Socket
Book a DemoInstallSign in
Socket

green_dot

Package Overview
Dependencies
Maintainers
1
Versions
99
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

green_dot

A powerful TypeScript nodeJs framework for building DX friendly, secure and type-safe backend services with MongoDB integration

0.0.88
latest
Source
npmnpm
Version published
Weekly downloads
13
-48%
Maintainers
1
Weekly downloads
Ā 
Created
Source

🟢 green_dot

A powerful TypeScript nodeJs framework for building DX friendly, secure and front-end / back-end type-safe backend services with MongoDB integration (other DBs coming soon) and SDK generation

GitHub Repository

Official Documentation QuickStart Guide

Features

🧭 Back/Front Type-safe API route declarations, shared models
šŸ“ Secure model definitions with validation and routes exposed automatically via configuration
🪪 Built-in DX friendly unified security and access control
šŸ”Œ Powerful plugin system with Managed Login, ApiKey Login, and Secure Authentication (2FA, biometric authentication and pinCode) (BETA) šŸŖ„ File generation from templates to generate project, database, app, model...so you get up and running in no time šŸ—ƒļø MongoDB integration with type safety (others database drivers to come)
šŸ‘Øā€šŸ’» DX and intellisense friendly
šŸ—ļø Generate it's own SDK to use in frontend, get your backend data without await or useEffect: (Eg: const result = $.useQuery.myApiRoute())
⚔ Fully cached in frontend via TanStack Query
šŸ“¦ VSCode / Cursor Plugin

Quick Start

  • Generate a project with npx green_dot generate in a blank folder
  • Generate your first model with npx green_dot generate => and choose 'Model'
  • Configure model security in the .dao.ts generated file
  • Generate your first service (api route) with npx green_dot generate => and choose 'Service'

IDE Integration

  • Hover any green_dot props or function to see the documentation in your IDE
  • Type gd_ in any ts file to see all green_dot snippets to use to improve productivity
  • Install VSCode / Cursor extension from the IDE extension tab or by downloading it here

File Structure

šŸ“ app/
ā”œā”€ā”€ šŸ“ myDb1/                    # Each DB as its own folder 
│   ā”œā”€ā”€ šŸ“ models/              
│   │   ā”œā”€ā”€ [modelName].dao.ts   # Security config for the model
│   │   └── [modelName].model.ts # Model definition file
│   └── āš™ļø gd.db.config.ts       # DB config file specific to this database
ā”œā”€ā”€ šŸ“ myDb2/                    
│
ā”œā”€ā”€ šŸ“ myApp1/                   # Each APP as its own folder 
│   ā”œā”€ā”€ šŸ“ myModule1/            # A custom module; structure is flexible
│   │   ā”œā”€ā”€ myModule.testFlow.ts # api tests for your module
│   │   └── myModule1.svc.ts     # API route definition for the module
│   ā”œā”€ā”€ āš™ļø gd.apiTests.config.ts # Config file for automated API tests (BETA)
│   └── āš™ļø gd.app.config.ts      # App config file specific to this application
ā”œā”€ā”€ šŸ“ myApp2/                   
│
└── āš™ļø gd.config.ts              # Global config (all roles, permissions, etc.)

Note: you can create mutiple app and dbs with the npx green_dot generate command






Helpers

  • getMainConfig() => get your main config where yuo set allRoles, allPermissions
  • getActiveAppConfig(), getActiveDbConfig() => get respective actual db/app config

API Service example

  • run npx green_dot generate and select > Api Service
export const checkUserExists = svc({
    // Access level
    for: ['customRole', { role; 'user', hasValidatedEmail: true }],
    // Type-safe input validation
    input: {
        email: _.email().required(),
        user: _.model('myDbName', 'user'), // ref to app models
    },
    // Type-safe output
    output: _.boolean(),
    // optional security features
    rateLimiter: '10/min',
    ...
    async main(ctx, { email }) {
        const nbUsers = await db.user.count(ctx.GM, { email })
        return !!nbUsers
    },
})

Api Service Features

  • Everything is typed / Autocomplete friendly
  • Nothing else to do, route is declared automatically based on the name of the exported constant
  • Fine tuning on security features (roles, permissions...)
  • Route will be available in frontend via the generated SDK (const userExists = $.checkUserExists() // type boolean)
  • A Swagger documentation will be generated for the route

See documentation (will come soon) for more details.

Model and DB Security

To create an api service:

  • run npx green_dot generate and select > Database Model
  • this will generate ./myModel.model.ts and ./myModel.dao.ts files for declaring model and DAO (data access object, a security configuration for your model)

Models

const model = _.mongoModel(
  // Automatic timestamp fields
  ['creationDate', 'updateDate'], 
  {
      name: _.string().required(),
      admin: _.ref('user').required(),
      companyIdenfier: _.string().required().unique(),
      address: {
          street: _.string().required(),
          zipCode: _.string().required(),
          city: _.string().required(),
          country: _.string().required(),
      },
})

DAO (Data Access Object)

Configure data access with security and type safety:

// user.dao.ts
const dao = {
    type: 'mongo',
    // The expose config will automatically create routes for given
    // permissions and config
    expose: [{
        // Here user and admin both can update or getOne for your model
        for: ['user', 'admin'],
        expose: ['getOne', 'update'],
    }, {
        // Here only admin can getAll
        for: ['admin'],
        expose: ['getAll'],
    }],
    // Filter is another powerful security feature, it allow to add filter
    // depending on the connected user
    filter: [{
        on: ['read', 'write'], // for all methods
        for: 'ALL', // for all perms
        filter: (ctx, filter) => {
            if (ctx.role === 'admin') return
            // if !admin we constrain the filter to be the userId
            // so we make sure the user can only acess his own user!
            else filter._id = ctx._id
        }
    }],
    // Mask allow to mask fields of a model depending on user permissions 
    // and methods (read, update, create...)
    mask: [{
        on: ['read'],
        // for everyone, we mask password field on read
        mask: () => ({
            password: true,
        }),
    }, {
        // only admin can see user.stats
        on: ['read'],
        notFor: 'admin',
        mask: () => ({
            stats: true
        }),
    }],
    populate: [
        // we can always populate a field if needed
        'company',
    ],
}

Contributing to green_dot repo

Contributions are welcome!

License

MIT License

Keywords

typescript

FAQs

Package last updated on 07 Aug 2025

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts

SocketSocket SOC 2 Logo

Product

About

Packages

Stay in touch

Get open source security insights delivered straight into your inbox.

  • Terms
  • Privacy
  • Security

Made with āš”ļø by Socket Inc

U.S. Patent No. 12,346,443 & 12,314,394. Other pending.