
Security News
curl Shuts Down Bug Bounty Program After Flood of AI Slop Reports
A surge of AI-generated vulnerability reports has pushed open source maintainers to rethink bug bounties and tighten security disclosure processes.
Quick, simple, durable JSON document DB for quick alpha rollouts, complete with AWS S3 backups with customizable chron scheduling.
For (1) quickly spinning up alpha projects, (2) without worry about database drivers, connection strings, and separate databases, (3) non-relational or relational style JSON document storing, (4) complete with backups and custom scheduling onto AWS S3, (5) with document hashing, (6) atomic file writing, (7) UUID like id generation, (8) primary key overrides, and (9) created and modified timestamps and generation (with modifiable keys).
var users = require('dashdb')('users');
// view all available methods on the users collection
console.log(users);
var options = {
pk: 'id', /* primary key */
pkEntropy: 32, /* primary key entropy */
hk: 'hash', /* hash key */
ck: 'created', /* created key */
mk: 'modified' /* modified key */,
uid: null, /* user id for any temporary writes, user permissions */
gid: null, /* group id for any temporary writes, group permissions
backupSchedule: '* 0 * * *', /* chron schedule for every midnight, @see https://www.npmjs.com/package/node-schedule */
s3BucketName: '', /* bucket where data backups will be uploaded onto */
s3BucketPath: 'dashdb/', /* defaulting to uploading any s3 files into a folder, in the bucket */
s3AccessKey: '', /* aws access key for s3 put object permissions */
s3SecretAccessKey: '', /* aws secret access key for s3 put object permissions */
s3FileKey: `moment().format('YYYY/MM') + '/' + moment().format() + '-' + path.basename(filepath)` /* js eval to create file key onto s3 */
};
var users = require('dashdb')('users', options);
To keep things simple yet flexible, our DashDB's AWS backups work on a collection by collection basis. That way, you can set them all to the same bucket, same backup schedule, same folder - or not!
Every backup is timestamped and fully customizable. For ease and convenience, here are the relevant options you'd need to initialize any collection for easy and automatic backups.
Please note: this is not a typical chron, but stays alive with the node application. In other words, if your app goes down, so will this backup protocol. While this might seem like a weakness, this can be a strenth in prototyping quickly. If you use any keep-alive script to maintain your app, or even Elastic Beanstalk, your data backups should work well.
var options = {
backupSchedule: '* 0 * * *', /* chron schedule for every midnight, @see https://www.npmjs.com/package/node-schedule */
s3BucketName: '', /* bucket where data backups will be uploaded onto */
s3BucketPath: 'dashdb/', /* defaulting to uploading any s3 files into a folder, in the bucket */
s3AccessKey: '', /* aws access key for s3 put object permissions */
s3SecretAccessKey: '', /* aws secret access key for s3 put object permissions */
s3FileKey: `moment().format('YYYY/MM') + '/' + moment().format() + '-' + path.basename(filepath)` /* js eval to create file key onto s3 */
};
var users = require('dashdb')('users', options);
By default, the primary key is simply id and DashDB auto-generates that identifier for each row (or JSON document). Alternatively, you have the option of overriding the auto-generated identifier by simply passing your own value for the id.
Additionally, you can override the default id naming convention with the following option, along with the entropy involved in generating the UUID like value, if you're relying on DashDB to generate that primary key:
var options = {
pk: 'id', /* primary key */
pkEntropy: 32, /* primary key entropy */
};
var users = require('dashdb')('users', options);
To help with enforcing uniqueness of data records througout your application, DashDB creates and stores a document hash. This is generated by taking hashing the entire record, minus its primary key, created key, modified key, or its resulting hash key.
You can override the default hash naming convention with the following option, or completely disable the hashing mechanism by passing an empty string:
var options = {
hk: 'hash', /* hash key */
};
var users = require('dashdb')('users', options);
Any manipulations to your collection, including any updates, insertions, or removals, will not be committed to the filesystem unless you specifically call sync() or commit() on the collection.
require('dashdb')('users').all() retrieves all the records for that collection
require('dashdb')('users').create(item1, item2, ...) inserts any number of items into your collection
require('dashdb')('users').delete(predicate) removes any records matching that predicate object
require('dashdb')('users').empty() completely removes all records from the collection and should be used with caution
require('dashdb')('users').update(predicate, values) updates any records matching the predicate object with the values object
require('dashdb')('users').where(predicate) retrieves all records matching the predicate object
require('dashdb')('users').filepath returns the data path to where the collection json is stored on disk
FAQs
Beautifully straight forward NoSQL JSON document DB.
The npm package dashdb receives a total of 2 weekly downloads. As such, dashdb popularity was classified as not popular.
We found that dashdb demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
A surge of AI-generated vulnerability reports has pushed open source maintainers to rethink bug bounties and tighten security disclosure processes.

Product
Scan results now load faster and remain consistent over time, with stable URLs and on-demand rescans for fresh security data.

Product
Socket's new Alert Details page is designed to surface more context, with a clearer layout, reachability dependency chains, and structured review.