
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
@juit/pgproxy-client
Advanced tools
This package provides the main entry point for clients to work with PGProxy Servers. It acts both as an abstraction layer over the various client implementations _and_ as a registry for them.
This package provides the main entry point for clients to work with PGProxy Servers. It acts both as an abstraction layer over the various client implementations and as a registry for them.
In the code, you can simply depend on the PGClient class:
import { PGClient } from '@juit/pgproxy-client'
const client = new PGClient()
The client can be constructed with a url as a parameter, indicating the
endpoint of the connection and the specific client to be used. If no such
parameter is specified, the value of the PGURL environment variable will be
used.
Additionally if the URL specified at construction (or in the PGURL environment
variable) does not provide ANY authentication information, the PGUSER and
PGPASSWORD environment variables will be used to fill in those details.
Specific implementations are registered by simply importing their library:
@juit/pgproxy-client-node: The HTTP client for NodeJS http(s)://secret@host:port/@juit/pgproxy-client-whatwg: The HTTP client for WhatWG + WebCrypto http(s)://secret@host:port/@juit/pgproxy-client-psql: The direct LibPQ-based client psql://usrname:password@host:port/databaseThe ability to abstract client and connection details allows the code to be as portable as possible. For example in an AWS Lambda Function:
// Entry point for AWS Lambda functions
// Import the _node_ client, the PGURL environment variable comes from the
// Lambda definitions and can be specified via the AWS console, it will have
// a format like: https://my-secret@my-ec2-instance:54321/
import '@pgproxy/client-node'
export const handler = async (event: LambdaEvent) => {
// ... use code that connects to the database using `new PGClient()`
}
Similarly, when running a test requiring a connection to a local database (no need to spin up a whole PGProxy Server to test):
// Entry point for tests
// Import the _psql_ client, which will be registered as a handler for the
// "psql" protocol in PGClient
import '@pgproxy/client-psql'
beforeAll(() => {
process.env.PGURL = "psql://username:password@localhost:5432/my-database"
})
it('should run tests connecting to the database', async () => {
// ... test the code using `new PGCLient()`
})
Simple queries can be executed on the database via the query(...) method:
const client = new PGClient()
const result = await client.query('SELECT * FROM test WHERE value = $1', [ 'theValue' ])
More complex queries (e.g. transactions) can be performed using the
connection returned by the connect() method:
const client = new PGClient()
await using connection = await client.connect() // the "connection" is AsyncDisposable
await connection.begin() // ... begin transaction
await connection.query(...) // ... all transaction queries
await connection.commit() // ... commit transaction, or "rollback()"
// if not declaring with "async using" connections can be closed manually:
//
// await connection.close()
Or using a connection consumer:
const client = new PGClient()
// here "result" will be the value returned by the callback passed to "connect"
const result = await client.connect(async (connection) => {
await connection.begin()
await connection.query(...) // ... all transaction queries
await connection.commit()
return result // returned to whatever is awaiting on "connect"
})
The query(...) method requires one parameter, the SQL query to run, and allows
parameters (as an array) to be declared as a second, optional parameter.
A second form of the query(...) function accepts an object with two keys:
query: the SQL query to execute optionally containing placeholdersparams: any parameter replacement for $x placeholdersWhen used with callbacks, the object passed to the connect(...) callback
provides the following methods:
query(...): as abovebegin(): issues the BEGIN SQL statement (starts a transaction)commit(): issues the COMMIT SQL statement (commits a transaction)rollback(): issues the ROLLBACK SQL statement (rolls back a transaction)Uncommitted transactions will always be rolled back by the connection pool code.
Otherwise, when using connect() without callbacks, the returned connection
will be AsyncDisposable, and (if not using async using) can be manually
disposed of calling the close() function.
The result returned by the query(...) method is a simple object containing:
command (string): The SQL command that generated this result (e.g.
SELECT, INSERT, ...)rowCount (number): The number of rows affected by the query. rows (for SELECT
statements, for example) or the number of lines affected by the query
(the number of records inserted by an INSERT query).rows (Record<string, any>[]): The rows returned by the database query,
keyed by the column name.tuples (any[][]): The tuples returned by the database query, keyed by
the column index. */Each client exposes its own types registry in the registry field.
By manipulating the registry, one can tweak the conversion of PostgreSQL types to JavaScript types.
For more informations see the @juit/pgproxy-types package.
This client also exposes a SQL template tagging function, or * a function
capable of converting a template string into a query like structure.
For example:
const email = 'user@example.org'
const query = SQL `SELECT * FROM users WHERE email = ${email}`
// Here "query" will be something like:
// {
// query: 'SELECT * FROM users WHERE email = $1',
// params: [ 'user@example.org' ],
// }
The SQL function can also be use with concatenated template strings, for
example:
const email = 'user@example.org'
const hash = 'thePasswordHash'
const query = SQL
`SELECT * FROM users WHERE email = ${email}`
`AND password_hash = ${hash}`
// Here "query" will be something like:
// {
// query: 'SELECT * FROM users WHERE email = $1 AND password_hash = $2',
// params: [ 'user@example.org', 'thePasswordHash' ],
// }
In this case, multiple template strings will be concatenated with a single space character.
This function can be directly used with our query interface, as follows:
const client = new PGClient()
const email = 'user@example.org'
const result = await client.query(SQL `SELECT * FROM users WHERE email = ${email}`)
FAQs
This package provides the main entry point for clients to work with PGProxy Servers. It acts both as an abstraction layer over the various client implementations _and_ as a registry for them.
The npm package @juit/pgproxy-client receives a total of 329 weekly downloads. As such, @juit/pgproxy-client popularity was classified as not popular.
We found that @juit/pgproxy-client demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.