Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@dsnp/parquetjs
Advanced tools
fully asynchronous, pure JavaScript implementation of the Parquet file format
fully asynchronous, pure node.js implementation of the Parquet file format
This package contains a fully asynchronous, pure JavaScript implementation of the Parquet file format. The implementation conforms with the Parquet specification and is tested for compatibility with Apache's Java reference implementation.
What is Parquet?: Parquet is a column-oriented file format; it allows you to write a large amount of structured data to a file, compress it and then read parts of it back out efficiently. The Parquet format is based on Google's Dremel paper.
This is a forked repository with code from various sources:
To use parquet.js with node.js, install it using npm:
$ npm install @dsnp/parquetjs
parquet.js requires node.js >= 14.16.0
Once you have installed the parquet.js library, you can import it as a single module:
var parquet = require('@dsnp/parquetjs');
Parquet files have a strict schema, similar to tables in a SQL database. So,
in order to produce a Parquet file we first need to declare a new schema. Here
is a simple example that shows how to instantiate a ParquetSchema
object:
// declare a schema for the `fruits` table
var schema = new parquet.ParquetSchema({
name: { type: 'UTF8' },
quantity: { type: 'INT64' },
price: { type: 'DOUBLE' },
date: { type: 'TIMESTAMP_MILLIS' },
in_stock: { type: 'BOOLEAN' }
});
Note that the Parquet schema supports nesting, so you can store complex, arbitrarily nested records into a single row (more on that later) while still maintaining good compression.
Once we have a schema, we can create a ParquetWriter
object. The writer will
take input rows as JSON objects, convert them to the Parquet format and store
them on disk.
// create new ParquetWriter that writes to 'fruits.parquet`
var writer = await parquet.ParquetWriter.openFile(schema, 'fruits.parquet');
// append a few rows to the file
await writer.appendRow({name: 'apples', quantity: 10, price: 2.5, date: new Date(), in_stock: true});
await writer.appendRow({name: 'oranges', quantity: 10, price: 2.5, date: new Date(), in_stock: true});
Once we are finished adding rows to the file, we have to tell the writer object
to flush the metadata to disk and close the file by calling the close()
method:
Bloom filters can be added to multiple columns as demonstrated below:
const options = {
bloomFilters: [
{
column: "name",
numFilterBytes: 1024,
},
{
column: "quantity",
numFilterBytes: 1024,
},
]
};
var writer = await parquet.ParquetWriter.openFile(schema, 'fruits.parquet', options);
By default, not passing any additional options calculates the optimal number of blocks according to the default number of distinct values (128*1024) and default false positive probability (0.001), which gives a filter byte size of 29,920.
The following options are provided to have the ability to adjust the split-block bloom filter settings.
numFilterBytes
- sets the desire size of bloom filter in bytes. Defaults to 128 * 1024 * 1024 bits.
falsePositiveRate
- set the desired false positive percentage for bloom filter. Defaults to 0.001.
numDistinct
- sets the number of distinct values. Defaults to 128 * 1024 bits.
Note that if numFilterBytes is provided then falsePositiveRate and numDistinct options are ignored.
A parquet reader allows retrieving the rows from a parquet file in order. The basic usage is to create a reader and then retrieve a cursor/iterator which allows you to consume row after row until all rows have been read.
You may open more than one cursor and use them concurrently. All cursors become invalid once close() is called on the reader object.
// create new ParquetReader that reads from 'fruits.parquet`
let reader = await parquet.ParquetReader.openFile('fruits.parquet');
// create a new cursor
let cursor = reader.getCursor();
// read all records from the file and print them
let record = null;
while (record = await cursor.next()) {
console.log(record);
}
When creating a cursor, you can optionally request that only a subset of the columns should be read from disk. For example:
// create a new cursor that will only return the `name` and `price` columns
let cursor = reader.getCursor(['name', 'price']);
It is important that you call close() after you are finished reading the file to avoid leaking file descriptors.
await reader.close();
Bloom filters can be fetched from a parquet file by creating a reader
and calling getBloomFiltersFor
.
// create new ParquetReader that reads from 'fruits.parquet`
let reader = await parquet.ParquetReader.openFile('fruits.parquet');
// fetches bloom filter for the columns provided.
const bloomFilters = reader.getBloomFiltersFor(['name']);
=> {
name: [
{
rowGroupIndex: 0
columnName: 'name',
sbbf: SplitBlockBloomFilter<instance>
}
]
}
Calling getBloomFiltersFor
on the reader returns an object with the keys being a column name and value being an array of length equal to the number of row groups that the column spans.
Given the SplitBlockBloomFilter inclusion of a value in the filter can be checked as follows:
const sbbf = bloomFilters.name[0].ssbf;
sbbf.check('apples') ===> true
Parquet files can be read from a url without having to download the whole file.
You will have to supply the request library as a first argument and the request parameters
as a second argument to the function parquetReader.openUrl
.
const request = require('request');
let reader = await parquet.ParquetReader.openUrl(request,'https://domain/fruits.parquet');
Parquet files can be read from an S3 object without having to download the whole file.
You will have to supply the aws-sdk client as first argument and the bucket/key information
as second argument to the function parquetReader.openS3
.
const AWS = require('aws-sdk');
const client = new AWS.S3({
accessKeyId: 'xxxxxxxxxxx',
secretAccessKey: 'xxxxxxxxxxx'
});
const params = {
Bucket: 'xxxxxxxxxxx',
Key: 'xxxxxxxxxxx'
};
let reader = await parquet.ParquetReader.openS3(client,params);
If the complete parquet file is in buffer it can be read directly from memory without incurring any additional I/O.
const file = fs.readFileSync('fruits.parquet');
let reader = await parquet.ParquetReader.openBuffer(file);
Internally, the Parquet format will store values from each field as consecutive arrays which can be compressed/encoded using a number of schemes.
