
Security News
Next.js Patches Critical Middleware Vulnerability (CVE-2025-29927)
Next.js has patched a critical vulnerability (CVE-2025-29927) that allowed attackers to bypass middleware-based authorization checks in self-hosted apps.
NHibernate-style hi/lo ID generator for node.js
node-hilo exports a factory function that takes a configuration object:
/*
The configuration argument can contain the following:
{
hilo: {
maxLo: 10 // an integer value for maxLo
},
// sql is a config object that seriate would understand
sql: {
user: "you_me_anyone",
password: "superseekret",
server: "some.server.com",
database: "meh_databass"
}
}
*/
var hilo = require( "node-hilo" )( configuration );
node-hilo exports three module members: a nextId
method, a nextIds
method and a read-only property called hival
. You will likely never need to care about the hival
value - it's there for diagnostics and testing. The nextId
method returns a promise, with the newly generated ID being passed to the success callback:
const id = await hilo.nextId();
// block of 100 ids
const ids = await hilo.nextIds( 100 )
JavaScript doesn't natively support 64 bit integers - we're using a helper lib (big-integer) to allow us to properly represent them. Because of this, the generated IDs are passed back as strings (even though they're long
values). You will need to ensure your DB server converts/casts them to long
(which SQL will normally implicitly do for you).
If you'd like to learn more about the hi/lo algorithm:
If you plan to run the integration tests, you will need access to an MS SQL server. Create a test database that can be used (the integration tests create two tables), and save a configuration file called intTestDbCfg.json
under the spec/integration
folder. Your configuration file will look similar to this:
{
"sql": {
"user": "dbuser",
"password": "dbuserpwd",
"server": "localhost",
"database": "nhutil"
},
"hilo": {
"maxLo": 100
},
"test" : {
"recordsToCreate" : 15000,
"startingHiVal" : "314159265"
}
}
3.0.1
FAQs
NHibernate-style hi/lo ID generator for node.js & SQL Server
The npm package node-hilo receives a total of 45 weekly downloads. As such, node-hilo popularity was classified as not popular.
We found that node-hilo demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Next.js has patched a critical vulnerability (CVE-2025-29927) that allowed attackers to bypass middleware-based authorization checks in self-hosted apps.
Security News
A survey of 500 cybersecurity pros reveals high pay isn't enough—lack of growth and flexibility is driving attrition and risking organizational security.
Product
Socket, the leader in open source security, is now available on Google Cloud Marketplace for simplified procurement and enhanced protection against supply chain attacks.