Package Health Score

51 / 100

security
No known security issues
popularity
Limited
maintenance
Inactive
community
Sustainable

Explore Similar Packages

Plugins
9

Popularity

Limited

GitHub Stars: 73
Forks: 5
Contributors: 2

Direct Usage Popularity

Based on project statistics from the GitHub repository for the PyPI package nonebot-plugin-manager, we found that it has been starred 73 times.

Security

No known security issues

Security and license risk for latest version

Release Date: Jun 24, 2023
Direct Vulnerabilities: 0
C
0
H
0
M
0
L
Indirect Vulnerabilities: 0
C
0
H
0
M
0
L
License Risk: 0
H
0
M
0
L

All security vulnerabilities belong to production dependencies of direct and indirect packages.

License

MIT

Security Policy

We found a way for you to contribute to the project! Looks like nonebot-plugin-manager is missing a security policy.

You can connect your project's repository to Snyk to stay up to date on security alerts and receive automatic fix pull requests.

Keep your project free of vulnerabilities with Snyk

Maintenance

Inactive

Commit Frequency

Open Issues: 2
Open PR: 1
Last Release: 1 year ago
Last Commit: 2 months ago

Further analysis of the maintenance status of nonebot-plugin-manager based on released PyPI versions cadence, the repository activity, and other data points determined that its maintenance is Inactive.

An important project maintenance signal to consider for nonebot-plugin-manager is that it hasn't seen any new versions released to PyPI in the past 12 months, and could be considered as a discontinued project, or that which receives low attention from its maintainers.

As a healthy sign for on-going project maintenance, we found that the GitHub repository had at least 1 pull request or issue interacted with by the community.

Community

Sustainable

Readme: Yes
Contributing.md: No
Code of Conduct: No
Contributors: 2
Funding: No

This project has seen only 10 or less contributors.

We found a way for you to contribute to the project! Looks like nonebot-plugin-manager is missing a Code of Conduct.

Embed Package Health Score Badge

Keep your project healthy

Check your requirements.txt

Ensure all the packages you're using are healthy and well-maintained

Snyk Vulnerability Scanner

Get health score & security insights directly in your IDE

Package

Python Versions Compatibility: >=3.8,<4.0

Age: 4 years
Latest Release: 1 year ago
Dependencies: 0 Direct
Versions: 49
Maintainers: 1
Wheels: OS Independent

Readme

Nonebot Plugin Manager

基于 nonebot2 和 go-cqhttp 的非侵入式插件管理器

Pypi Version

安装

插件仍在快速开发中，遇到问题还请务必提 issue。

从 PyPI 安装（推荐）

使用 nb-cli

nb plugin install nonebot-plugin-manager

使用 poetry

poetry add nonebot-plugin-manager

使用 pip

pip install nonebot-plugin-manager

从 GitHub 安装（不推荐）

git clone https://github.com/Jigsaw111/nonebot_plugin_manager.git

使用

权限

权限与 UNIX 的权限类似，分为三种用户：超级用户、用户、群。

每种用户包含读、写、执行 3 个权限，分别对应数字 4、2、1，将 3 个权限对应的数字累加，最终得到的值即可作为每种用户所具有的权限。

关于会话中使用什么模式，可参照下表：

仅供参考	私聊读	群聊读	私聊写	群聊写	私聊执行	群聊执行
超级用户	超级用户	群	超级用户	超级用户	超级用户	群
用户	用户	群	用户	无权限	用户	用户 & 群
群管理员	不存在	群	不存在	用户 & 群	不存在	用户 & 群

包含 Matcher 的插件默认权限为755，不含 Matcher 的插件默认权限为311。

> 例：npm chmod 757 nonebot_plugin_nodice命令可将 nonebot_plugin_nodice 的权限设置为757 > 即超级用户可写可读可执行，用户可读可执行，群可写可读可执行。

