
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
A domain specific language that extends SQL and allows visual metaprogramming
TQL is a small language that extends SQL and integrates with ng-sql-parser and query-wizard (that will still be open-sourced). The language has support to a small set of type-inference of literal types and a small type-checker. It receives TQL, processes it by GUI and generates valid SQL as output. Please note that this repository contains only the grammar definitions and the source for TQL, not the integration per se (at least not for now). TQL was built to make easy the integration between the front-end user and TOTVS Protheus ERP.
TQL has a small type-system and an inference model. It is able to deduce the type of every expression placed (all expressions are literals). All type declarations are optional.
Declare Val: Int
Declare Name: VarChar
Declare When: Date
Declare Age: Nat
Declare Trigger: Bool
Declare Table: Symbol
Declare Id: Char(32)
Declare Limit: Range(10, 100)
Declare Price: Double
Use := to create default values, such as:
Declare Age: Nat := 18
Pictures are made to tell how to display the data (on Protheus and on Query Wizard).
Declare Price: Double Picture '99.99' := 13.87
Range types allow you to restrict data in ranges
Declare Age: Range(18, 60) := 10
Declare CPF: Char(11)
You can use formats like:
Declare BirthDay := 4 Dec 1996
Declare EventTime := 7 Nov 2016 13:45
Specify information about the field within { and }.
Declare Age: Nat Picture '99' := 18 { The user age to search }
yarn add ng-tqlnpm install ng-tqlUsing Yarn:
yarn
yarn compile
yarn test
Using npm:
npm install
npm run compile
npm test
import { parse } from 'ng-tql';
try {
console.log(parse('Declare Age: Nat := 18'));
} catch (e) {
console.log(e);
}
TQL is written with PegJS by Marcelo Camargo and open-source under MIT License.
FAQs
A domain specific language that extends SQL and allows visual metaprogramming
The npm package ng-tql receives a total of 2 weekly downloads. As such, ng-tql popularity was classified as not popular.
We found that ng-tql demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.