Research
Security News
Kill Switch Hidden in npm Packages Typosquatting Chalk and Chokidar
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
pyfredapi
is a full featured Python library that makes it is easy to retrieve data from the Federal Reserve Economic Data (FRED) API web service. pyfredapi
covers all the FRED api endpoints, and can retrieve data from FRED and ALFRED. Data can be returned as a pandas dataframe or json. Requests to the FRED API can be customized according to the parameters made available by the web service endpoints.
The documentation is made with Sphinx and hosted on Read the Docs.
pip install pyfredapi
# install with plotting dependencies
pip install 'pyfredapi[plot]'
Before using pyfredapi
and must have an API key to the FRED API web service. You can apply for one for free on the FRED website.
You can set your API key in two ways:
FRED_API_KEY
api_key
parameter of the request functionYou can set the API key as an environment variable by adding the following line to your ~/.zshrc
, ~/.bashrc
file:
export FRED_API_KEY="your_api_key"
Each of the FRED API endpoint namespaces is covered by a module in pyfredapi
. For a deeper dive into each of the modules see the tutorials and API reference in the documentation.
category
- covers the FRED Categories endpointsmaps
- covers the FRED Maps endpointsrelease
- covers the FRED Releases endpointsseries
- covers the FRED Series endpointssources
- covers the FRED Sources endpointstags
- covers the FRED Tags endpointsseries_collection
- makes handling multiple series easierQuick start example:
import pyfredapi as pf
# api key set as environment variable
pf.get_series(series_id="GDP")
# api key passed to the function
pf.get_series(series_id="GDP", api_key="my_api_key")
Thank you for your interest in contributing to pyfredapi
. Check out the contributing guide to get started.
FAQs
A full featured API client for the FRED API web service.
We found that pyfredapi demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.