
Security News
npm Tooling Bug Incorrectly Marks One-Character Packages as Security Holders
npm confirmed a tooling bug incorrectly marked several one-character packages as security holders and said it was working on a rollback.
@ttoss/postgresdb
Advanced tools
This package uses Sequelize to provide a simple framework for working with PostgreSQL databases.
pnpm add @ttoss/postgresdb
pnpm add -D @ttoss/postgresdb-cli
This package is ESM only. Make sure to use it in an ESM environment.
{
"type": "module"
}
If you already have a database, you can skip this step. If you don't, you can use the following Docker command to create a new PostgreSQL database on port 5432 using Docker:
docker run --name postgres-test -e POSTGRES_PASSWORD=mysecretpassword -d -p 5432:5432 postgres
If you want to use Docker Compose, you can create a docker-compose.yml file with the following content:
services:
db:
image: postgres
environment:
POSTGRES_PASSWORD: mysecretpassword
volumes:
- db-data:/var/lib/postgresql/data
ports:
- '5432:5432'
volumes:
db-data:
And run the following command:
docker compose up -d
Create a folder called models and add a new file called User.ts with the following content:
import { Table, Column, Model } from '@ttoss/postgresdb';
@Table
export class User extends Model<User> {
@Column
declare name: string;
@Column
declare email: string;
}
_This packages exports all decorators from [sequelize-typescript](https://github.com/sequelize/sequelize-typescript), so you can use them to define your models._
Export the model in the models/index.ts file:
export { User } from './User';
Create a new file called src/db.ts with the following content:
import { initialize } from '@ttoss/postgresdb';
import * as models from './models';
export const db = await initialize({ models });
Note: the script sync will use the db object to sync the database schema with the models.
You can set the database connection parameters in two ways:
Defining them in the src/db.ts file using the initialize function.
export const db = initialize({
database: '', // database name
username: '', // database username
password: '', // database password
host: '', // database host
port: 5432, // database port. Default: 5432
models,
});
Using environment variables:
DB_NAME: database nameDB_USERNAME: database usernameDB_PASSWORD: database passwordDB_HOST: database hostDB_PORT: database port. Default: 5432@ttoss/postgresdb will use them automatically if they are defined.
Here is an example of a .env file:
DB_NAME=postgres
DB_USERNAME=postgres
DB_PASSWORD=mysecretpassword
DB_HOST=localhost
DB_PORT=5432
To sync the database schema with the models, use the sync command:
pnpm dlx @ttoss/postgresdb-cli sync
By now, you should have a working database with a User table.
This command works by importing the db object from the src/db.ts file and calling the sync method on it.
You can now use the db object to interact with the database. Check the Sequelize documentation for more information.
import { db } from './db';
const user = await db.User.create({
name: 'John Doe',
email: 'johndoe@email.com',
});
All models are available in the db object.
If you want to use in a monorepo by sharing the models between packages, you need to create some configurations to make it work.
postgresdb packageCreate your postgresdb package following the steps above.
Exports your main file in the package.json file:
{
"type": "module",
"exports": "./src/index.ts"
}
Create a new file called src/index.ts with the following content to exports the models you've created:
export * as models from './models';
We recommend to not export the db object in this file because you may want to use different configurations in different packages.
Install @ttoss/postgresdb package:
pnpm add @ttoss/postgresdb
Add your postgresdb package as a dependency. In the case you're using PNPM, you can use the workspace protocol:
{
"dependencies": {
"@yourproject/postgresdb": "workspace:^"
}
}
Include the postgresdb package in the include field of the tsconfig.json file:
{
"include": ["src", "../postgresdb/src"]
}
This way, you can import the models using the @yourproject/postgresdb package.
Create a new file called src/db.ts with the following content:
import { initialize } from '@ttoss/postgresdb';
import { models } from '@yourproject/postgresdb';
export const db = initialize({
models,
// other configurations
});
Use the db object to interact with the database.
initialize(options: InitializeOptions): dbInitialize the database connection and load the models.
All Sequelize options are available, expect models.
models: An object with all models to be loaded. The keys are the model names, and the values are the model classes. This way, you can access the models using the db object.This package exports all decorators from sequelize-typescript, i.e., @Table, @Column, @ForeignKey, etc.
ModelColumns<T>A type that represents the columns of a model.
import { Column, Model, type ModelColumns, Table } from '@ttoss/postgresdb';
@Table
class User extends Model<User> {
@Column
declare name?: string;
@Column
declare email: string;
}
/**
* UserColumns = {
* name?: string;
* email: string;
* }
*/
type UserColumns = ModelColumns<User>;
FAQs
A library to handle PostgreSQL database connections and queries
The npm package @ttoss/postgresdb receives a total of 1,040 weekly downloads. As such, @ttoss/postgresdb popularity was classified as popular.
We found that @ttoss/postgresdb demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
npm confirmed a tooling bug incorrectly marked several one-character packages as security holders and said it was working on a rollback.

Research
/Security News
Newer packages in this compromise use native extensions and .pth loaders to execute JavaScript stealers in developer environments.

Research
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.