
Research
/Security News
Laravel Lang Compromised with RCE Backdoor Across 700+ Versions
Laravel Lang packages were compromised with an RCE backdoor across hundreds of versions, exposing cloud, CI/CD, and developer secrets.
@qbobjx/plugins
Advanced tools
Official OBJX plugins, including timestamps, snake case naming, soft delete, tenant scope, and audit trail.
Official OBJX plugins, including timestamps, snake case naming, soft delete, tenant scope, and audit trail.
npm install @qbobjx/plugins
import { col, defineModel } from '@qbobjx/core';
import {
createSnakeCaseNamingPlugin,
createSoftDeletePlugin,
createTenantScopePlugin,
} from '@qbobjx/plugins';
export const Account = defineModel({
table: 'accounts',
columns: {
id: col.int().primary(),
tenantId: col.text(),
deletedAt: col.timestamp().nullable(),
},
plugins: [
createSnakeCaseNamingPlugin(),
createTenantScopePlugin(),
createSoftDeletePlugin(),
],
});
createTimestampsPlugin()createSnakeCaseNamingPlugin()createSoftDeletePlugin()createTenantScopePlugin()createAuditTrailPlugin()Use createSnakeCaseNamingPlugin() when your model keys are camelCase but your physical database columns are snake_case.
import { col, defineModel } from '@qbobjx/core';
import { createSnakeCaseNamingPlugin } from '@qbobjx/plugins';
export const Account = defineModel({
table: 'accounts',
columns: {
id: col.int().primary(),
tenantId: col.text(),
createdAt: col.timestamp(),
},
plugins: [
createSnakeCaseNamingPlugin({
exclude: ['id'],
overrides: {
createdAt: 'created_on',
},
}),
],
});
The compiler emits physical names like tenant_id, while hydrated rows continue to use model keys like tenantId.
Important: this plugin should be attached at model definition time. It updates column metadata in
the onModelDefine hook, so adding it only as a session-global plugin is too late for remapping.
Repository examples using this pattern:
examples/complex-runtimeexamples/express-apiexamples/nestjs-apicreateTenantScopePlugin() injects tenant predicates into OBJX-generated SQL. It does not replace
PostgreSQL RLS policies that depend on set_config(...) / current_setting(...).
If your database enforces tenant isolation through PostgreSQL RLS, configure
createPostgresSession({ executionContextSettings: ... }) in @qbobjx/postgres-driver and execute
protected work inside session.transaction(...).
FAQs
Official OBJX plugins, including timestamps, snake case naming, soft delete, tenant scope, and audit trail.
We found that @qbobjx/plugins demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Laravel Lang packages were compromised with an RCE backdoor across hundreds of versions, exposing cloud, CI/CD, and developer secrets.

Security News
Socket found a malicious postinstall hook across 700+ GitHub repos, including PHP packages on Packagist and Node.js project repositories.

Security News
Vibe coding at scale is reshaping how packages are created, contributed, and selected across the software supply chain