
Company News
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
@rebasepro/common
Advanced tools
Rebase shared core — collection registry, data driver adapter and fluent query builder. No React dependency.
Shared utilities, collection registry, data driver adapter, and fluent query builder used across Rebase packages.
pnpm add @rebasepro/common
ESM-only: "type": "module" with no CommonJS build, so it is loaded with
import. require() of it resolves only on Node 22.12+, which supports
require(esm).
@rebasepro/common is the lowest-level shared logic layer in the Rebase frontend stack. It provides:
buildRebaseData() bridges any DataDriver implementation into a RebaseData proxy with typed collection accessorsQueryBuilder class plus or(), and(), cond() helpers for composing complex queriesThis package has no React dependency — it's pure TypeScript and can be used in both client and server contexts.
| Export | Description |
|---|---|
buildRebaseData(driver) | Wraps a DataDriver in a Proxy-based RebaseData object. Property access like data.products returns a CollectionAccessor for that collection slug (camelCase → snake_case). |
QueryBuilder<M> | Fluent query builder with .where(), .orderBy(), .limit(), .offset(), .search(), .include(), .find(), and .listen() |
or(...conditions) | Create an OR logical condition |
and(...conditions) | Create an AND logical condition |
cond(column, op, value) | Create a single filter condition |
| Export | Description |
|---|---|
CollectionRegistry | Registry for managing collection definitions |
| Default collections | Pre-built collection configurations |
| Module | Contents |
|---|---|
collections | Collection config helpers |
common | General-purpose utilities |
snapshots | Snapshot value resolution |
enums | Enum type helpers |
paths | Path parsing and manipulation |
resolutions | Property and collection resolution |
permissions | Permission evaluation |
references | Reference property helpers |
relations | Relation property helpers |
navigation_from_path | Build navigation tree from a path |
parent_references_from_path | Extract parent references |
builders | Collection/property builder utilities |
storage | Storage path utilities |
callbacks | Callback composition utilities |
conditions | Conditional logic helpers |
navigation_utils | Navigation tree utilities |
import { buildRebaseData, QueryBuilder, or, cond } from "@rebasepro/common";
// Wrap a DataDriver into a proxy-based data accessor
const data = buildRebaseData(myDriver);
// Access collections by name (camelCase auto-converts to snake_case)
const { data: products } = await data.products.find({ limit: 10 });
const snapshot = await data.products.findById("abc-123");
// Fluent query builder
const { data: results } = await data.products
.where("status", "==", "published")
.orderBy("created_at", "desc")
.limit(20)
.find();
// Complex logical queries
const { data: filtered } = await data.products
.where(or(
cond("category", "==", "electronics"),
cond("price", ">=", 100)
))
.find();
@rebasepro/types — DataDriver, RebaseData, CollectionAccessor, Snapshot, FindResponse, etc.@rebasepro/utils — Low-level utilities (toSnakeCase, etc.)@rebasepro/app — Runtime layer that consumes @rebasepro/common@rebasepro/client — HTTP client that re-exports and extends the QueryBuilderFAQs
Rebase shared core — collection registry, data driver adapter and fluent query builder. No React dependency.
The npm package @rebasepro/common receives a total of 726 weekly downloads. As such, @rebasepro/common popularity was classified as not popular.
We found that @rebasepro/common demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.