Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
@packt/sequelize-service-model
Advanced tools
In order to publish the package and pass all the tests, you need to run docker-compose up
to launch the postgres DB and in a separate window run npm publish
. This will run the lint, tests and build the module.
Importing the module
import ServiceModel from '@packt/sequelize-service-model`
Get a new service instance
const serviceModel = new ServiceModel(dbConfig);
[static] Validate a db config
const isConfigValid = ServiceModel.isValidDbConfig(dbConfig);
Once you create a new instance of the ServiceModel, internally it will instatiate a new DB instance.
Get the db instance
const db = serviceModel.getDb();
Close the db connection
serviceModel.closeDb();
Check db connectivity
serviceModel.checkDbConnectivity()
.then(...)
[static] Get Sequelize Object (the library)
const Sequelize = ServiceModel.getSequelize();
[static] Get pagination links (next, prev)
const paginationOptions = {
count - Required. Total number of results
offset - Optional, defaults to 0. The results offset currently being accessed
limit - Required. The size of one page
baseLink - Required. Link to the endpoint that needs pagination. Ex: https://services.packtpub.com/offers
};
const links = ServiceModel.generatePaginationLinks(paginationOptions);
Result will look like:
{
prev: 'https://services.packtpub.com/offers?offset=20&limit=10',
next: 'https://services.packtpub.com/offers?offset=40&limit=10',
}
[static] JSON parse
import ServiceModel from '@packt/sequelize-service-model';
ServiceModel.jsonParse(body, [statusCode], [errorCode])
.then(body => do stuff);
OR
import jsonParse from '@packt/sequelize-service-model/jsonParse';
jsonParse(body, [statusCode], [errorCode])
.then(body => do stuff);
The service model has beem built with postgres in mind. The default config looks similar to:
{
dbName: 'databaseName',
dbUser: 'postgres_user',
dbPass: 'XXXXXX',
dbHost: 'https://postgreslocation:6543'
}
This has also been extended to include sending audit logs of user interactions with the database. To use this feature you need to provide the users UUID and the URI for the ElasticSearch instance. The configuration object would look like:
{
# Postgres Configuration
dbName: 'databaseName',
dbUser: 'postgres_user',
dbPass: 'XXXXXX',
dbHost: 'https://postgreslocation:6543',
# Audit Log Configuration
auditEs: `https://localhost:9200',
userId: '9301bb15-b070-4e62-8f38-5fdae5a05678',
}
Auditing is run on creative or destructive query types, this means we log CREATE, UPDATE & DELETE (soft or hard) queries. The logged object itself will look like:
userId: 'XXXX-XXXX-XXXX-XXXX',
queryType: 'CREATE|UPDATE|DELETE',
query: '<QUERY-RELATED-DATA>',
FAQs
Sequelize Service Model
The npm package @packt/sequelize-service-model receives a total of 18 weekly downloads. As such, @packt/sequelize-service-model popularity was classified as not popular.
We found that @packt/sequelize-service-model demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.