
Security News
GitHub Actions Checkout Now Blocks Risky pull_request_target Checkouts
GitHub Actions checkout now blocks risky pull_request_target checkouts by default to help prevent pwn request supply chain attacks.
@tabularis/create-plugin
Advanced tools
Scaffold a new Tabularis database driver plugin in seconds.
npm create @tabularis/plugin@latest my-driver
(Works the same with pnpm create @tabularis/plugin@latest my-driver or yarn create @tabularis/plugin my-driver.)
A runnable Rust project with:
manifest.json aligned with the Tabularis plugin schema.-32601 until you implement them.test_connection placeholder that returns success, so your driver appears in the connection picker immediately after just dev-install.quote_identifier, paginate — with unit tests — ready to use from your handlers.just repl) for debugging without restarting Tabularis.--with-ui) pre-configured with Vite IIFE + @tabularis/plugin-api.npm create @tabularis/plugin@latest [--] [options] <name>
-- separates the package name from the flags so they reach the CLI instead of npm. If you prefer the direct form:
npx @tabularis/create-plugin [options] <name>
| Flag | Values | Default | Purpose |
|---|---|---|---|
--db-type | network | file | folder | api | network | Shapes the connection form and capabilities |
--quote | " | ` | " | SQL identifier quote character |
--with-ui | boolean | off | Also scaffold a ui/ subworkspace using @tabularis/plugin-api |
--no-git | boolean | off | Skip git init |
--dir | path | ./<name> | Target directory |
# Network driver (host/port/user/pass connection form)
npm create @tabularis/plugin@latest my-pg-like
# File-based driver (SQLite, DuckDB shape)
npm create @tabularis/plugin@latest duckdb-clone -- --db-type=file
# API-based plugin (no connection form; public REST-ish data source)
npm create @tabularis/plugin@latest my-api -- --db-type=api
# With UI extension scaffold
npm create @tabularis/plugin@latest mine -- --with-ui
cd my-driver
just dev-install # builds and installs into ~/.local/share/tabularis/plugins/my-driver
# open Tabularis → your driver is in the connection picker
From there, fill in handlers in src/handlers/metadata.rs, then query.rs, then the rest. The generated README.md includes a feature-by-feature roadmap.
my-driver/
├── Cargo.toml
├── manifest.json
├── README.md
├── justfile # just build / test / dev-install / repl / lint / fmt
├── rust-toolchain.toml
├── .github/workflows/release.yml
└── src/
├── main.rs # stdio JSON-RPC loop
├── rpc.rs # method dispatch
├── client.rs # TODO: your DB client
├── error.rs
├── models.rs
├── handlers/{metadata,query,crud,ddl}.rs
├── utils/{identifiers,pagination}.rs
└── bin/test_plugin.rs
With --with-ui:
my-driver/ui/
├── package.json
├── tsconfig.json
├── vite.config.ts
└── src/index.tsx # defineSlot("data-grid.toolbar.actions", …)
just (optional but recommended — the generated justfile wraps the common tasks).@tabularis/plugin-api — TypeScript types + hooks for UI extensions.Apache-2.0
FAQs
Scaffold a new Tabularis database driver plugin in seconds.
We found that @tabularis/create-plugin demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
GitHub Actions checkout now blocks risky pull_request_target checkouts by default to help prevent pwn request supply chain attacks.

Product
Socket now supports Custom Roles and Repository Access Permissions so organizations can control who can access specific repositories and actions.

Product
Socket MCP now lets AI assistants review org alerts, investigate threats using the Socket threat feed, and inspect package files in addition to dependency scoring.