Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Liber
makes using CouchDB not only easier to build but also shemaless. It is built on nano and inspired by AngularJS-Resource.
Principles:
Liber
is nothing but a extended api for nano so for using it you also need the latter - it's good to have anyways working with CouchDB:
npm install liber nano
to set libre up
var nano = require('nano')('http://localhost:5984/mydatabase');
var Liber = require('liber')(db); //alias for document
now... live a simpler life
Liber.getOne('bobs_id', function (err, bob) {
bob.age++;
bob.save(function (err, newBob) {
//newBob == bob;
});
});
##Inheritance
<!-- //Liber.inherit(Constructor, prototype, options); where Liber already has a pointer to database. -->
function User(data) {
this.superClass.call(this, data); // needed to give more flexibility
// to construction process
this.kind = 'user';
this.fullName = this.lastName + ', ' + this.firstName;
}
User = Liber.inherit(User, {
changePassword: function () { ... }
}, {
'byLastName': ['designDoc', 'viewName']
});
User.get('anId', cb);
/*
get by id
Note: Liber doesn't validate the kind or type so you could
fetch an User from any other Liber class.
*/
User.getByLastName('Smith', cb);
// get user from an generated view getter. Result is an array.
User.getOneByLastName('Smith', cb);
// same as the last one but result is User object.
##API: Class methods
###Libre.inherit ###Libre.parse ###Libre.get ###Libre.getOne ###Libre.getFromView ###Libre.getOneFromView
##API: Instance methods
###Doc.save ###Doc.insert ###Doc.destroy
FAQs
Shemaless ORMlike library for CouchDB
The npm package liber receives a total of 1 weekly downloads. As such, liber popularity was classified as not popular.
We found that liber demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.