Security News
The Risks of Misguided Research in Supply Chain Security
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
Graffy is a Javascript library to power efficient and intuitive real-time APIs. It's built on a sound set-theoretic model of queries and graphs.
Graffy provides live queries, which give clients a real-time view of the data they need. Graffy supports complex queries with nested graph traversals and pagination, while exposing a simple and intuitive API for building clients and servers.
Graffy was inspired by (and borrows from) Facebook's GraphQL and Netflix's Falcor. Compared to GraphQL, Graffy offers a more familiar data model, true live queries and more efficient caching. Compared to Falcor, it provides cursor-based pagination and real-time subscriptions.
Unlike GraphQL resolvers and Falcor data providers, Graffy providers can be composed like Express/Koa middleware. This allows authentication, validation, custom caches and resource limiting to be implemented in a straightforward manner.
Graffy providers can also perform efficient bulk reads from underlying data stores (for example by constructing optimized SQL queries). This is particularly hard to do with GraphQL (see dataloader) and Falcor.
Graffy is under heavy development and not ready for production use.
Graffy | GraphQL | Falcor | Description | |
---|---|---|---|---|
Narrow queries | ✅ | ✅ | ✅ | Queries specify required fields; Allows API evolution |
Deep queries | ✅ | ✅ | ✅ | Queries can expand nested resources; Reduces round-trips |
Live queries | ✅ | ❌ | ❌ | Push changes to query results in real time |
Pagination cursors | ✅ | ✅ | ❌ | Enables efficient pagination on the server |
Parameters | ✅ | ✅ | ❌ | Custom filtering criteria, etc. |
Caching pages | ✅ | ❌ | ✅ | Cache result of paginated queries |
Atomic writes | ✅ | ❌ | ✅ | Writes that trigger accurate cache invalidation |
Non-data endpoints | ✅ | ✅ | ❌ | Mutations, subscriptions, cross-resource search |
FAQs
Meta package setting up the default Graffy configuration.
The npm package graffy receives a total of 28 weekly downloads. As such, graffy popularity was classified as not popular.
We found that graffy demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.