
Research
/Security News
Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain Campaign
Bitwarden CLI 2026.4.0 was compromised in the Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline.
fedfred
Advanced tools
A feature-rich python package for interacting with the Federal Reserve Bank of St. Louis Economic Database: FRED
You can install the package using pip:
pip install fedfred
Or install from conda-forge:
conda install -c conda-forge fedfred
For type checking support, install with optional type stubs:
pip install fedfred[types]
For use with Polars DataFrames and GeoDataFrames, install with:
pip install fedfred[polars]
For use with Dask DataFrames and GeoDataFrames, install with:
pip install fedfred[dask]
We recommend using a virtual environment with either installation method.
I recommend consulting the documentation at: https://nikhilxsunder.github.io/fedfred/
Here is a simple example of how to use the package:
# FredAPI
import fedfred as fd
api_key = 'your_api_key'
fred = fd.FredAPI(api_key)
# Get Series Observations as a pandas DataFrame
gdp = fred.get_series_observations('GDP')
gdp.head()
# Get Series Observations as a pandas DataFrame (async)
import asyncio
async def main():
fred = fd.FredAPI(api_key).Async
gdp = fred.get_series_observations('GNPCA')
print(observations.head())
asyncio.run(main())
FedFred uses GitHub Actions for continuous integration. The following workflows run automatically:
These checks ensure that all contributions maintain code quality and don't introduce regressions.
Status badges at the top of this README reflect the current state of our CI pipelines.
FedFred uses standard Python packaging tools:
To set up the development environment:
# Install Poetry
curl -sSL https://install.python-poetry.org | python3 -
# Clone the repository
git clone https://github.com/nikhilxsunder/fedfred.git
cd fedfred
# Install dependencies
poetry install
# Run tests
poetry run pytest
The project uses pytest as its testing framework. Tests are located in the tests/ directory.
To run the complete test suite:
poetry run pytest
For running tests with coverage reports:
poetry run pytest --cov=fedfred tests/
To run a specific test file:
poetry run pytest tests/specific_module_test.py
We aim to maintain a minimum of 80% code coverage across the codebase. This includes:
Continuous integration automatically runs tests on all pull requests and commits to the main branch.
FedFred requires tests for all new functionality. When contributing:
tests/ directoryFor information about reporting security vulnerabilities in FedFred, please see our Security Policy.
Contributions are welcome! Please open an issue or submit a pull request.
If you use fedfred in your research, projects, or publications, please cite it as follows:
Plain Text:
Sunder, Nikhil. (2025). fedfred: A Python client for the Federal Reserve Economic Database (FRED) API.
Version 2.1.5. Available at: https://github.com/nikhilxsunder/fedfred
BibTeX:
@software{fedfred,
author = {Nikhil Sunder},
title = {fedfred: A Python client for the Federal Reserve Economic Database (FRED) API},
year = {2025},
publisher = {GitHub},
version = {2.1.5},
doi = {10.5281/zenodo.17180397},
url = {https://github.com/nikhilxsunder/fedfred},
orcid = {https://orcid.org/0009-0007-3323-1760}
}
You can also download a ready-made citation file from the GitHub repository
This project is licensed under the MIT License - see the LICENSE file for details.
FAQs
A feature-rich python package for interacting with the Federal Reserve Bank of St. Louis Economic Database: FRED
We found that fedfred demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Bitwarden CLI 2026.4.0 was compromised in the Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline.

Research
/Security News
Docker and Socket have uncovered malicious Checkmarx KICS images and suspicious code extension releases in a broader supply chain compromise.

Product
Stay on top of alert changes with filtered subscriptions, batched summaries, and notification routing built for triage.