
Security News
Node.js Drops Bug Bounty Rewards After Funding Dries Up
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.
@blitznocode/blitz-orm
Advanced tools
Blitz-orm is an Object Relational Mapper (ORM) for graph databases that uses a JSON query language called Blitz Query Language (BQL). BQL is similar to GraphQL but uses JSON instead of strings. This makes it easier to build dynamic queries.
Blitz-orm is an Object Relational Mapper (ORM) for graph databases that uses a JSON query language called Blitz Query Language (BQL). BQL is similar to GraphQL but uses JSON instead of strings. This makes it easier to build dynamic queries.
Blitz-orm is similar to other ORM packages such as Prisma. You define a BQL schema and it gets translated to different databases (currently only compatible with TypeDB and SurrealDB).
TypeDB
SurrealDB
MultiDB
Next-auth
yarn add @blitznocode/blitz-ormimport BormClient from '@blitznocode/blitz-orm';
import { bormConfig } from './borm.config';
import { schema } from './schema';
const bormClient = new BormClient({
schema,
config: bormConfig,
});
export default bormClient;
const res = await bormClient.mutate({$entity: 'User', name: 'Ann'}, { noMetadata: true });
#shared attribute (shared: true) :
title sub attribute, value string;
#as a private attribute (shared: false), default behaviour:
book·title sub attribute, value string;
You can find example mutations and queries in the tests There is no official documentation but you can check the draft RFC: https://lveillard.notion.site/BlitzORM-RFC-8b11f519fc464f86804259259c72bb19?pvs=4
The RFC includes future features and is not updated so please keep an eye on the query and mutation tests as those are designed for the features already working.
To run TypeDB locally, follow the official instructions at https://docs.vaticle.com/docs/running-typedb/install-and-run. It is recommended to run TypeDB Studio, define the schema there, and test with pure TypeQL before using Blitz-orm.
You can contribute to the project by adding adapters for other databases, developing a BQL-to-GraphQL mapper, enhancing performance, or contributing to the public roadmap for this package (not yet published). To get in touch, please send an email to loic@blitznocode.com.
Blitz-orm is currently in alpha version and not ready for production use. Some key queries and mutations do work, but there is still much that needs to be done and performance improvements are needed. One of the biggest performance issues is with nested queries, as they currently require a call to TypeDB for each level of depth.
To see what is currently working and find examples, please check the test folder, where you will find a variety of queries and mutations.
This orm includes a basic typeGen that gets you types depending on the structure of the borm Schema. You can use it like this:
type UserType = GenerateType<typeof typesSchema.relations.User>;
Due to typescript limitations and also to be able to type fields from extended things, you will need to compile your bormSchema to a particular format. In order to make this work you can see the example that we have in the tests that you can run with pnpm test:buildSchema.
You can also use it with your base schema without compiling but some fields might not be there and you might need to ignore some ts errors. Also you will need "as const" at the end of your schema.
pnpm add -D husky -wFAQs
Blitz-orm is an Object Relational Mapper (ORM) for graph databases that uses a JSON query language called Blitz Query Language (BQL). BQL is similar to GraphQL but uses JSON instead of strings. This makes it easier to build dynamic queries.
The npm package @blitznocode/blitz-orm receives a total of 9 weekly downloads. As such, @blitznocode/blitz-orm popularity was classified as not popular.
We found that @blitznocode/blitz-orm demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.