
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Class allows you to track any sql queries that are executed inside the body of a loop, a decorated function, or a context manager, the body can be executed a specified number of times to get the average query execution time.
The class allows you to display formatted output data containing brief information about the current iteration of the measurement, display sql queries and explain information on them, as well as summary information containing data on all measurements.
Do not use the class inside the business logic of your application, this will greatly slow down the execution of the queries, the class is intended only for the test environment.
pip install capture-db-queries
All parameters are purely optional.
assert_q_count
: The expected number of database queries during all number_runs
, otherwise an exception will be raised: "AssertionError: N
not less than or equal to N
queries".number_runs
: The number of runs of the decorated function or test for loop.verbose
: Displaying the final results of test measurements within all number_runs
.advanced_verb
: Displaying the result of each test measurement.auto_call_func
: Autorun of the decorated function. (without passing arguments to the function, since the launch takes place inside the class).queries
: Displaying colored and formatted SQL queries to the database.explain
: Displaying explain information about each query. (has no effect on the original query).explain_opts
: Parameters for explain. (for more information about the parameters for explain, see the documentation for your DBMS).connection
: Connecting to your database, by default: django.db.connectionpytest-xdist
and run the test with the -n <workers>
flag, the results will not be reflected in the terminal. Remove the -n <workers>
flag to display them or use --capture=tee-sys -rP
parameters.from capture_db_queries import CaptureQueries
for ctx in CaptureQueries(number_runs=2, advanced_verb=True):
response = self.client.get(url)
>>> Test №1 | Queries count: 10 | Execution time: 0.04s
>>> Test №2 | Queries count: 10 | Execution time: 0.04s
>>> Tests count: 2 | Total queries count: 20 | Total execution time: 0.08s | Median time one test is: 0.041s | Vendor: sqlite
@CaptureQueries(number_runs=2, advanced_verb=True)
def test_request():
response = self.client.get(url)
>>> Test №1 | Queries count: 10 | Execution time: 0.04s
>>> Test №2 | Queries count: 10 | Execution time: 0.04s
>>> Tests count: 2 | Total queries count: 20 | Total execution time: 0.08s | Median time one test is: 0.041s | Vendor: sqlite
# NOTE: The with context manager does not support multi-launch number_runs > 1
# NOTE: Also you can use `async with` if you capture queries in async context.
with CaptureQueries(number_runs=1, advanced_verb=True) as ctx:
response = self.client.get(url)
>>> Queries count: 10 | Execution time: 0.04s | Vendor: sqlite
Example of output when using queries and explain:
for _ in CaptureQueries(advanced_verb=True, queries=True, explain=True):
list(Reporter.objects.filter(pk=1))
list(Article.objects.filter(pk=1))
>>> Test №1 | Queries count: 2 | Execution time: 0.22s
>>>
>>>
>>> №[1] time=[0.109] explain=['2 0 0 SEARCH TABLE tests_reporter USING INTEGER PRIMARY KEY (rowid=?)']
>>> SELECT "tests_reporter"."id",
>>> "tests_reporter"."full_name"
>>> FROM "tests_reporter"
>>> WHERE "tests_reporter"."id" = 1
>>>
>>>
>>> №[2] time=[0.109] explain=['2 0 0 SEARCH TABLE tests_article USING INTEGER PRIMARY KEY (rowid=?)']
>>> SELECT "tests_article"."id",
>>> "tests_article"."pub_date",
>>> "tests_article"."headline",
>>> "tests_article"."content",
>>> "tests_article"."reporter_id"
>>> FROM "tests_article"
>>> WHERE "tests_article"."id" = 1
>>>
>>>
>>> Tests count: 1 | Total queries count: 2 | Total execution time: 0.22s | Median time one test is: 0.109s | Vendor: sqlite
To customize the display of SQL queries, you can import a list with handlers and remove handlers from it or expand it with your own handlers.
from capture_db_queries import settings, IHandler
# NOTE: The handler must comply with the specified interface.
class SomeHandler(IHandler):
def handle(self, queries_log):
for query in queries_log:
query.sql = "Hello World!"
return queries_log
settings.PRINTER_HANDLERS.remove("capture_db_queries.handlers.ColorizeSqlHandler")
settings.PRINTER_HANDLERS.append("path.to.your.handler.SomeHandler")
FAQs
Decorator for measuring the time and number of database queries
We found that capture-db-queries demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.