Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
lovefield-ts
Advanced tools
Lovefield Typescript port and modernization.
The port attempts to maintain API compatibility with original Lovefield. As a result, some parts may conflict with TypeScript best practice (e.g. interface name must start with capital I).
lib/base/lovefield_options.ts
. Users are supposed to define an object
following that interface and set options via the new API lf.options.set()
.
testing/debug_options.ts
.All namespaces are flattened. For example:
lf.Order
is flattened to Order
lf.schema.DataStoreType
is flattened to DataStoreType
Please note, in ES6 modules, we usually do
import * as lf from './node_modules/lovefield-ts/dist/es6/lf.js';
const order = lf.Order.DESC; // still prefixed by lf, ES6 module syntax
TypeScript users cannot refer column by name, use .col()
API.
const item = db.getSchema().table('Item');
// Use .col() API to refer to column here.
// TypeScript indexed property forces everything to be typed the same.
// This is a language limit and not much Lovefield authors can do here.
//
// item['orderDate'] <== this will cause type errors
// item.col('orderDate') <== this will give perfect type checking
return db.select().from(item).orderBy(item.col('orderDate')).exec();
The project is set to use modern Typescript (3.8+) and Mocha/Chai/Sinon/Karma as its test framework. Compilation/test speed has improved significantly.
npm install
node node_modules/guppy-cli/bin/index.js pre-commit
Lovefield-ts uses gulp 4, which is incompatible with gulp 3 that original Lovefield uses. If you had installed gulp globally as suggested in README of Lovefield, please run:
npm uninstall -g gulp
Run gulp
to see the commands.
Please note that certain tests are only runnable in Karma (e.g. IndexedDB related tests), and these tests will be named *_spec.ts.
lib
: Lovefield main library source codetesting
: Facility code used for testingtests
: Tests for Lovefield main libraryout
: Temporary directory used to store intermediate files from tool chaindist
: Generated dist filescoverage
: Code coverage reportFAQs
Lovefield-TS: a relational database in TypeScript
The npm package lovefield-ts receives a total of 39 weekly downloads. As such, lovefield-ts popularity was classified as not popular.
We found that lovefield-ts demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.