
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
github.com/blueoakjs/bos-couchdb
Advanced tools
This is a CouchDB service for BlueOak Server. The service provides a convenient way of accessing couchdb servers through BlueOak Server. Under the covers the service uses nano.
$ npm install bos-couchdb
This service can be configured through the couchdb field of the BlueOak Server config.
Connections are named based on key specified in the connections section of the couchdb config block.
The configuration below defines two connections, one to a remote Cloudant server named cloudant and another to a local couchdb server name local.
Each connection can include on more databases defined in the databases field of the connection.
The key used will correspond to the name of an actual database on the couchdb server.
The configuration below defines two databases: profiles belonging to the cloudant connection, and devices belonging to the local connection.
"couchdb": {
"connections": {
"cloudant": {
"url": "https://example.cloudant.com/",
"username": "foo",
"password": "passw0rd",
"databases": {
"profiles": {}
}
},
"local": {
"url": "http://127.0.0.1:5984/",
"databases": {
"devices": {}
}
}
}
}
Scoped config are options that can be set on the root couchdb object, the connection, or the database. The database-specific value has precedence over the connection-specific value. The connection-specific value has precedence over the root value.
This allows the definition of global values that can be overridden as desired.
Valid options are:
The bo-couchdb service can be injected into services or handlers through a boCouchdb parameter on the init method.
exports.init = function(config, logger, boCouchdb) {
...
}
The getConnection function will return a named connection where connectionName corresponds to a connection specified in the configuration.
The nano database functions can be used on the connection object.
var conn = boCouchdb.getConnection('local');
conn.list(function(err, results) {
//results is a list of databases on the connection
});
The get function will return a database where dbName corresponds to a database defined in the configuration.
The nano document functions can be used on the db object.
var profilesDb = boCouchdb.get('profiles');
profilesDb.get('foo' /*doc id*/, function(err, body) {
if (!err)
console.log(body);
});
Since it's possible that more than one connection will share a database name, the database name can be prefixed with the connection name. This will avoid any possible ambiguity in looking up a database.
var profilesDb = boCouchdb.get('cloudant:profiles');
var devicesDb = boCouchdb.get('local:devices');
FAQs
Unknown package
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.