Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
fauna-pulumi-provider
Advanced tools
Experimental FaunaDB Dynamic Provider for Pulumi. The goal of this library is to provide a simple way to provision and maintain resources in FaunaDB, using Typescript/Javascript, with Pulumi.
First, you need to install the Pulumi CLI in your system. This CLI will be needed to create any resources. Please refer to this link.
You can install this library using npm:
npm install faunadb-pulumi-provider
After installation, you will need to configure access to FaunaDB using an access token.
Note: As currently this project only supports the creation of Collections and Indexes, you will require a Server Access Key. As more features are implemented you may need to use an Admin Key to configure roles.
This library will look for the key in the environment variable FAUNA_KEY
. Once Pulumi starts supporting stack configurations in dynamic providers, this library will fallback to a key in the stack configuration.
Collections:
import { Collection, query as q } from 'faunadb-pulumi-provider'
const collection = new Collection('myCollection', {
// All fields optional
name: 'myCollection', // inferred from logical name if missing
history_days: 30,
ttl_days: null,
data: {
description: 'This is an arbitrary object'
}
})
export const collectionName = collection.name
export const collectionTs = collection.ts
export const collectionHistoryDays = collection.history_days
export const collectionTtlDays = collection.ttl_days
Indexes:
import { Index } from 'faunadb-pulumi-provider'
const index = new Index('myIndex', {
// Required
source: myCollection.name
// Optional
name: 'my-index' // inferred from logical name if missing
terms: [
{
binding: 'my-binding-name'
},
// And / Or
{
field: ['data', 'my-field']
}
],
values: [
{
binding: 'my-binding-name'
},
// And / Or
{
field: ['data', 'my-field']
}
],
unique: true, // Defaults to false
serialized: false, // Defaults to true
data: {
description: 'This is an arbitrary object'
}
})
export const indexTs = index.ts
export const indexPartitions = index.partitions
source
is the only field to significantly deviate from faunadb. Since wrapping names into Ref
s are trivial, this library has opted to use names instead. So source
will take
{
source: 'name-string'
}
// Or
import { query as q } from 'faunadb-pulumi-provider'
{
source: [
{
collection: 'collection-name',
// and optionally
fields: {
binding1: q.Query(
q.Lambda(
...
)
)
binding2: ...
}
}
]
}
FAQs
Experimental Pulumi dynamic provider for FaunaDB
The npm package fauna-pulumi-provider receives a total of 1 weekly downloads. As such, fauna-pulumi-provider popularity was classified as not popular.
We found that fauna-pulumi-provider demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.