints out a coverage report

python.bump_version

bumps the current version of the project via bumpversion

python.upload

uploads any distribution via twine

python.publish

a handy combination of clean, test, build, version, upload

aws

configuration keys

name	description
convocations.prefix	a handy prefix used in output and the directory in which cfn templates / parameters can be found
aws	object
aws.profile	the profile to use when creating boto3 sessions
aws.start_url	the sso start url
aws.account_id	the target account id for sso
aws.sso_account_id	an alias for account_id
aws.sso_region	the region in which sso is configured
aws.sso_start_url	an alias for start_url
aws.role	the role which we will assume after sso is completed, if unspecified, we will take the first role alphabetically
aws.sso_role_name	an alias for role
aws.global_parameter_files	files that contain parameters that should be loaded by default when using cloudformation. by convention the file at convocation.prefix/params/global.yml will also be loaded.

palo_alto

todd

fortigate

checkpoint

xkcd

Contributing

apt requirements for azure

azure development will require certain os level packages to be installed:

apt install -y gnome-keyring libgirepository1.0-dev libcairo2-dev

FAQs

What is convocations?

convocations. Visit Snyk Advisor to see a full health score report for convocations, including popularity, security, maintenance & community analysis.

Is convocations popular?

The python package convocations receives a total of 463 weekly downloads. As such, convocations popularity was classified as limited. Visit the popularity section on Snyk Advisor to see the full health analysis.

Is convocations safe to use?

Security issues were found while scanning the latest version of convocations, and a total of 1 vulnerabilities were detected. It is highly advised to conduct a security review before using this package. View the full security scan results.

Last updated on 19 November-2024, at 21:43 (UTC).

Build a secure application checklist

Select a recommended open source package

Minimize your risk by selecting secure & well maintained open source packages

DONE

Scan your app for vulnerabilities

Scan your application to find vulnerabilities in your: source code, open source dependencies, containers and configuration files

SCAN NOW

Fix identified vulnerabilities

Easily fix your code by leveraging automatically generated PRs

AUTO FIX

Monitor for new issues

New vulnerabilities are discovered every day. Get notified if your application is affected

MONITOR APP