
Product
Introducing Webhook Events for Alert Changes
Add real-time Socket webhook events to your workflows to automatically receive software supply chain alert changes in real time.
database-aggregator
Advanced tools
The database aggregator collects data from various sources and puts them into a mongoDB database. It doesn't do anything out of the box, you have to configure the sources and aggregations scripts yourself.
Install database-aggregator globally:
npm install -g database-aggregator
Start database aggregator
DEBUG=aggregator:* DATABASE_AGGREGATOR_HOME_DIR=/path/to/homedir/ database-aggregator
The database aggregator is composed of two main parts. The first is a scheduler which launches child process to execute synchronization and aggregation tasks. The other is an HTTP API to read data from the database and the act on the scheduler.
The HTTP API provides
DEBUG sets the level of information to log in the console. There are 4 levels of debug: trace, debug, warn, error.
Examples:
DEBUG=aggregator:* # activate all debug levels
DEBUG=aggregator:warn,aggregator:error # activate warn and error debug levels
DATABASE_AGGREGATOR_HOME_DIR sets the configuration directory where the configuration is located
Additional configuration should be set in the home directory. See how to write the configuration directory
The scheduler scripts reads the configuration files and schedules the source and aggregation scripts. Each source synchronization and aggregation is launched in a new child process. The scheduler keeps track of the status of each process and logs the information in the MongoDB database. The logged information is available to end users via the HTTP API. Read here about how to write configuration files
docker pull mongo
docker create -p 27017:27017 --name mongo mongo
docker start mongo
npm test
FAQs
A database aggregator
The npm package database-aggregator receives a total of 19 weekly downloads. As such, database-aggregator popularity was classified as not popular.
We found that database-aggregator demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Add real-time Socket webhook events to your workflows to automatically receive software supply chain alert changes in real time.

Security News
ENISA has become a CVE Program Root, giving the EU a central authority for coordinating vulnerability reporting, disclosure, and cross-border response.

Product
Socket now scans OpenVSX extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.