Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
A lightweight, dependency free, in memory storage, json document based database.
A Typescript first, JSON Document based, dependency free minimal Database.
Fløtsam is intended to be used for projects that do not require a database that can handle millions of lines, rows, columns or documents, like personal projects, quick prototyping or internal tools. It features an expressive way to query for Documents inside the Database, with the ability to take, skip, limit and order the query results. Documents are stored locally on disk and can be encrypted to ensure no unauthorized access. To increase I/O performance, all Documents are stored in memory.
Install Fløtsam via npm or yarn:
npm install flotsamjs
#or
yarn add flotsamjs
This will install Fløtsam as a dependency into your project and create the necessary entry in your package.json
file.
Setting up a initial instance of Fløtsam
is quick and requires no configuration beyond a initial root directory, where the physical JSON files will be stored. For a more in depth guide on how to use Fløtsam, take a look at the full documentation
Start by importing the Database into your Javascript or Typescript file. You are free to use module
or import
syntax, Fløtsam provides export for both standards. To make tree-shaking easier for bundlers, Fløtsam also provides submodule exports.
// Import the Flotsam class from the /db submodule of the library
import { Flotsam } from 'flotsam/db';
// or
import { Flotsam } from 'flotsam';
// or
const { Flotsam } = require('flotsam/db');
// or
const { Flotsam } = require('flotsam');
Depending on your Node
, Typescript
or preferred JavaScript
version, you might want to use a specific way to import / require the library files.
After importing the class, an instance is created that will represent the Database during the whole time of it's operation. There is no need to create multiple instances, and might even decrease performance or lead to sync issues.
Note: The examples below assume you're using a Node version that supports top level async / await.
import { Flotsam } from 'flotsam/db';
// create the Fløtsam instance and configure it
const db = new Flotsam({
root: '.store', // path to the directory to store the JSON Documents
});
// connect to the Database instance. If the storage directory
// does not yet exist, it will be created in this step.
await db.connect();
A Collection is a subdivision of the Database instance, that holds a certain type of Documents. If you are using Typescript, the Collection can be strongly typed to ensure type safety on all operations. The Collection will hold all Documents that are related to it's namespace in it's cache. Collections also operate in isolation.
import { Flotsam } from 'flotsam/db';
const db = new Flotsam({ root: '.store' });
await db.connect();
// create the collection under a 'jetsam' namespace
// this will create the physical directory, if it does not yet exist
const collection = await db.collect<{ description: string }>('jetsam');
Fløtsam uses an expressive FindOptions
mechanism to identify Documents while performing operations. These FindOptions
are standard JavaScript descriptions of the properties contained in a Document to operate on.
import { Flotsam } from 'flotsam/db';
const db = new Flotsam({ root: '.store' });
await db.connect();
// creating a custom schema to ensure type safety
// during operations
type Jetsam = {
description: string;
weight: number;
};
const jetsam = await db.collect<Jetsam>('jetsam');
// Insert a Document into the Collection
const inserted = await jetsam.insertOne({ description: '...', weight: 3.14 });
// Update the Document based of the inserted Document's Id
const updated = await jetsam.updateOneById(inserted.id, { weight: 2.71 });
// Find a Document by a certain property
const found = await jetsam.findOneBy({ weight: 2.71 });
// Delete a Document by it's Id
const deleted = await jetsam.deleteOneById(found.id);
// after finishing the CRUD operations, disconnect from the Database
await db.close();
While using Find Options is powerful, Evaluators make these Find Options even more powerful by providing functions that help evaluate the values of a record for something matching your search criteria.
Read more about Evaluator Functions
import { Flotsam } from 'flotsam/db';
import { Like, GreaterThan } from 'flotsam/evaluators';
const db = new Flotsam({ root: '.store' });
await db.connect();
type Jetsam = {
description: string;
weight: number;
};
const jetsam = await db.collect<Jetsam>('jetsam');
const item = await jetsam.findOne({
where: {
// The `Like` evaluator will match any string that
// contains the supplied argument
description: Like('floating'),
// The `GreaterThan` evaluator will match any number
// that is greater than the supplied argument
weight: GreaterThan(10),
},
});
await db.close();
A Collection can receive a second optional argument to work as a Schema Validator. This will allow a more granular validation instead of strongly typing the collection, and will also ensure runtime validation of inserts and updates.
Read more about Schema Validation
import { Flotsam } from 'flotsam/db';
import { NotNull, IsText, IsInt } from 'flotsam/validators';
const db = new Flotsam({ root: '.store' });
await db.connect();
type Jetsam = {
description: string;
weight: number;
};
// Add Schema Validation to the collection for more granular
// validation and runtime checks when inserting or updating.
const jetsam = await db.collect<Jetsam>('jetsam', {
validate: {
description: [NotNull, IsText({ min: 200 })],
weight: [NotNull, IsInt({ min: 10 })],
},
});
await db.close();
If you would like to contribute, take a look at the Contribution Guide. Contributors of any skill level are appreciated, if you have any questions, feel free to reach out.
Fløtsam is licensed under the MIT License
FAQs
A lightweight, dependency free, in memory storage, json document based database.
We found that flotsamjs demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.