DuckDB Community Extensions
duckdb.org
DuckDB Community Extensions
1–10 of 21 posts
Re: DuckDB Community Extensions
#2Very cool. The shellfs extension (https://github.com/rustyconover/duckdb-shellfs-extension) that allows shell commands to be used for input and output will make DuckDB even more useful as a command line analysis tool. I'm not sure how I'll use it yet, but I'm betting I can streamline some multi-step data processes.
Re: DuckDB Community Extensions
#3>DuckDB Labs and the DuckDB Foundation do not vet the code within community extensions and, therefore, cannot guarantee that DuckDB community extensions are safe to use. The loading of community extensions can be explicitly disabled with the following one-way configuration option:
So we should think of this like NPM.
Still, very cool and very useful. Would love a way from inside of duckdb directly to query the extensions available from community.
Re: DuckDB Community Extensions
#4>DuckDB Labs and the DuckDB Foundation do not vet the code within community extensions and, therefore, cannot guarantee that DuckDB community extensions are safe to use. The loading of community extensions can be explicitly disabled with the following one-way configuration option: So we should think of this like NPM. Still, very cool and very useful. Would love a way from inside of duckdb directly to query the extens…
And like NPM or PyPI it's still at least marginally better than downloading compiled packages from opaque file servers. For example we avoided using the H3 (https://h3geo.org) extension for that reason. Safer (but slower) to use Python UDFs with the official H3 Python library than to fetch a file from an R2 instance, which is what the instructions currently state on Github (https://github.com/isaacbrodsky/h3-duckdb/blob/3c8a5358e42ab...)
Re: DuckDB Community Extensions
#5> What happens behind the scenes is that DuckDB downloads an extension binary
The baser part of me wonders how hard it would be to compromise that supply chain.
Re: DuckDB Community Extensions
#6> What happens behind the scenes is that DuckDB downloads an extension binary The baser part of me wonders how hard it would be to compromise that supply chain.
define: baser
> 1. (of a person or a person's actions or feelings) without moral principles; ignoble.
> 2. denoting or befitting a person of low social class.
(New term, to me)
Re: DuckDB Community Extensions
#7> What happens behind the scenes is that DuckDB downloads an extension binary The baser part of me wonders how hard it would be to compromise that supply chain.
Extension downloads are validated using a signature check to prevent tampering!
(I work for DuckDB Labs and MotherDuck)
Re: DuckDB Community Extensions
#8> What happens behind the scenes is that DuckDB downloads an extension binary The baser part of me wonders how hard it would be to compromise that supply chain.
Same as PyPi. Maybe upload left pad?
Re: DuckDB Community Extensions
#9This is the coolest thing! I’m very excited to see what we will have next. Hah maybe an extension that imbeds vim and then I’ll never leave DuckDb lol
Re: DuckDB Community Extensions
#10Does duckdb (natively or through extensions) support Delta Tables?