Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@factorialco/tentaclesql
Advanced tools
Query your HTTP endpoints data using SQL
docker run -p 8080 -ti factorialco/tentaclesql
To be able to start TentacleSQL you need to provide a SCHEMA_URL
environment
variable specifying the route to retrieve the schema from.
Example:
SCHEMA_URL='https://example.com/api/schema'
This endpoint need to respond with an array of all the table definitions available in your schema. Something like:
[
{
"name": "applications",
"url": "https://example.com/api/schema/tables/applications",
"fields": [
{
"key": "id",
"type": "number"
},
{
"key": "first_name",
"type": "text"
},
{
"key": "last_name",
"type": "text"
}
]
},
{
"name": "goals",
"url": "https://example.com/api/schema/tables/goals",
"fields": [
{
"key": "id",
"type": "number"
},
{
"key": "progress",
"type": "text"
},
{
"key": "application_id",
"type": "number",
"table": "applications",
"foreign_key": "id"
}
]
}
]
The schema endpoint needs to respond with an array of table definitions:
Table:
name
: Name of the tableurl
: URL to retrieve the data fromfields
: List of fields / foreign keys of this tableEach table will have an array of fields that can be raw fields or foreign key to denote relations between tables.
Field:
key
: Name of the column / fieldtype
: Type of the field. Available types: text
, number
, data
and boolean
Foreign key:
key
: Name of the foreign keytype
: Type of the field. Available types: text
, number
, data
and boolean
table
: Target table of the foreign keyforeign_key
: Referenced column by the foreign keyOnce you have your tentaclesql server up and running you can use it by sending
POST requests against /
.
Example:
curl -H "Content-type: application/json" -X POST -d '{"query": "SELECT 1;"}' http://localhost:3000/
The expected payload contains the following parameters:
yarn cli interactive
yarn cli interactive
FAQs
SQL engine from multiple sources
The npm package @factorialco/tentaclesql receives a total of 0 weekly downloads. As such, @factorialco/tentaclesql popularity was classified as not popular.
We found that @factorialco/tentaclesql demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.