Ecosyste.ms: OpenCollective

An open API service for software projects hosted on Open Collective.

github.com/dbt-labs/dbt-core

dbt enables data analysts and engineers to transform their data using the same practices that software engineers use to build applications.
https://github.com/dbt-labs/dbt-core

Low

GSA_kwCzR0hTQS1wM2YzLTVjY2ctODN4cc4AA9-z

dbt has an implicit override for built-in materializations from installed packages
Ecosystems: pypi
Packages: dbt-core
Source: github
Published: 5 months ago

Moderate

GSA_kwCzR0hTQS1wbXJ4LTY5NXItNDM0Oc4AA8jH

dbt allows Binding to an Unrestricted IP Address via socketsocket
Ecosystems: pypi
Packages: dbt-core
Source: github
Published: 7 months ago

High

GSA_kwCzR0hTQS1wNzJxLWgzN2otM2hxN84AA7Pf

dbt uses a SQLparse version with a high vulnerability
Ecosystems: pypi
Packages: dbt-core
Source: github
Published: 8 months ago

Low

GSA_kwCzR0hTQS1qNGczLTNxOHgtanhxcM4AA3ow

dbt-core's secret env vars written to package-lock.json in plaintext
Ecosystems: pypi
Packages: dbt-core
Source: github
Published: about 1 year ago