
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@solid-soda/evolutions
Advanced tools
Often your migration scenarios are as good as ORM you using. Sometimes it leads to inability (without some extra efforts) to use all features of your chosen DB. This library allows you to write migration scenarios using sql and run them with a single console command.
foo@bar:~$ evolutions --init
Initializing evolutions table evolutions
...
Evolutions table successfully created!
foo@bar:~$ evolutions
Running evolve script
--- 1.sql ---
CREATE TABLE Customers (
id INTEGER NOT NULL,
name VARCHAR(32) NOT NULL,
primary key (id)
);
Evolution is successful!
foo@bar:~$
First you need to install @solid-soda/evolutions via package manager:
yarn add @solid-soda/evolutions
Or if you prefer npm:
npm install @solid-soda/evolutions
Than you need to setup simple configuration file named .trona-config.js and containing script that exports object containing fields:
| field | type | description |
|---|---|---|
runQuery | MANDATORY | which is rejected in case of failure of said query and in case of SELECT query successfully executed contains array of selected rows in form of an object {[field]: value} |
tableName | OPTIONALLY | name of tha table that would contain information about evolutions, it would be created automatically by init script, default - "evolutions" |
evolutionsFolderPath | OPTIONALLY | relative path to folder that contains .sql files of migration scripts if form of a string or string[], default - "evolutions". |
Example of a config for mysql database:
const mysql = require('mysql');
const connection = mysql.createConnection({
host: 'localhost',
user: 'root',
password: '123',
database: 'playground',
});
connection.connect((err) => {
if (err) throw err;
console.log('Connected!');
});
module.exports = {
evolutionsFolderPath: ['db', 'evolutions'],
tableName: 'my_evolutions',
runQuery(query) {
return new Promise((resolve, reject) => {
connection.query(query, (err, result) => {
if (err) {
reject(err);
} else {
resolve(result);
}
});
});
},
};
After module have been installed run command and .trona-config.js created run
yarn evolutions --init
This command will create table with information about evolutions. Than create a folder with for your evolutions script and add your first evolution to it. Note the rules which you should follow writing said evolutions:
Folder content example:
- evolutions
- 1.sql
- 2.sql
- 3.sql
...
Evolution contents example:
CREATE TABLE Customers (
id INTEGER NOT NULL,
name VARCHAR(32) NOT NULL,
primary key (id)
);
#DOWN
DROP TABLE Customers;
Run command
yarn evolutions
After you managed to successfully setup @solid-soda/evolutions you can run yarn evolutions command.
This command will automatically detect any changed or new files in your evolutions folder, run
respected fallback scripts if needed and than evolve your databae schema (e. g. if you have 1.sql,
2.sql, and 3.sql evolutions already in your database, you have changed 2.sql and added 4.sql it will
run fallback for 3.sql and 2.sql and than run 2.sql, 3.sql, and 4.sql scripts)
By default evolution script will ask for a confirmation to run a degrade script.
But you can disable this feature by -y or --no-interactive flag.
yarn evolutions -y
FAQs
Simple library providing scala-play like evolutions
We found that @solid-soda/evolutions demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.