
Security News
AI Slop Is Polluting Bug Bounty Platforms with Fake Vulnerability Reports
AI-generated slop reports are making bug bounty triage harder, wasting maintainer time, and straining trust in vulnerability disclosure programs.
@hodfords/typeorm-helper
Advanced tools
nestjs-validation enhances validation in your NestJS projects by providing a customized `ValidationPipe` that returns custom error messages. This library simplifies error handling by offering localized and user-friendly responses
Install the typeorm-helper
package with:
npm install @hodfords/typeorm-helper --save
When managing different entities, you can define custom repositories and entities. Below is an example for the Category entity and its corresponding repository.
The Category
table in the database is modeled by the CategoryEntity
, typeorm
decorators should be used to define this entity.
import { BaseEntity } from '@hodfords/typeorm-helper';
import { Column, Entity, ManyToMany, JoinTable, PrimaryGeneratedColumn } from 'typeorm';
@Entity('Category')
export class CategoryEntity extends BaseEntity {
@PrimaryGeneratedColumn()
id: number;
@Column()
name: string;
@ManyToMany(() => PostEntity, (post) => post.categories)
@JoinTable({ name: 'PostCategory' })
posts: PostEntity[];
}
The CategoryRepository
is a custom repository that handles all database operations related to the CategoryEntity
. By using the @CustomRepository
decorator and extending BaseRepository
, you ensure that your repository has both common CRUD functionality and can be easily customized with entity-specific methods.
import { CustomRepository, BaseRepository } from '@hodfords/typeorm-helper';
@CustomRepository(CategoryEntity)
export class CategoryRepository extends BaseRepository<CategoryEntity> {}
Lazy relations allow you to load related entities only when they are needed. This can significantly improve performance by preventing the fetching of unnecessary data upfront.
This functionality supports handling single entity, collection of entities, and paginated collection. Below is an example of how to load a list of posts associated with a specific category.
const categoryRepo = getDataSource().getCustomRepository(CategoryRepository);
const category = await categoryRepo.findOne({});
await category.loadRelation(['posts']);
const categoryRepo = getDataSource().getCustomRepository(CategoryRepository);
const categories = await categoryRepo.findOne({ name: ILIKE('%football' });
await this.categories.loadRelations(['posts']);
const categoryRepo = getDataSource().getCustomRepository(CategoryRepository);
const pagedCategories = await categoryRepo.pagination({}, { page: 1, perPage: 10 });
await pagedCategories.loadRelation('posts');
You can also make use of the loadRelations function to efficiently load and retrieve related data
await loadRelations(categories, ['posts']);
Sometimes, you need to add custom conditions when loading related entities. typeorm-helper
provides the
@RelationCondition
decorator for this purpose.
This ensures that the posts relation is only loaded when the condition posts.id = :postId
is satisfied.
@Entity('User')
export class UserEntity extends BaseEntity {
@PrimaryGeneratedColumn()
id: number;
@Column()
name: string;
@RelationCondition((query: SelectQueryBuilder<any>) => {
query.where(' posts.id = :postId', { postId: 1 });
})
@OneToMany(() => PostEntity, (post) => post.user, { cascade: true })
posts: PostEntity[];
@RelationCondition((query: SelectQueryBuilder<any>, entities) => {
query.orderBy('id', 'DESC');
if (entities.length === 1) {
query.limit(1);
} else {
query.andWhere(
' "latestPost".id in (select max(id) from "post" "maxPost" where "maxPost"."userId" = "latestPost"."userId")'
);
}
})
@OneToOne(() => PostEntity, (post) => post.user, { cascade: true })
latestPost: PostEntity;
}
Here, the condition applies a limit if only one entity is found, and fetches the latest post for each user if there are multiple entities.
@Entity('User')
export class UserEntity extends BaseEntity {
@PrimaryGeneratedColumn()
id: number;
@Column()
name: string;
@RelationCondition(
(query: SelectQueryBuilder<any>) => {
query.where(' posts.id = :postId', { postId: 1 });
},
(entity, result, column) => {
return entity.id !== 2;
}
)
@OneToMany(() => PostEntity, (post) => post.user, { cascade: true })
posts: PostEntity[];
}
For complex queries that need to be reused or involve a lot of logic, it's best to put them in a class
export class BelongToUserWhereExpression extends BaseWhereExpression {
constructor(private userId: number) {
super();
}
where(query: WhereExpression) {
query.where({ userId: this.userId });
}
}
const posts = await this.postRepo.find({ where: new BelongToUserWhereExpression(1) });
For complex and reusable queries, it's helpful to put the logic inside a class. This makes it easier to manage and reuse the query, resulting in cleaner and more maintainable code.
export class PostOfUserQuery extends BaseQuery<PostEntity> {
constructor(private userId: number) {
super();
}
query(query: SelectQueryBuilder<PostEntity>) {
query.where({ userId: this.userId }).limit(10);
}
order(query: SelectQueryBuilder<PostEntity>) {
query.orderBy('id', 'DESC');
}
}
const posts = await this.postRepo.find(new PostOfUserQuery(1));
This project is licensed under the MIT License
FAQs
Simplifies TypeORM usage in NestJS apps
The npm package @hodfords/typeorm-helper receives a total of 56 weekly downloads. As such, @hodfords/typeorm-helper popularity was classified as not popular.
We found that @hodfords/typeorm-helper demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
AI-generated slop reports are making bug bounty triage harder, wasting maintainer time, and straining trust in vulnerability disclosure programs.
Research
Security News
The Socket Research team investigates a malicious Python package disguised as a Discord error logger that executes remote commands and exfiltrates data via a covert C2 channel.
Research
Socket uncovered npm malware campaign mimicking popular Node.js libraries and packages from other ecosystems; packages steal data and execute remote code.