Research
Security News
Kill Switch Hidden in npm Packages Typosquatting Chalk and Chokidar
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
demux-postgres
Advanced tools
# Using yarn
yarn add demux-postgres
yarn add massive
# Using npm
npm install demux-postgres --save
npm install massive --save
The MassiveActionHandler
uses massive-js to interact with a Postgres database for storing internal demux state and state calculated by Updaters. Rollback of state due to forks is supported by committing all database writes to per-block databases transactions, and utilizing Cyan Audit to reverse those transactions in reverse order when needed.
In order to instantiate a MassiveActionHandler
, four arguments are needed:
handlerVersions
: This is an array of HandlerVersion
s. For more information, see the demux-js
documentation.
massiveInstance
: A connected massive database connection object. demux-js-postgress requires that you have a Postgres server running version 9.6 or greater. For more information on how to configure and instantiate this object, see the massivejs documentation.
dbSchema
: The name of the schema we will operate in.
migrationSequences
: (See next section below)
The MassiveActionHandler
will manage all of the Postgres migrations relevant to demux operations. In addition to setting up all internal requirements (idempotently creating the specified dbSchema
and required internal tables, installing/activating Cyan Audit), you may create additional migrations that run either at initial setup, or are triggered by an action at some point in the future. This is done by writing your migrations as SQL files, loading them via the Migration
constructor, and collecting them into an array of MigrationSequence
s:
create_todo_table.sql
CREATE TABLE ${schema~}.todo (
id int PRIMARY KEY,
name text NOT NULL
);
migrationSequences.js
import { Migration } from "demux-postgres"
const createTodoTable = new Migration(
"createTodoTable", // name
"myschema", // schema
"create_todo_table.sql", // SQL file
)
// MigrationSequence[]
// See: https://github.com/EOSIO/demux-js-postgres/blob/develop/src/interfaces.ts
module.exports = [{
migrations: [createTodoTable],
sequenceName: "init"
}]
You can then use this object for the migrationSequences
argument of the MassiveActionHandler
constructor.
Once you have instantiated the MassiveActionHandler
, you can set up your database via the setupDatabase()
method. If you have a MigrationSequence
with the name "init"
, then this migration sequence will run after all other internal database setup is finished.
It can be useful to trigger migrations from actions (for example, when a contract updates), much in the same way it is useful to update HandlerVersions. You may do this from an Updater's apply
function via db.migrate(<MigrationSequence.sequenceName>)
:
async function migrateDatabase(db, payload) {
await db.migrate(payload.sequenceName) // Blockchain will determine when and what migrations will run
}
This is also important for maintaining determinism of data (e.g. during replays) if schema changes are needed.
const { BaseActionWatcher } = require("demux")
const { MassiveActionHandler } = require("demux-postgres")
const { NodeosActionReader } = require("demux-eos") // Or any other compatible Action Reader
const massive = require("massive")
// See https://eosio.github.io/demux-js/ for info on Handler Versions, Updaters, and Effects
const handlerVersions = require("./handlerVersions") // Import your handler versions
// See "Migrations" section above
const migrationSequences = require("./migrationSequences")
// See https://dmfay.github.io/massive-js/connecting.html for info on massive configuration
const dbConfig = { ... }
massive(dbConfig).then((db) => {
const actionReader = new NodeosActionReader("http://my-node-endpoint", 0)
const actionHandler = new MassiveActionHandler(
handlerVersions,
db,
dbConfig.schema,
migrationSequences
)
const actionWatcher = new BaseActionWatcher(actionReader, actionHander, 500)
actionWatcher.watch()
})
FAQs
Demux-js Action Handler implementation for Postgres databases
We found that demux-postgres demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.