
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@supabase/postgres-meta
Advanced tools
postgres-metaA RESTful API for managing your Postgres. Fetch tables, add roles, and run queries (and more).
https://supabase.github.io/postgres-meta/
Schema:
POST /query (Execute SQL query)
POST /format (Format SQL query)POST /parse (Parse SQL query into AST)POST /explain (Explain SQL query)/columns
alter table add column)alter table alter/rename column)alter table drop column)/extensions
create extension)alter extension)drop extension)/functions
create function)alter function)drop function)/publications
create publication)alter publication)drop publication)/roles
create role)alter role)drop role)/schemas
create schema)alter schema)drop schema)/tables
create table)alter table)drop table)/triggers
create trigger)alter trigger)drop trigger)/types
create type)alter type)drop type)Helpers:
/config
/version: Postgres version/generators
/openapi: Generate Open API/typescript: Generate Typescript types/swift: Generate Swift types (beta)Set the following ENV VARS:
PG_META_HOST="0.0.0.0"
PG_META_PORT=8080
PG_META_DB_HOST="postgres"
PG_META_DB_NAME="postgres"
PG_META_DB_USER="postgres"
PG_META_DB_PORT=5432
PG_META_DB_PASSWORD="postgres"
Then run any of the binaries in the releases.
Why?
This serves as a light-weight connection pooler. It also normalises the Postgres system catalog into a more readable format. While there is a lot of re-inventing right now, this server will eventually provide helpers (such as type generators). The server is multi-tenant, so it can support multiple Postgres databases from a single server.
What security does this use?
None. Please don't use this as a standalone server. This should be used behind a proxy in a trusted environment, on your local machine, or using this internally with no access to the outside world.
To start developing, run npm run dev. It will set up the database with Docker for you. The server will restart on file change.
If you are fixing a bug, you should create a new test case. To test your changes, add the -u flag to vitest on the test:run script, run npm run test, and then review the git diff of the snapshots. Depending on your change, you may see id fields being changed - this is expected and you are free to commit it, as long as it passes the CI. Don't forget to remove the -u flag when committing.
To make changes to the type generation, run npm run gen:types:<lang> while you have npm run dev running,
where <lang> is one of:
typescriptgoswift (beta)To use your own database connection string instead of the provided test database, run:
PG_META_DB_URL=postgresql://postgres:postgres@localhost:5432/postgres npm run gen:types:<lang>
Apache 2.0
FAQs
A RESTful API for managing your Postgres.
The npm package @supabase/postgres-meta receives a total of 15,058 weekly downloads. As such, @supabase/postgres-meta popularity was classified as popular.
We found that @supabase/postgres-meta demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 14 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.