
Product
Introducing Reachability for PHP
Reachability analysis for PHP is now available in experimental, helping teams identify which vulnerabilities are actually exploitable.
duckdb-async
Advanced tools
[!WARNING] The original DuckDB <> Node.js bindings in https://github.com/duckdb/duckdb-node are deprecated in favor of the new and shiny
@duckdb/node-apipackage. Currently, the plan is to releaseduckdb-nodeas well asduckdb-asyncfor the last time for the DuckDB 1.4.x (~Fall 2025) series but not for the DuckDB 1.5.x series (~Early 2026) any more.
TypeScript wrappers using Promises for the duckdb Node.JS API
This repository provides an API that wraps the DuckDb NodeJS API using Promises
instead of callbacks.
The library is implemented in TypeScript to provide static type checking for TypeScript developers. It includes the existing duckdb
NPM module as a dependency, so it should be possible to write applications in TypeScript using only duckdb-async as a direct dependency.
Basic usage is straightforward. For example:
import { Database } from "duckdb-async";
async function simpleTest() {
const db = await Database.create(":memory:");
const rows = await db.all("select * from range(1,10)");
console.log(rows);
}
simpleTest();
Note that the static method Database.create(...) is used in place of new Database(...) in the DuckDb NodeJS API
because the underlying NodeJS API uses a callback in the constructor, and it's not possible to have constructors
return promises.
The API should be relatively complete -- there are wrappers for all of the Connection, Database and Statement
classes from the underlying NodeJS API, with methods that return promises instead of taking callbacks.
A notable exception is the each methods on these classes. The each method invokes a callback multiple times, once
for each row of the result set. Since promises can only be resolved once, it doesn't make sense to convert this
method to a promise-based API, so the each method still provides the same callback-based interface as the
original Node.JS API.
FAQs
Promise wrappers for DuckDb NodeJS API
The npm package duckdb-async receives a total of 59,988 weekly downloads. As such, duckdb-async popularity was classified as popular.
We found that duckdb-async demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Reachability analysis for PHP is now available in experimental, helping teams identify which vulnerabilities are actually exploitable.

Product
Export Socket alert data to your own cloud storage in JSON, CSV, or Parquet, with flexible snapshot or incremental delivery.

Research
/Security News
Bitwarden CLI 2026.4.0 was compromised in the Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline.