Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
@idxdb/promised
Advanced tools
@idxdb/promised wraps the IndexedDB API. It allows you to easily store and retrieve data in an indexed db database using async/await syntax, making it easier to integrate with your existing codebase.
@idxdb/promised is a lightweight library that wraps the IndexedDB API, providing a more natural way to work with promises. It allows you to easily store and retrieve data in an indexed database using async/await syntax, making it easier to integrate with your existing codebase.
This package has no dependencies.
To install this package, run the following command in your terminal:
npm install @idxdb/promised
yarn add @idxdb/promised
@idxdb/promised is an ECMAScript (ESM) module, which means it can be directly imported in environments that support modules, such as modern browsers or Node.js with ESM enabled.
You can load the module directly from a CDN using the following code:
<script type="module" src="https://cdn.jsdelivr.net/npm/@idxdb/promised@latest/dist/src/index.js"></script>
Once loaded, a DatabaseFactory object will be available in the global scope, allowing you to interact with the @idxdb/promised API directly.
This allows you to use @idxdb/promised without the need to download it locally or set up a bundler like Webpack or Rollup.
This package fully respects the original indexedDB API.
The only subtleties are:
database initialization, to support migrations during version upgrades.
in the cursors, which allow more natural iteration than the original API.
export interface DatabaseInterface {
close(): void
createObjectStore(
name: string,
options?: IDBObjectStoreParameters
): ObjectStoreInterface
deleteObjectStore(name: string): void
transaction(
storeNames: string | string[],
mode?: IDBTransactionMode,
options?: IDBTransactionOptions
): TransactionInterface
objectStoreNames: string[]
}
export interface ObjectStoreInterface {
add<V, K extends IDBValidKey>(value: V, key?: K): Promise<K>
clear(): Promise<void>
count<K extends IDBValidKey>(query?: IDBKeyRange | K): Promise<number>
createIndex(
indexName: string,
keyPath: string | string[],
options?: IDBIndexParameters
): IndexInterface
delete<K extends IDBValidKey>(query: IDBKeyRange | K): Promise<void>
deleteIndex(name: string): void
get<R, K extends IDBValidKey>(key: K): Promise<R>
getAll<R, K extends IDBValidKey>(
query?: IDBKeyRange | K,
count?: number
): Promise<R[]>
getAllKeys<K extends IDBValidKey>(
query?: IDBKeyRange | K,
count?: number
): Promise<K[]>
getKey<K extends IDBValidKey>(key: IDBKeyRange | K): Promise<K>
index(name: string): IndexInterface
openCursor<PK extends IDBValidKey, K extends IDBValidKey, R>(
query?: IDBKeyRange | K,
direction?: IDBCursorDirection
): ValueCursorInterface<PK, K, R>
openKeyCursor<PK extends IDBValidKey, K extends IDBValidKey>(
query?: IDBKeyRange | K,
direction?: IDBCursorDirection
): KeyCursorInterface<PK, K>
put<V, K extends IDBValidKey>(value: V, key?: K): Promise<void>
indexNames: string[]
}
export interface IndexInterface {
keyPath: string | string[]
multiEntry: boolean
name: string
objectStore: ObjectStoreInterface
unique: boolean
count<K extends IDBValidKey>(query?: IDBKeyRange | K): Promise<number>
get<R, K extends IDBValidKey>(key: K): Promise<R>
getAll<R, K extends IDBValidKey>(
query?: IDBKeyRange | K,
count?: number
): Promise<R[]>
getAllKeys<K extends IDBValidKey>(
query?: IDBKeyRange | K,
count?: number
): Promise<K[]>
getKey<K extends IDBValidKey>(key: IDBKeyRange | K): Promise<K>
openCursor<PK extends IDBValidKey, K extends IDBValidKey, R>(
query?: IDBKeyRange | K,
direction?: IDBCursorDirection
): ValueCursorInterface<PK, K, R>
openKeyCursor<PK extends IDBValidKey, K extends IDBValidKey>(
query?: IDBKeyRange | K,
direction?: IDBCursorDirection
): KeyCursorInterface<PK, K>
}
export interface ValueCursorInterface<
PK extends IDBValidKey,
K extends IDBValidKey,
R,
> extends KeyCursorInterface<PK, K> {
value: R | undefined
delete(): Promise<void>
update(value: R): Promise<void>
}
export interface KeyCursorInterface<
PK extends IDBValidKey,
K extends IDBValidKey,
> {
primaryKey: PK | undefined
key: K | undefined
direction: IDBCursorDirection
source: ObjectStoreInterface | IndexInterface
request: IDBRequest<IDBCursor>
end(): Promise<boolean>
continue(key?: K): void
advance(count: number): void
continuePrimaryKey(key: K, primaryKey: PK): void
}
export interface TransactionInterface {
abort(): Promise<void>
commit(): Promise<void>
objectStore(name: string): ObjectStoreInterface
objectStoreNames: string[]
db: DatabaseInterface
durability: IDBTransactionDurability
error: DOMException
mode: IDBTransactionMode
}
import { DatabaseFactory } from '@idxdb/promised';
const migrations = [
{
version: 1,
migration: async ({db, transaction, dbOldVersion, dbNewVersion, migrationVersion}) => {
const store = db.createObjectStore('users', { keyPath: 'id' })
store.createIndex('name_idx', 'name', { unique: false });
},
},
{
version: 2,
migration: async ({db, transaction, dbOldVersion, dbNewVersion, migrationVersion}) => {
const store = transaction.objectStore('users')
store.createIndex('email_idx', 'email', { unique: true })
},
},
{
version: 3,
migration: async ({db, transaction, dbOldVersion, dbNewVersion, migrationVersion}) => {
const store = transaction.objectStore('users')
store.createIndex('identifier_idx', 'identifier', { unique: true })
store.deleteIndex('email_idx')
},
},
]
const requestedVersion = 3;
const db = await DatabaseFactory.open('mydatabase', requestedVersion, migrations);
All you have to do is keep one migration and you're done.
