Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
mongoose-glue
Advanced tools
Mongoose is one of the best ODMs for MongoDB. Mongoose provides a straight-forward, schema-based solution to modeling your application data and includes built-in type casting, validation, query building, business logic hooks and more, out of the box.
Mongoose
does not require a specific structure of your project files. This is great but it always rises a common question on how to use a library within a project in a proper way. We do not want to manually figure the right way on how to split the code into multiple files every time we start a new Mongoose project. Things can be quite complicated especially when dealing with multiple database instances.
Mongoose-glue
optimizes your code and brings the following features into your NodeJS project:
Install the npm package.
npm install mongoose-glue --save
Let's first configure project's database connections. By default the module will try to read the config/mongoose.js
configuration file so let's create one. The file content should look like the example bellow.
// config/mongoose.js
module.exports = {
default: {
'mongo1': {
uris: 'mongodb://user:secret@hostname:port/database',
options: {}
},
'mongo2': {
uris: 'mongodb://user:secret@hostname:port/database',
options: {}
}
},
production: {}
};
The next step is to define models. The module will load files found at app/models
. Let's create two models for mongo1
database.
// app/models/animal.js (mongoose model)
module.exports = {
connection: 'mongo1',
attributes: {
name: 'string'
},
classMethods: {},
instanceMethods: {},
plugins: [],
middleware: {},
options: {}
};
// app/models/bird.js (mongoose discriminator of animal)
module.exports = {
connection: 'mongo1',
extends: 'animal'
};
Now we only have to load and connect database connections and models together to make it work. The best place to do this is inside your project's main file (e.g. index.js
).
// index.js
var _ = require('mongoose-glue');
_.connect();
The module can be configured by sending options to the _.connect
method. See the list of available options bellow.
_.connect({
// Path to a file where database connections are defined.
configPath: 'new/file/path.js',
// Path to a directory with models files.
modelsPath: 'new/directory/path',
// Custom logger function (set to `false` by default).
logger: console.log
});
Type: Function
Connects to all databases/clusters defined inside mongoose.js
and loads models.
var _ = require('mongoose-glue');
_.connect({
logger: console.log
});
Type: Function
Disconnects from all databases/clusters and unloads models.
Type: Function
Returns: Object
Returns a database/cluster instance of the name
connection.
var _ = require('mongoose-glue');
var conn = _.connection('mongo1');
Type: Function
Returns: Object
Returns a model instance defined inside name
file.
var _ = require('mongoose-glue');
var Bird = _.model('bird');
Bird.create({ name: "Fluppy" }, function(err, data) {
console.log('Mongoose Fluppy bird created.');
});
Type: Function
Returns: Object
Returns a configured gridfs-stream
instance for the name
connection.
var _ = require('mongoose-glue');
var gfs = _.gfs('mongo1');
Type: Object
Direct access to mongoose model.
var _ = require('mongoose-glue');
var ObjectId = _.mongoose.Schema.Types.ObjectId;
var validId = _.mongoose.mongo.ObjectID.isValid('xxx');
// -> false
Use models anywhere in your app.
var _ = require('mongoose-glue');
var Bird = _.model('bird');
Bird.create({ name: "Fluppy" }, function(err, data) {
console.log('Mongoose Fluppy bird created.');
});
Store your files inside your MongoDB database.
var fs = require('fs');
var gfs = require('mongoose-glue').gfs('mongo1');
// read file on local disk, save into mongodb
fs.createReadStream('./tmp/myfile.txt').pipe( gfs.createWriteStream({ filename: 'myfile.txt' }) );
// read file stored inside mongodb, save to local disk
gfs.createReadStream({ filename: 'myfile.txt' }).pipe( fs.createWriteStream('./tmp/myfile.txt') );
FAQs
Mongoose.js with structure.
The npm package mongoose-glue receives a total of 10 weekly downloads. As such, mongoose-glue popularity was classified as not popular.
We found that mongoose-glue demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.