Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
denali-node-orm2
Advanced tools
Allows use of [Node-ORM2](https://github.com/dresende/node-orm2) to talk to your relational database.
Allows use of Node-ORM2 to talk to your relational database.
denali install denali-node-orm2
)ormAdapter
key in /config/environment.js
to node-orm2
In Denali, each ORM defines its own set of model attribute types. If you are shifting from a different ORM adapter, you'll want to confirm that your attribute types match what Node-ORM2 expects. Here are some of the key basic types:
text
number
boolean
json
date
Node-ORM2 supports additional types (visible here) and can support additional types that match your DB of choice.
Currently, this adapter assumes singular table names and snake-cased attribute names. For example, for the Denali model defined below:
export default class Issue extends Model {
static createdAt = attr('date'); // maps to the issue, created_at column
}
Table names will shift to being pluralized shortly by default but we'd also like both the table name and column naming approach to be configurable in the future to support databases already in use.
If you are using the sqlite driver and see a Connection lost - driver does not support reconnection
error, double-check
the path to your DB. This message can be thrown if the database is not found ...
npm install
denali server
$ denali test
FAQs
Allows use of [Node-ORM2](https://github.com/dresende/node-orm2) to talk to your relational database.
We found that denali-node-orm2 demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.