
Research
/Security News
Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain Campaign
Bitwarden CLI 2026.4.0 was compromised in the Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline.
solid
Advanced tools
A state machine implementation for Python --- which isn't solely designed to parse strings!
They're cool! Also, easy to reason about --- a state machine design enables you to compartmentalize responsibilites in a way that functions simply don't.
It's a convoluted name: it's a state machine library written in python; snake is another word for python that sounds like state --- and Solid Snake is a fairly well known character who kicks serious butt. Thus, "solid".
Let's define a super-simple state machine with two states: one that prints "Hello" and one that prints "World":
.. code-block:: python
from solid.machines import BaseMachine from solid.states import BaseState, is_entry_state from solid.transition import to
class HelloMachine(BaseMachine):
@is_entry_state
class Hello(BaseState):
def body(self):
print "Hello"
return to(HelloMachine.World)
class World(BaseState):
def body(self):
print "World"
From an intertpreter (or whatever):
.. code-block:: python
h = HelloMachine() h.start() Hello World
and that's pretty much all there is to it.
FAQs
Pythonic state machines
We found that solid demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Bitwarden CLI 2026.4.0 was compromised in the Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline.

Research
/Security News
Docker and Socket have uncovered malicious Checkmarx KICS images and suspicious code extension releases in a broader supply chain compromise.

Product
Stay on top of alert changes with filtered subscriptions, batched summaries, and notification routing built for triage.