
Research
Using Trusted Protocols Against You: Gmail as a C2 Mechanism
Socket uncovers malicious packages on PyPI using Gmail's SMTP protocol for command and control (C2) to exfiltrate data and execute commands.
duckdb-async
Advanced tools
Supply Chain Security
Vulnerability
Quality
Maintenance
License
TypeScript wrappers using Promises for the duckdb Node.JS API
This repository provides an API that wraps the DuckDb NodeJS API using Promises
instead of callbacks.
The library is implemented in TypeScript to provide static type checking for TypeScript developers. It includes the existing duckdb
NPM module as a dependency, so it should be possible to write applications in TypeScript using only duckdb-async
as a direct dependency.
Basic usage is straightforward. For example:
import { Database } from "duckdb-async";
async function simpleTest() {
const db = await Database.create(":memory:");
const rows = await db.all("select * from range(1,10)");
console.log(rows);
}
simpleTest();
Note that the static method Database.create(...)
is used in place of new Database(...)
in the DuckDb NodeJS API
because the underlying NodeJS API uses a callback in the constructor, and it's not possible to have constructors
return promises.
The API should be relatively complete -- there are wrappers for all of the Connection
, Database
and Statement
classes from the underlying NodeJS API, with methods that return promises instead of taking callbacks.
A notable exception is the each
methods on these classes. The each
method invokes a callback multiple times, once
for each row of the result set. Since promises can only be resolved once, it doesn't make sense to convert this
method to a promise-based API, so the each
method still provides the same callback-based interface as the
original Node.JS API.
FAQs
Promise wrappers for DuckDb NodeJS API
We found that duckdb-async demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious packages on PyPI using Gmail's SMTP protocol for command and control (C2) to exfiltrate data and execute commands.
Product
We redesigned Socket's first logged-in page to display rich and insightful visualizations about your repositories protected against supply chain threats.
Product
Automatically fix and test dependency updates with socket fix—a new CLI tool that turns CVE alerts into safe, automated upgrades.