Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
arachne is a utility for scripting connected subgraphs.
Databases frequently contain multiple independent data sets, especially in
multi-tenant systems where client data are stored in the same tables but have
no relation to each other. Extracting a single data set is more difficult the
more complex the schema, and automated tools like pg_dump
are all-or-nothing
propositions.
Given a database, a table to start from, and the value of a primary key in that
table, arachne crawls the relationship graph to determine the dependency
structure and exports the data in a safe order so no row is inserted before
data it depends on. The output format is similar to that of pg_dump
.
Certain criteria must be met in order for arachne to analyze and script a complete dataset:
npm i -g arachne
As an application:
arachne --database mydb mytable 1234
As a module:
const arachne = require('arachne');
const config = {}; // pg connection configuration
const criteria = {id: 1234};
arachne(config, 'sourcetable', criteria).then(script => {...});
Note that with complex schemata and large tables it may take some time to traverse and script everything!
FAQs
Export insert scripts for data by crawling the relationship graph
The npm package arachne receives a total of 0 weekly downloads. As such, arachne popularity was classified as not popular.
We found that arachne demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.