
Security News
Risky Biz Podcast: Making Reachability Analysis Work in Real-World Codebases
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
@circles/analysis
Advanced tools
Analysis and statistics toolkit for Circles
, displaying basic metrics and exporting tabular data for further analysis in .csv or .json format.
$ circles-analysis --output example.csv --format csv velocity
Analyse "velocity" (transfer velocity):
Request all "notifications" data from Graph ...
◆ Total days recorded: 112
◆ Velocity (Circles / Day): 20.069135714285716134
◆ Max velocity (one day): 553.2
Done processing 112 data entries total!
Stored results in example.csv
npm i -g @circles/analysis
Usage: circles-analysis [options] [command]
Circles statistics and analysis toolkit
Options:
-V, --version output the version number
-e, --endpoint <url> graphQL subgraph endpoint (default: "https://api.thegraph.com/..")
-f, --format <csv|json> file format of output file (default: "csv")
-o, --output <path> optional file output for tabular data
-s, --relayer_address <str> address of relayer funder (default: "0x0739..")
-h, --help display help for command
Commands:
transitive transitive transactions in the Circles hub
transfers regular transfer transactions including: transfer steps, ubi payouts, and gas fees
transfersWithTimestamp regular transfer transactions with timestamps including: transfer steps, ubi payouts, and gas fees
trusts trust connection events
ownerships safe ownership events / device changes
safes safe deployments and balances
velocity transfer velocity
help [command] display help for command
# Install dependencies
npm install
# Run commands like ..
node ./index.js --output results.csv velocity
// Import methods like ..
import analysis from '@circles/analysis';
analysis.setConfiguration({
safeAddress: '...',
endpoint: '...',
});
const velocity = await analysis.getVelocity();
GNU Affero General Public License v3.0 AGPL-3.0
FAQs
Circles statistics and analytics toolkit
The npm package @circles/analysis receives a total of 26 weekly downloads. As such, @circles/analysis popularity was classified as not popular.
We found that @circles/analysis demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
Security News
CISA’s 2025 draft SBOM guidance adds new fields like hashes, licenses, and tool metadata to make software inventories more actionable.