只有超级用户可以修改插件的权限，可以使用绝对模式（八进制数字模式）~~，符号模式~~指定文件的权限。

命令

使用前请先确保命令前缀为空，否则请在以下命令前加上命令前缀 (默认为/)。

npm ls查看当前会话插件列表
- -s, --store互斥参数，查看插件商店列表（仅超级用户可用）
- -u , --user 互斥参数，查看指定用户插件列表（仅超级用户可用）
- -g , --group 互斥参数，查看指定群插件列表（仅超级用户可用）
- -a, --all可选参数，查看所有插件（包括不含 Matcher 的插件）
npm info <插件名>查询插件信息（仅超级用户可用）
npm chmod 设置插件权限（仅超级用户可用）
- mode必选参数，需要设置的权限，参考上文
- plugin ...必选参数，需要设置的插件名
- -a, --all可选参数，全选插件
- -r, --reverse可选参数，反选插件
npm block 禁用当前会话插件（需要权限）
- plugin ...必选参数，需要禁用的插件名
- -a, --all可选参数，全选插件
- -r, --reverse可选参数，反选插件
- -u , --user 可选参数，管理指定用户设置（仅超级用户可用）
- -g , --group 可选参数，管理指定群设置（仅超级用户可用）
npm unblock 启用当前会话插件（需要权限）
- plugin ...必选参数，需要禁用的插件名
- -a, --all可选参数，全选插件
- -r, --reverse可选参数，反选插件
- -u , --user 可选参数，管理指定用户设置（仅超级用户可用）
- -g , --group 可选参数，管理指定群设置（仅超级用户可用）

Q&A

这是什么？
基于 import hook 的插件管理器，能够在不重启 NoneBot2 的情况下分群管理插件。
有什么用？
在 NoneBot2 仍然缺乏插件管理机制的时期暂时充当插件管理器。
自造 Rule 不是更好？
Rule 当然更好且更有效率，但是 Rule 是一种侵入式的插件管理方式，需要用户自行修改其他插件的源码，这对于管理从 PyPI 安装的插件来说相对复杂。而使用本插件，你不需要修改其他插件的任何内容，更符合插件之间松耦合的设计原则。

展开更多

原理

使用run_preprocessor装饰器，在 Matcher 运行之前检测其所属的 Plugin 判断是否打断。

事实上 Nonebot 还是加载了插件，所以只能算是屏蔽而非卸载。

To Do

[x] 分群插件管理
[ ] 完善权限系统
[ ] 设置插件别名

咕咕咕

[ ] 安装卸载插件

Bug

[ ] 无法停用 Matcher 以外的机器人行为（如 APScheduler ）
解决方法： 暂无

FAQs

What is nonebot-plugin-manager?

Nonebot Plugin Manager base on import hook. Visit Snyk Advisor to see a full health score report for nonebot-plugin-manager, including popularity, security, maintenance & community analysis.

Is nonebot-plugin-manager popular?

The python package nonebot-plugin-manager receives a total of 346 weekly downloads. As such, nonebot-plugin-manager popularity was classified as limited. Visit the popularity section on Snyk Advisor to see the full health analysis.

Is nonebot-plugin-manager well maintained?

We found indications that nonebot-plugin-manager is an Inactive project. See the full package health analysis to learn more about the package maintenance status.

Is nonebot-plugin-manager safe to use?

The python package nonebot-plugin-manager was scanned for known vulnerabilities and missing license, and no issues were found. Thus the package was deemed as safe to use. See the full health analysis review.

Last updated on 31 October-2024, at 15:01 (UTC).

Build a secure application checklist

Select a recommended open source package

Minimize your risk by selecting secure & well maintained open source packages

DONE

Scan your app for vulnerabilities

Scan your application to find vulnerabilities in your: source code, open source dependencies, containers and configuration files

SCAN NOW

Fix identified vulnerabilities

Easily fix your code by leveraging automatically generated PRs

AUTO FIX

Monitor for new issues

New vulnerabilities are discovered every day. Get notified if your application is affected

MONITOR APP

nonebot-plugin-manager