
Security News
The Next Open Source Security Race: Triage at Machine Speed
Claude Opus 4.6 has uncovered more than 500 open source vulnerabilities, raising new considerations for disclosure, triage, and patching at scale.
duckdb-async
Advanced tools
[!WARNING] The original DuckDB <> Node.js bindings in https://github.com/duckdb/duckdb-node are deprecated in favor of the new and shiny
@duckdb/node-apipackage. Currently, the plan is to releaseduckdb-nodeas well asduckdb-asyncfor the last time for the DuckDB 1.4.x (~Fall 2025) series but not for the DuckDB 1.5.x series (~Early 2026) any more.
TypeScript wrappers using Promises for the duckdb Node.JS API
This repository provides an API that wraps the DuckDb NodeJS API using Promises
instead of callbacks.
The library is implemented in TypeScript to provide static type checking for TypeScript developers. It includes the existing duckdb
NPM module as a dependency, so it should be possible to write applications in TypeScript using only duckdb-async as a direct dependency.
Basic usage is straightforward. For example:
import { Database } from "duckdb-async";
async function simpleTest() {
const db = await Database.create(":memory:");
const rows = await db.all("select * from range(1,10)");
console.log(rows);
}
simpleTest();
Note that the static method Database.create(...) is used in place of new Database(...) in the DuckDb NodeJS API
because the underlying NodeJS API uses a callback in the constructor, and it's not possible to have constructors
return promises.
The API should be relatively complete -- there are wrappers for all of the Connection, Database and Statement
classes from the underlying NodeJS API, with methods that return promises instead of taking callbacks.
A notable exception is the each methods on these classes. The each method invokes a callback multiple times, once
for each row of the result set. Since promises can only be resolved once, it doesn't make sense to convert this
method to a promise-based API, so the each method still provides the same callback-based interface as the
original Node.JS API.
FAQs
Promise wrappers for DuckDb NodeJS API
The npm package duckdb-async receives a total of 44,669 weekly downloads. As such, duckdb-async popularity was classified as popular.
We found that duckdb-async demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Claude Opus 4.6 has uncovered more than 500 open source vulnerabilities, raising new considerations for disclosure, triage, and patching at scale.

Research
/Security News
Malicious dYdX client packages were published to npm and PyPI after a maintainer compromise, enabling wallet credential theft and remote code execution.

Security News
gem.coop is testing registry-level dependency cooldowns to limit exposure during the brief window when malicious gems are most likely to spread.