
Product
Socket Firewall Now Blocks Malicious VS Code and Open VSX Extensions
Socket Firewall blocks malicious VS Code and Open VSX extensions before install, protecting developers from compromised editor marketplaces.
@truffle/db
Advanced tools
@truffle/dbTruffle DB is a complete, flexible system for the querying and mutation
of Truffle’s smart contract records. Following the data model available here,
Truffle DB persists smart contract information that is typically found in
a project's artifacts, and allows for querying this data using GraphQL.
Truffle artifacts are currently stored as JSON files in a project’s build/contracts/
directory. These documents are currently the canonical source of information about
a project’s smart contracts. While useful, artifacts can be limited for certain advanced
use cases.
For example, the artifacts format expects contracts with unique names. This means that currently a developer is unable to keep two contracts in their project that have the same name. Truffle DB solves this problem with a name record-keeping system that can keep track of multiple contracts in this situation.
Truffle DB is built with:
Add the following to your truffle-config.js file in order to enable Truffle DB
db: {
enabled: true
}
Note: Enabling Truffle DB does not affect artifacts, but will produce a new .db
directory when you compile or migrate your project.
It will soon be possible to load and access Truffle DB data via truffle compile and truffle migrate.
Stay tuned!
const { connect } = require("@truffle/db")
MIT
FAQs
Smart contract data aggregation
The npm package @truffle/db receives a total of 10,667 weekly downloads. As such, @truffle/db popularity was classified as popular.
We found that @truffle/db demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 9 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Socket Firewall blocks malicious VS Code and Open VSX extensions before install, protecting developers from compromised editor marketplaces.

Research
More than 140 Mastra npm packages were compromised in a supply chain attack that used a typosquatted dependency to deliver a cross-platform infostealer during installation.

Research
/Security News
A new npm package tests AI malware scanners with prompt injection, safety-triggering comments, context flooding, and obfuscated JavaScript.