
Research
/Security News
Popular Go Decimal Library Targeted by Long-Running Typosquat with DNS Backdoor
A long-running Go typosquat impersonated the popular shopspring/decimal library and used DNS TXT records to execute commands.
@drizzle-adapter/libsql
Advanced tools
LibSQL adapter implementation for the Drizzle Adapter ecosystem, supporting both local SQLite databases and Turso.
LibSQL adapter implementation for the Drizzle Adapter ecosystem, supporting both local SQLite databases and Turso.
The @drizzle-adapter/libsql package provides the LibSQL implementation for the Drizzle Adapter interface. While you don't interact with this package directly (you use @drizzle-adapter/core instead), it enables support for LibSQL and Turso in the Drizzle Adapter ecosystem.
LibSQL and Turso offer unique advantages:
# Install both the core package and the LibSQL adapter
pnpm install @drizzle-adapter/core @drizzle-adapter/libsql
For the adapter to work correctly with the DrizzleAdapterFactory, you must import it for its self-registration side effects:
// Import for side effects - adapter will self-register
import '@drizzle-adapter/libsql';
// Now you can use the factory
import { DrizzleAdapterFactory } from '@drizzle-adapter/core';
import { DrizzleAdapterFactory, TypeDrizzleDatabaseConfig } from '@drizzle-adapter/core';
// Local SQLite database
const localConfig: TypeDrizzleDatabaseConfig = {
DATABASE_DRIVER: 'libsql',
DATABASE_URL: 'file:local.db'
};
// Turso database
const tursoConfig: TypeDrizzleDatabaseConfig = {
DATABASE_DRIVER: 'libsql',
DATABASE_URL: 'libsql://your-database-url.turso.io',
DATABASE_AUTH_TOKEN: 'your-auth-token',
DATABASE_SYNC_URL: 'file:local-replica.db' // Optional sync URL for replica
};
const factory = new DrizzleAdapterFactory();
const adapter = factory.create(config);
const dataTypes = adapter.getDataTypes();
const users = dataTypes.dbTable('users', {
id: dataTypes.dbInteger('id').primaryKey().autoincrement(),
name: dataTypes.dbText('name').notNull(),
email: dataTypes.dbText('email').notNull().unique(),
metadata: dataTypes.dbText('metadata'), // JSON stored as text
createdAt: dataTypes.dbInteger('created_at')
.default(sql`(strftime('%s', 'now'))`)
});
const posts = dataTypes.dbTable('posts', {
id: dataTypes.dbInteger('id').primaryKey().autoincrement(),
userId: dataTypes.dbInteger('user_id')
.references(() => users.id),
title: dataTypes.dbText('title').notNull(),
content: dataTypes.dbText('content').notNull(),
published: dataTypes.dbInteger('published').default(0),
createdAt: dataTypes.dbInteger('created_at')
.default(sql`(strftime('%s', 'now'))`)
});
import { eq, and, or, desc, sql } from 'drizzle-orm';
const client = await adapter.getConnection().getClient();
// INSERT
// Single insert with returning
const [newUser] = await client
.insert(users)
.values({
name: 'John Doe',
email: 'john@example.com',
metadata: JSON.stringify({ role: 'user' })
})
.returning();
// Bulk insert
await client
.insert(posts)
.values([
{
userId: newUser.id,
title: 'First Post',
content: 'Hello, world!'
},
{
userId: newUser.id,
title: 'Second Post',
content: 'Another post'
}
]);
// SELECT
// Select all
const allUsers = await client
.select()
.from(users);
// Select with conditions
const user = await client
.select()
.from(users)
.where(eq(users.email, 'john@example.com'));
// Select with join
const userPosts = await client
.select({
userName: users.name,
postTitle: posts.title,
content: posts.content,
metadata: users.metadata,
createdAt: sql`datetime(${posts.createdAt}, 'unixepoch')`
})
.from(posts)
.leftJoin(users, eq(posts.userId, users.id))
.where(eq(posts.published, 1))
.orderBy(desc(posts.createdAt));
// UPDATE
await client
.update(users)
.set({
name: 'John Smith',
metadata: JSON.stringify({ role: 'admin' })
})
.where(eq(users.id, newUser.id));
// DELETE
await client
.delete(posts)
.where(
and(
eq(posts.userId, newUser.id),
eq(posts.published, 0)
)
);
// Create FTS table
await client.execute(sql`
CREATE VIRTUAL TABLE posts_fts USING fts5(
title, content,
content='posts',
content_rowid='id'
)
`);
// Search posts
const searchResults = await client
.select({
title: posts.title,
content: posts.content,
author: users.name,
rank: sql`rank`
})
.from(posts)
.leftJoin(users, eq(posts.userId, users.id))
.where(sql`posts.id IN (
SELECT rowid
FROM posts_fts
WHERE posts_fts MATCH ${searchTerm}
ORDER BY rank
)`);
// Use file-based SQLite for development
const devAdapter = factory.create({
DATABASE_DRIVER: 'libsql',
DATABASE_URL: 'file:dev.db'
});
// Use Turso for production
const prodAdapter = factory.create({
DATABASE_DRIVER: 'libsql',
DATABASE_URL: process.env.DATABASE_URL,
DATABASE_AUTH_TOKEN: process.env.DATABASE_AUTH_TOKEN
});
// Use local replica for better performance
const replicaAdapter = factory.create({
DATABASE_DRIVER: 'libsql',
DATABASE_URL: process.env.DATABASE_URL,
DATABASE_AUTH_TOKEN: process.env.DATABASE_AUTH_TOKEN,
DATABASE_SYNC_URL: 'file:local-replica.db'
});
We welcome contributions! Please feel free to submit a Pull Request. For major changes, please open an issue first to discuss what you would like to change.
FAQs
LibSQL adapter implementation for the Drizzle Adapter ecosystem, supporting both local SQLite databases and Turso.
The npm package @drizzle-adapter/libsql receives a total of 232 weekly downloads. As such, @drizzle-adapter/libsql popularity was classified as not popular.
We found that @drizzle-adapter/libsql demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
A long-running Go typosquat impersonated the popular shopspring/decimal library and used DNS TXT records to execute commands.

Research
Active npm supply chain attack compromises @antv packages in a fast-moving malicious publish wave tied to Mini Shai-Hulud.

Security News
/Research
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.