
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
[!IMPORTANT] PipeRider has been superseded by Recce. We recommend that users requiring pre-merge data validation checks migrate to Recce. PipeRider will not longer be updated on a regular basis. You are still welcome to open a PR with bug fixes or feature requests. For questions and help regarding this update, please contact product@piperider.io or leave a message in the Recce Discord.
PipeRider automatically compares your data to highlight the difference in impacted downstream dbt models so you can merge your Pull Requests with confidence.
Install PipeRider
pip install piperider[<connector>]
You can find all supported data source connectors here.
Add PipeRider tag on your model: Go to your dbt project, and add the PipeRider tag on the model you want to profile.
--models/staging/stg_customers.sql
{{ config(
tags=["piperider"]
) }}
select ...
and show the models would be run by piperider
dbt list -s tag:piperider --resource-type model
Run PipeRider
piperider run
To see the full quick start guide, please refer to PipeRider documentation
We use the example project git-repo-analytics to demonstrate how to use piperider+dbt+duckdb to analyze dbt-core repository. Here is the generated result (daily update)
PipeRider Cloud allows you to upload reports and share them with your team members. For information on pricing plans, please refer to the pricing page.
PipeRider provides the PipeRider Compare Action to quickly integrate into your Github Actions workflow. It has the following features:
You can refer to example workflow yaml and the example pull request.
See setup dev environment and the contributing guildlines to get started.
We love chatting with our users! Let us know if you have any questions, feedback, or need help trying out PipeRider! :heart:
FAQs
PiperRider CLI
We found that piperider-nightly demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.