
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
node-mini-migrations
Advanced tools
A very small, lightweight and flexible migrations library unconcerned with what database you use
A really simple node migrations library that is completely independant of any database or file system.
npm install --save node-mini-migrations
const sqlite = require('sqlite-fp');
const righto = require('righto');
function migrator (db) {
return {
init: (direction, callback) => {
sqlite.run(db, 'CREATE TABLE IF NOT EXISTS _migrations (file TEXT PRIMARY KEY);', callback);
},
getMigrationState: (id, callback) => {
sqlite.get(db, 'SELECT file FROM _migrations WHERE file = ?', [id], (error, result) => {
callback(error, (result && result.length > 0));
});
},
setMigrationUp: (id, callback) => {
sqlite.run(db, 'INSERT INTO _migrations (file) VALUES (?)', [id], callback);
},
setMigrationDown: (id, callback) => {
sqlite.run(db, 'DELETE FROM _migrations WHERE file = ?', [id], callback);
},
handler: (fn, callback) => fn(db, callback)
};
};
const db = righto(sqlite.connect, './test.sqlite');
const driver = righto.sync(migrator, db);
const migrations = getMigrationsFromDirectory('./test/migrations');
const migrated = righto(up, driver, migrations);
migrated(callback)
module.exports = {
up: db => {
return db.exec('CREATE TABLE test_table (test TEXT)')
},
down: db => {
return db.exec('DROP TABLE test_table')
}
}
This project is licensed under the terms of the MIT license.
FAQs
A very small, lightweight and flexible migrations library unconcerned with what database you use
The npm package node-mini-migrations receives a total of 9 weekly downloads. As such, node-mini-migrations popularity was classified as not popular.
We found that node-mini-migrations demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.