
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
snowdev
Advanced tools
snowdev: DevOps toolkit for Snowflake, facilitating seamless deployment of UDFs, stored procedures, and Streamlit apps using Snowpark's capabilities right from your local environment.
SnowDev is a command-line utility designed for deploying various components related to Snowflake such as UDFs, stored procedures, and Streamlit applications using Snowpark. This tool streamlines tasks like initializing directories, local testing, uploading, and auto create components code using AI.
SnowDev currently supports the following components:
pyenv install 3.10.0
pyenv local 3.10.0
pip install snowdev or poetry add snowdev
snowdev init
snowdev <command> [options]
initsnowdev inittestsnowdev test --udf predict_sentimentdeploysnowdev deploy --udf predict_sentimentuploadsnowdev upload --upload <upload_item>addsnowdev add --package <package_name>newsnowdev new --sproc "test_script"aisnowdev ai --embed to generate embeddings.snowdev ai --streamlit "Want to see a bar chart on the order table"--udf <udf_name>: Name or identifier for the UDF you want to deploy.--sproc <sproc_name>: Name or identifier for the Stored Procedure you want to deploy.--streamlit <streamlit_name>: Name or identifier for the Streamlit application you want to deploy. (This is still in PrPr)--task <task_name>: Name of the snowflake task you want to deploy.--upload <upload_item>: Specifies what to upload. Currently supported options: static.--package <package_name>: Specifies the name of the package to zip and upload to the static folder.--embed: Used with the ai command to run embeddings.>=3.10.0, <3.11.0"snowflake-snowpark-python" = { version = "1.5.1", extras = ["pandas"] }ai command, when specifying a component type (using --udf, --sproc, or --streamlit), ensure that the respective name or identifier is provided.add command, the user will be prompted to decide if they want to upload the zip package to stage.Feel free to contribute to SnowDev by submitting pull requests or opening issues on the project's GitHub repository.
FAQs
snowdev: DevOps toolkit for Snowflake, facilitating seamless deployment of UDFs, stored procedures, and Streamlit apps using Snowpark's capabilities right from your local environment.
We found that snowdev demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.