
Research
SANDWORM_MODE: Shai-Hulud-Style npm Worm Hijacks CI Workflows and Poisons AI Toolchains
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.
@astronautlabs/datastore
Advanced tools
Isomorphic, abstracted, Firestore-compatible NoSQL data storage library
Isomorphic, abstracted, Firestore-compatible NoSQL data storage library. Use this as a better interface for Firestore.
Isomorphic
This library can be used to interface with Firestore in the same way, whether your code is running in the browser or on Node.js.
Better debugging of permission-denied errors
@/datastore will capture permission-denied errors from Firebase and append useful information, such as what operation was attempted that caused the permission-denied error. This is the number one source of frustration when working with Firestore.
Install the Firebase Datastore implementation:
npm install @astronautlabs/datastore-firestore
First, initialize your app as normal using the firebase package (in the browser),
or the firebase-admin package (Node.js):
import * as firebase from 'firebase'; // or firebase-admin for Node.js
await firebase.initializeApp({
apiKey: "...",
authDomain: "example.firebaseapp.com",
databaseURL: "https://example.firebaseio.com",
projectId: "example",
storageBucket: "example.appspot.com",
messagingSenderId: "..."
});
Then use createDatastore() to create your Datastore instance:
import { createDatastore } from '@astronautlabs/datastore-firestore';
let datastore = createDatastore();
let doc = await datastore.read('/path/to/document');
You can also specify the Firebase app you wish to use:
let datastore = createDatastore(appName: 'aSpecificAppName');
FAQs
Isomorphic, abstracted, Firestore-compatible NoSQL data storage library
The npm package @astronautlabs/datastore receives a total of 0 weekly downloads. As such, @astronautlabs/datastore popularity was classified as not popular.
We found that @astronautlabs/datastore demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.

Company News
Socket is proud to join the OpenJS Foundation as a Silver Member, deepening our commitment to the long-term health and security of the JavaScript ecosystem.

Security News
npm now links to Socket's security analysis on every package page. Here's what you'll find when you click through.