
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
knex-migrate
Advanced tools
Modern migration toolkit for knex.js
npm install --save knex-migrate
First, init project with knex init
, add migrations with knex migrate:make
, and then:
Usage
$ knex-migrate <command> [options]
Commands
pending Lists all pending migrations
list Lists all executed migrations
up Performs all pending migrations
down Rollbacks last migration
rollback Rollbacks last batch of migrations
redo Rollbacks last batch and performs all migrations
Options for "up" and "down":
--to, -t Migrate upto (downto) specific version
--from, -f Start migration from specific version
--only, -o Migrate only specific version
As a convenience, you can skip --to flag, and just provide migration name.
Examples
$ knex-migrate up # migrate everytings
$ knex-migrate up 20160905 # migrate upto given migration name
$ knex-migrate up --to 20160905 # the same as above
$ knex-migrate up --only 201609085 # migrate up single migration
$ knex-migrate down --to 0 # rollback all migrations
$ knex-migrate down # rollback single migration
$ knex-migrate rollback # rollback previous "up"
$ knex-migrate redo # rollback and migrate everything
MIT
FAQs
Modern migration toolkit for knex.js
The npm package knex-migrate receives a total of 9,009 weekly downloads. As such, knex-migrate popularity was classified as popular.
We found that knex-migrate demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.