
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
reefledge
Advanced tools
reefledge is a Python package which provides a fast, simple and powerful API designed to simplify the retrieval of price/return density forecasts (on a ticker-by-ticker basis) generated from cutting-edge Time Series Analysis models. Our algorithms consume market data on liquid financial assets and require demanding estimation and simulation steps, both accomplished on a high-performance cloud cluster. Forecasts are produced for a wide range of reference dates and investment horizons, covering multiple metrics for a variety of asset classes.
Forecasts are generated on a daily basis.
All models consume daily-frequency data.
Usually, every ticker which passes our demanding filtering criteria requires around one minute of processing on a Google Cloud C2 compute engine with a single vCPU and four gigabytes of RAM. Our cluster boots as soon as the latest market data is available and, at the time of writing, scales up to 120 vCPUs.
In general, expect forecasts to be readily accessible for reference dates going back at least four years.
Currently, only the 'NYSE' target is in production. Nonetheless, multiple targets - such as 'NASDAQ' - have already been extensively tested and will be released soon.
Here are just a few of the things that make reefledge special:
The easiest way to install reefledge and get updates is via pip:
$ pip install reefledge
On Linux, the shell command above should return an error due to the
xlwings module dependency, which is only relevant on the Windows
platform. You can safely ignore it by preceding the installation command
with:
$ export INSTALL_ON_LINUX=1
import reefledge as rl rl.login(user_name='foobar', api_key='secret') df = rl.get_point_forecasts_df( # Returns a pandas DataFrame instance. target='NYSE', metric='STD', tickers=['GS', 'IBM'])
Advanced users should refer to the following functions/classes:
reefledge.reefledge.front_end.get.get
for retrieving and parsing data into a
reefledge.reefledge.back_end.data_wrapper.data_wrapper.DataWrapper instance.reefledge.reefledge.front_end.get_point_forecasts_df.get_point_forecasts_df
for retrieving and parsing data into a
pandas.core.frame.DataFrame instance.reefledge.reefledge.front_end.list_tickers.list_tickers
for querying all available tickers associated with a particular
target.reefledge.reefledge.back_end.api_config.api_config.APIConfig
for configuring the API.try: rl.get_point_forecasts_df(target='NYSE', metric='STD', tickers='GS') except rl.Error as exc: print(exc)
rl.APIConfig.allow_caching True rl.APIConfig.allow_tickers_sorting False rl.APIConfig.allow_caching = False # Disable caching.
Further examples assume that reefledge has been imported as rl:
>>> import reefledge as rl
FAQs
A powerful API designed for Quantitative Finance practitioners.
We found that reefledge demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.