
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
An amazing and easy to use CRUD API-REST/SOCKETIO constructors for API with mongoDB(mongoose) and SQL(sequelize)
A powerful and flexible API library for Node.js that supports both SQL (Sequelize) and NoSQL (Mongoose) databases, with REST and Socket.IO implementations.
bun install apiato
This repository includes four example implementations:
Each example is in its own directory under examples/. To run an example:
cd examples/[example-name]
bun install
bun run dev
import { ApiatoSQL } from 'apiato/typescript';
import User from './models/User';
const apiato = new ApiatoSQL();
// Create routes
router.post('/', apiato.createOne(User));
router.get('/', apiato.getMany(User));
router.get('/:id', apiato.getOneById(User));
router.put('/:id', apiato.updateById(User));
router.delete('/:id', apiato.findIdAndDelete(User));
import { ApiatoNoSQL } from 'apiato/typescript';
import User from './models/User';
const apiato = new ApiatoNoSQL();
// Create routes
router.post('/', apiato.createOne(User));
router.get('/', apiato.getMany(User));
router.get('/:id', apiato.getOneById(User));
router.put('/:id', apiato.updateById(User));
router.delete('/:id', apiato.findIdAndDelete(User));
import { ApiatoSocket } from 'apiato/typescript';
import { Server } from 'socket.io';
import User from './models/User';
const io = new Server(httpServer);
const userSocket = new ApiatoSocket(io, User);
// Available events:
// - create
// - getMany
// - getOneById
// - updateById
// - deleteById
// Example client usage:
socket.emit('create', JSON.stringify({
body: {
name: "John Doe",
email: "john@example.com",
age: 30
},
responseType: "private" // or "broadcast" or "room"
}));
POST /: Create a new recordGET /: Get all records (with pagination, sorting, filtering)GET /:id: Get a record by IDPUT /:id: Update a record by IDDELETE /:id: Delete a record by IDcreate: Create a new recordgetMany: Get all recordsgetOneById: Get a record by IDupdateById: Update a record by IDdeleteById: Delete a record by IDwhere: Filter records by field valueslike: Filter records using partial matchesselect: Select specific fieldspaginate: Paginate results (page, limit)sort: Sort results by fieldspopulate/include: Include related records{
body?: any; // Data for create/update operations
id?: number | string; // Record ID for single-record operations
query?: { // Query parameters
where?: any; // Filter conditions
attributes?: string[]; // Fields to select (Sequelize)
select?: any; // Fields to select (Mongoose)
include?: any[]; // Relations to include
sort?: any; // Sort conditions
paginate?: { // Pagination
page: number;
limit: number;
}
};
responseType?: 'private' | 'broadcast' | 'room'; // Response type
room?: string; // Room name for room-based responses
tag?: string; // Custom tag for response tracking
}
MIT
FAQs
An amazing and easy to use CRUD API-REST/SOCKETIO constructors for API with mongoDB(mongoose) and SQL(sequelize)
The npm package apiato receives a total of 39 weekly downloads. As such, apiato popularity was classified as not popular.
We found that apiato demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.