Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
This gem provides a collection of classes to manage Tableau workbooks and their major components. It's the result of years of writing similar code.
Tableau Workbook governance should be:
Tableau Tools are designed in the model of mini-tools, small independent tools that are individually useful and can be used together to accomplish broader tasks.
The gem is released to the Tableau community in the hope that it will prove to be useful and valuable, that people will build useful things with it, and that they will offer improvements and extensions to it.
A number of Ruby scripts that parse Workbooks and emit a variety of their contents/properties have been published at Tableau Friction, including a couple that identify Calculated fields and the fields they reference: http://tableaufriction.blogspot.ca/2015/02/more-calculated-field-analysis-fields.html http://tableaufriction.blogspot.ca/2014/09/do-you-know-what-your-calculated-fields.html
Other scripts find and record other useful information, still others enable Workbook management, e.g. unhiding worksheets and making field comments consistent across workbook. One of them produces HTML pages with dynamic dashboard wire frames, making it easy to see what's in the dashboards and their properties
There's also TWIS - the Tableau Workbook Inventory System, an application that parses workbooks and extracts most of their important elements into CSV files, allowing one to see things such as which sheets are in which with dashboards, the data sources they connect to, and which Workbooks they're in. TWIS also generates diagrams/maps of the Workbook - Dashboard - Worksheet - Data Source relationships, one for each Workbook in PDF, PNG, and SVG.
TWIS is described and available here: http://betterbi.biz/TWIS.html
I created TWIS in Java, beginning in 2007. It was very valuable but became exceedingly difficult to maintain.
FAQs
Unknown package
We found that tabtools demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.