Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@pulsedotso/postgraphile-plugin-fulltext-filter
Advanced tools
Full text searching on tsvector fields for use with postgraphile-plugin-connection-filter
This plugin implements a full text search operator for tsvector
columns in PostGraphile v4 via @mattbretl's excellent postgraphile-plugin-connection-filter
plugin.
This plugin was originally created by Mark Lipscombe ( @mlipscombe ).
postgraphile --append-plugins postgraphile-plugin-connection-filter,postgraphile-plugin-fulltext-filter
See here for more information about loading plugins with PostGraphile.
const express = require('express');
const { postgraphile } = require('postgraphile');
const PostGraphileConnectionFilterPlugin = require('postgraphile-plugin-connection-filter');
const PostGraphileFulltextFilterPlugin = require('postgraphile-plugin-fulltext-filter');
const app = express();
app.use(
postgraphile(pgConfig, schema, {
appendPlugins: [
PostGraphileConnectionFilterPlugin,
PostGraphileFulltextFilterPlugin,
],
})
);
app.listen(5000);
All tsvector
columns that aren't @omit'd should have indexes on them:
ALTER TABLE posts ADD COLUMN full_text tsvector;
CREATE INDEX full_text_idx ON posts USING gin(full_text);
This plugin adds the matches
filter operator to the filter plugin, accepting
a GraphQL String input and using the @@
operator to perform full-text searches
on tsvector
columns.
This plugin uses pg-tsquery to parse the user input to prevent Postgres throwing on bad user input unnecessarily.
For each tsvector
column, a rank column will be automatically added to the
GraphQL type for the table by appending Rank
to the end of the column's name.
For example, a column full_text
will appear as fullText
in the GraphQL type,
and a second column, fullTextRank
will be added to the type as a Float
.
This rank field can be used for ordering and is automatically added to the orderBy enum for the table.
query {
allPosts(
filter: {
fullText: { matches: 'foo -bar' }
}
orderBy: FULL_TEXT_RANK_DESC
}) {
...
fullTextRank
}
}
FAQs
Full text searching on tsvector fields for use with postgraphile-plugin-connection-filter
We found that @pulsedotso/postgraphile-plugin-fulltext-filter demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.