
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
NoSQL local file storage with constraints -- unique keys, null check and indexing, akin to SQLite, with API similar to liteorm
NoSQL local file storage with constraints -- unique keys, null check and indexing, akin to SQLite, with API similar to liteorm. Powered by TypeScript decorators and interface. Also with async event-emitter, thanks to emittery.
Can save as BSON with BsonAdapter.
Filtering and mapping with objects (in find, update, delete) is possible, thanks to lodash.
If you need typings, you can also enforce constraints.
import { Db } from "nocon-db";
(async () => {
const db = new Db("foo.nocon");
await db.load();
const col = db.collection<any>("bar");
await col.insert({a: 1, b: new Date()});
console.log(await col.find({a: 1}));
})();
You can even define Schema and unique keys. In this case, you will need to use Class decorators.
import { Db, prop, Table, BsonAdapter } from "nocon-db";
@Table()
class UniqueA {
@prop({unique: true}) a!: string;
b!: Date;
}
(async () => {
let db = new Db("test.nocon", new BsonAdapter());
await db.load();
const col = db.collection(new UniqueA());
await col.insert({a: "any", b: new Date()});
console.log(await col.find());
await db.close();
db = new Db("test.nocon", new BsonAdapter());
await db.load();
const col = db.collection(new UniqueA());
await col.insert({a: "any", b: new Date()}); // Error
})();
FAQs
NoSQL local file storage with constraints -- unique keys, null check and indexing, akin to SQLite, with API similar to liteorm
We found that nocon-db demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.