import { DatabaseFactory } from '@idxdb/promised';
const requestedVersion = 3; // the version you want to open, increase to open anew one and reset your DB scheme
const migrations = [
{
version: requestedVersion,
migration: async ({db, transaction, dbOldVersion, dbNewVersion, migrationVersion}) => {
for (const store of db.objectStoreNames) {
db.deleteObjectStore(store) // correctly delete all previous existing stores
}
// creates the fresh new stores and their indexes
const store = db.createObjectStore('users', { keyPath: 'id' })
store.createIndex('name_idx', 'name', { unique: false });
//...
},
},
]
const db = await DatabaseFactory.open('mydatabase', requestedVersion, migrations);
A basic error message will inform you that the operation is impossible. However, you can take control by adding a handler for the blocked
event and perform the actions you deem necessary:
import { DatabaseFactory } from '@idxdb/promised';
let db = await DatabaseFactory.open(dbName, 1)
const bc = new BroadcastChannel('idxdb_channel')
bc.onmessage = (event) => {
if (event.data.action === 'close-db') {
db.close();
}
}
const onBlocked = async ({ oldVersion, newVersion }) => {
// warn other tabs to close the db
bc.postMessage({ action: 'close-db' });
return 'close-db-emitted'
}
db = await DatabaseFactory.open(dbName, 2, [], onBlocked).catch((error) => {
if (error === 'close-db-emitted') {
// retry the open
return DatabaseFactory.open(dbName, 2)
}
})
import { DatabaseFactory } from '@idxdb/promised';
const db = await DatabaseFactory.open('mydatabase', 1);
const tx = db.transaction(['users'], "readwrite");
const store = tx.objectStore('users');
store.add({ id: 1, name: 'Jane Doe' });
await tx.commit();
import { DatabaseFactory } from '@idxdb/promised';
const db = await DatabaseFactory.open('mydatabase', 1);
const tx = db.transaction(['users'], "readonly");
const store = tx.objectStore('users');
const result = await store.get(1);
console.log(result.name); // "John Doe"
import { DatabaseFactory } from '@idxdb/promised';
const db = await DatabaseFactory.open('mydatabase', 1);
const tx = db.transaction(['users'], "readonly");
const store = tx.objectStore('users');
const cursor = store.openCursor();
while (!(await cursor.end())) {
console.log(cursor.value);
cursor.continue();
}
The library implements all the methods of the IndexedDB API, you can find the documentation here.
You can also find more examples in the tests
When working with IndexedDB transactions, it is critical to be aware of how asynchronous functions interact with the event loop. If you initiate a transaction and then call any function that triggers the event loop (such as setTimeout
, fetch
, or similar asynchronous operations), IndexedDB will automatically close the ongoing transaction. This behavior can lead to unexpected errors, particularly if the transaction is closed before all operations are completed.
For example:
import { DatabaseFactory } from '@idxdb/promised';
const db = await DatabaseFactory.open('mydatabase', 1);
const tx = db.transaction(['users'], 'readwrite');
const store = tx.objectStore('users');
// This may result in an error if fetch is called within the transaction
fetch('/api/data').then((response) => {
return response.json();
}).then((data) => {
store.add(data);
});
// The transaction may be automatically closed by the event loop before the store operation completes
await tx.commit(); // Error: Transaction closed
If you'd like to contribute to this package, please follow these steps:
This package is licensed under ISC. See the LICENSE file for more information.
If you have any questions or need further assistance, please feel free to reach out to me at Marc MOREAU.
This package uses SemVer for versioning. For the versions available, see the tags on this repository.
FAQs
@idxdb/promised wraps the IndexedDB API. It allows you to easily store and retrieve data in an indexed db database using async/await syntax, making it easier to integrate with your existing codebase.
We found that @idxdb/promised demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.