
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
superset-dashboard-sdk
Advanced tools
Superset Dashboard is a library to help you publish your dashboards outside of the Superset application. This plugin does not use the Superset default @superset-ui/embedded-sdk but my own implementation written starting from the base plugin.
npm i -S superset-dashboard-sdk
Superset Dashboard provide a basic Dashboard component that you can use to
render a dashboard and a DefaultDataProvider that follows Superset API
standards to retrieve and provide a valid guest token. In addition to that,
you can create your own DataProvider implementing DataProviderInterface.
The DataProviderInterfacerequires you to implement the following methods:
fetchGuestToken: to retrieve a valid guest token and return a Promise
with the token string value.To publish a dashboard, you need to create a Dashboard component and pass
required props (described below) to it.
// MyDashboard.tsx
import { Dashboard, DefaultDataProvider } from "superset-dashboard";
const dataProvider = new DataProvider("http://localhost:8088", {
username: "<guest account>",
password: "<guest password>",
});
const MyDashboard = () => {
return (
<Dashboard
dataProvider={dataProvider}
domain="http://localhost:8088"
guestToken={"<guest token>"}
uuid={"<embedded dashboard id>"}
nativeFilters={[
{
id: "NATIVE_FILTER_ID",
value: "NATIVE_FILTER_VALUE",
operator: "NATIVE_FILTER_OPERATOR",
value: ["NATIVE_FILTER_VALUE_1", "NATIVE_FILTER_VALUE_2"],
},
]}
/>
);
};
The Dashboard component requires the following props:
dataProvider: an instance of class implementing DataProviderInterface
to retrieve data from Superset.domain: the domain where Superset is running.uuid: the uuid of the dashboard to render.guestToken: you can pass a guest token to the component. If not provided,
the component will use the dataProvider to retrieve one.nativeFilters: an array of filters to apply to the dashboard. Default: [].You can query the dashboard to retrieve basic informations and json_metadata
from which you can prepare your custom forms to "pre-filter" dashboards before
rendering them.
Using previous instanced dataProvider, you can query the dashboard like in this example:
const guestToken = await dataProvider.fetchGuestToken(["<dashboard id>"]);
const dashboard = await dataProvider.fetchDashboard(guestToken, "<integer id>");
// Extract list of "native filters" from dashboard json_metadata:
const jsonMetadata = dashboard.getJsonMetadata();
const nativeFilters = jsonMetadata?.native_filter_configuration ?? [];
Using that data you can render your custom filter form and use them before rendering the dashboard.
Before install switch to node 16.9.1 (the same used in superset):
nvm use
To build the library:
npm run build
To run the tests:
npm run test
To run playground tests:
cd playground
npm start
To use storybook:
npm run storybook
For every command add :watch to run in watch mode.
FAQs
Superset Dashboard visualization component with improved specs.
The npm package superset-dashboard-sdk receives a total of 13 weekly downloads. As such, superset-dashboard-sdk popularity was classified as not popular.
We found that superset-dashboard-sdk demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.