
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
Local SQL is a web based, local-first modern database browser. Visit localsql.dev, add connection and start browsing your tables.
[!IMPORTANT] This project is under heavy development, check TODO section for current progress. Some things can be broken, some are missing
local-sql instances together to manage all your databases from a single interface. This is perfect for accessing databases in isolated environments without exposing them publicly.read or write access token to secure public instances of Local-SQL.Try out Local SQL online dashboard or run app locally:
# Bun.js
bunx --bun local-sql@latest
# pnpm
pnpm dlx local-sql@latest
# Node.js
npx local-sql@latest
-V, --version output the version number-p, --port <number> specify the app port number--no-ui run API only (no web UI)--no-api run web UI only (no API)--verbose enable detailed logs-h, --help display help for commandLocal SQL (API) is also available as a Docker image on:
ghcr.io/martiinii/local-sql:latestmartiinii/local-sql:latestUse Docker compose to run:
services:
local-sql:
image: ghcr.io/martiinii/local-sql:latest
container_name: local-sql
restart: unless-stopped
# --- Security best-practice
# 1. Start the container WITHOUT REQUIRE_TOKEN to initialize.
# 2. Visit https://localsql.dev or start local-sql locally, connect to this instance of local-sql API and generate write token. Then edit server connection and paste generated token.
# 3. Uncomment the block below to enforce token authentication:
# environment:
# REQUIRE_TOKEN: "true"
# 4. Restart the container; all connections will now require your token.
volumes:
- lsql:/app/db
ports:
- "57597:57597"
volumes:
lsql:
And a huge thank you to the creators of the many other open-source dependencies that make this project possible.
local-sql package namedrizzle-studio was my source of inspiration for local-sqlFAQs
Manage PostgreSQL databases locally
We found that local-sql demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.