
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
A MongoDB adapter for GunJS.
gun-mongo
stores the each graph node (along with some metadata) in a document and uses the key as the Mongo '_id'. This makes gun-mongo
right for some application but not all.
If the following are true, then gun-mongo
could be right for you:
users
node with millions of children would be problematic). Most nodes are small to medium. Fair warning: If a node grows too large, it could overwhelm memory and cause crashes.Contrast this with gun-mongo-key
. Whereas gun-mongo-key
has the advantage for updates and enabling streaming of large nodes, gun-mongo
makes Node creation much more efficient.
yarn add gun-mongo
or npm install gun-mongo
.
const Gun = require('gun');
// Must be added after Gun but before instantiating Gun
require('gun-mongo');
// Instantiate Gun
const gun = new Gun({
file: false,
web: httpServer,
// The following are defaults. You can supply `true` to use all defaults, or overwrite the ones you choose
mongo: {
host: 'localhost',
port: '27017',
database: 'gun',
collection: 'gun-mongo',
query: ''
}
});
Tests run on a 2012 Macbook Pro, 2.5 GHz Intel Core i5, 16 GB RAM.
Small Nodes: 10 Properties Each
Medium Nodes: 1000 Properties Each
Issues welcome on Github.
Community contributions welcome. PRs accepted after code review.
FAQs
An Mongo adapter for Gunjs
The npm package gun-mongo receives a total of 2 weekly downloads. As such, gun-mongo popularity was classified as not popular.
We found that gun-mongo demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.