Security News
vlt Debuts New JavaScript Package Manager and Serverless Registry at NodeConf EU
vlt introduced its new package manager and a serverless registry this week, innovating in a space where npm has stagnated.
@vercel/postgres
Advanced tools
A client that works with Vercel Postgres.
Note: If you want to use an ORM instead of writing your own queries, see @vercel/postgres-kysely.
pnpm install @vercel/postgres
// Don't need any custom config?:
import { sql } from '@vercel/postgres';
// `sql` is already set up and ready to go; no further action needed
// Need to customize your config?:
import { createPool } from '@vercel/postgres';
const pool = createPool({
/* config */
});
// Need a single client?:
import { createClient } from '@vercel/postgres';
const client = createClient({
/* config */
});
// no-config
import { sql } from '@vercel/postgres';
const id = 100;
// A one-shot query
const { rows } = await sql`SELECT * FROM users WHERE id = ${userId};`;
// Multiple queries on the same connection (improves performance)
// warning: Do not share clients across requests and be sure to release them!
const client = await sql.connect();
const { rows } = await client.sql`SELECT * FROM users WHERE id = ${userId};`;
await client.sql`UPDATE users SET status = 'satisfied' WHERE id = ${userId};`;
client.release();
The sql
import in the query above is just a modified Pool
object (that's why you can call it). If you're running a custom config with createPool
, the same functionality is available as pool.sql
.
To specify a connection string:
import { createPool } from '@vercel/postgres';
const pool = createPool({
connectionString: process.env.SOME_POSTGRES_CONNECTION_STRING,
});
const likes = 100;
const { rows, fields } =
await pool.sql`SELECT * FROM posts WHERE likes > ${likes};`;
In edge environments, IO connections cannot be reused between requests. To allow your Pool
s to continue to function, we set maxUses
to 1 when running on the edge (otherwise the Pool
might hold on to a Client
used in one request and try to use it again in another). Unfortunately, this means the Pool
also can't reuse the connection within the request. For this reason, if you're firing more than one database query to serve a single request in your app, we recommend obtaining a Client
from Pool.connect
, using that Client
to query the database, and then releasing it.
If you just want the connection URL, you can call postgresConnectionString(type: 'pool' | 'direct'): string;
. This will read from your environment variables. For the pool
type, it will look for the POSTGRES_URL
environment variables. For the direct
type, it will look for the POSTGRES_URL_NON_POOLING
environment variables.
import { postgresConnectionString } from '@vercel/postgres';
const pooledConnectionString = postgresConnectionString('pool');
const directConnectionString = postgresConnectionString('direct');
When using the createClient
or createPool
functions, you can pass in additional options alongside the connection string that conforms to VercelPostgresClientConfig
or VercelPostgresPoolConfig
.
The @vercel/postgres
package uses the pg
package. For
more detailed documentation, checkout node-postgres.
FAQs
Connect to Vercel Postgres databases on the Edge
The npm package @vercel/postgres receives a total of 34,183 weekly downloads. As such, @vercel/postgres popularity was classified as popular.
We found that @vercel/postgres demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 9 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt introduced its new package manager and a serverless registry this week, innovating in a space where npm has stagnated.
Security News
Research
The Socket Research Team uncovered a malicious Python package typosquatting the popular 'fabric' SSH library, silently exfiltrating AWS credentials from unsuspecting developers.
Security News
At its inaugural meeting, the JSR Working Group outlined plans for an open governance model and a roadmap to enhance JavaScript package management.