The most simple encoding scheme is the PLAIN encoding. It simply stores the
values as they are without any compression. The PLAIN encoding is currently
the default for all types except BOOLEAN
:
var schema = new parquet.ParquetSchema({
name: { type: 'UTF8', encoding: 'PLAIN' },
});
The Parquet hybrid run length and bitpacking encoding allows to compress runs
of numbers very efficiently. Note that the RLE encoding can only be used in
combination with the BOOLEAN
, INT32
and INT64
types. The RLE encoding
requires an additional bitWidth
parameter that contains the maximum number of
bits required to store the largest value of the field.
var schema = new parquet.ParquetSchema({
age: { type: 'UINT_32', encoding: 'RLE', bitWidth: 7 },
});
By default, all fields are required to be present in each row. You can also mark a field as 'optional' which will let you store rows with that field missing:
var schema = new parquet.ParquetSchema({
name: { type: 'UTF8' },
quantity: { type: 'INT64', optional: true },
});
var writer = await parquet.ParquetWriter.openFile(schema, 'fruits.parquet');
await writer.appendRow({name: 'apples', quantity: 10 });
await writer.appendRow({name: 'banana' }); // not in stock
Parquet supports nested schemas that allow you to store rows that have a more
complex structure than a simple tuple of scalar values. To declare a schema
with a nested field, omit the type
in the column definition and add a fields
list instead:
Consider this example, which allows us to store a more advanced "fruits" table where each row contains a name, a list of colours and a list of "stock" objects.
// advanced fruits table
var schema = new parquet.ParquetSchema({
name: { type: 'UTF8' },
colours: { type: 'UTF8', repeated: true },
stock: {
repeated: true,
fields: {
price: { type: 'DOUBLE' },
quantity: { type: 'INT64' },
}
}
});
// the above schema allows us to store the following rows:
var writer = await parquet.ParquetWriter.openFile(schema, 'fruits.parquet');
await writer.appendRow({
name: 'banana',
colours: ['yellow'],
stock: [
{ price: 2.45, quantity: 16 },
{ price: 2.60, quantity: 420 }
]
});
await writer.appendRow({
name: 'apple',
colours: ['red', 'green'],
stock: [
{ price: 1.20, quantity: 42 },
{ price: 1.30, quantity: 230 }
]
});
await writer.close();
// reading nested rows with a list of explicit columns
let reader = await parquet.ParquetReader.openFile('fruits.parquet');
let cursor = reader.getCursor([['name'], ['stock', 'price']]);
let record = null;
while (record = await cursor.next()) {
console.log(record);
}
await reader.close();
It might not be obvious why one would want to implement or use such a feature when the same can - in principle - be achieved by serializing the record using JSON (or a similar scheme) and then storing it into a UTF8 field:
Putting aside the philosophical discussion on the merits of strict typing, knowing about the structure and subtypes of all records (globally) means we do not have to duplicate this metadata (i.e. the field names) for every record. On top of that, knowing about the type of a field allows us to compress the remaining data more efficiently.
Lists have to be annotated to be queriable with AWS Athena. See parquet-format for more detail and a full working example with comments in the test directory (test/list.js
)
We aim to be feature-complete and add new features as they are added to the Parquet specification; this is the list of currently implemented data types and encodings:
Logical Type | Primitive Type | Encodings |
---|---|---|
UTF8 | BYTE_ARRAY | PLAIN |
JSON | BYTE_ARRAY | PLAIN |
BSON | BYTE_ARRAY | PLAIN |
BYTE_ARRAY | BYTE_ARRAY | PLAIN |
TIME_MILLIS | INT32 | PLAIN, RLE |
TIME_MICROS | INT64 | PLAIN, RLE |
TIMESTAMP_MILLIS | INT64 | PLAIN, RLE |
TIMESTAMP_MICROS | INT64 | PLAIN, RLE |
BOOLEAN | BOOLEAN | PLAIN, RLE |
FLOAT | FLOAT | PLAIN |
DOUBLE | DOUBLE | PLAIN |
INT32 | INT32 | PLAIN, RLE |
INT64 | INT64 | PLAIN, RLE |
INT96 | INT96 | PLAIN |
INT_8 | INT32 | PLAIN, RLE |
INT_16 | INT32 | PLAIN, RLE |
INT_32 | INT32 | PLAIN, RLE |
INT_64 | INT64 | PLAIN, RLE |
UINT_8 | INT32 | PLAIN, RLE |
UINT_16 | INT32 | PLAIN, RLE |
UINT_32 | INT32 | PLAIN, RLE |
UINT_64 | INT64 | PLAIN, RLE |
When writing a Parquet file, the ParquetWriter
will buffer rows in memory
until a row group is complete (or close()
is called) and then write out the row
group to disk.
The size of a row group is configurable by the user and controls the maximum number of rows that are buffered in memory at any given time as well as the number of rows that are co-located on disk:
var writer = await parquet.ParquetWriter.openFile(schema, 'fruits.parquet');
writer.setRowGroupSize(8192);
Parquet uses thrift to encode the schema and other metadata, but the actual data does not use thrift.
Currently parquet-cpp doesn't fully support DATA_PAGE_V2. You can work around this by setting the useDataPageV2 option to false.
FAQs
fully asynchronous, pure JavaScript implementation of the Parquet file format
The npm package @dsnp/parquetjs receives a total of 30,879 weekly downloads. As such, @dsnp/parquetjs popularity was classified as popular.
We found that @dsnp/parquetjs demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.