Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
node-red-contrib-connectionmanager
Advanced tools
Node-RED implements generalised connections manager.
Node-Red generalized connection manager to allow connection pooling and UOW (unit of work) over multiple nodes. Maximizes asynchronous processing which is dependent on driver provider. Some drivers allow for more asynchronous processing. Tries to enable a common framework for connections which includes common pooling and minimization of variance in language implementations. For example for SQL alignment with ISO standard. Should help minimize swap between technologies. Other languages will be evolved as developed.
Currently handles following connection types:
and has been built in a way to readily add more types. Very quick if driver base aligns with deployed type.
Simple example for neo4j connection
Results in msg. Note, example is results for neoj4. For relational connections results standardized. In future, will give option of standardised form versus "as per software provider".
Configurations nodes that can be accessed via get connection.
Get a connection for a message and adds to the message as a property. A message can have many connections. Connection is used by all subsequent statement nodes.
Releases all connections from a message and frees connections to be used by new messages. Message can be committed or rolled back to checkpoint, All statements executed from get connection can be formed as part of UOW.
The statement will be executed against connection associated with the message. This can be minimized to only one of the connections by detailing the connection name. Mustache template for statements per message or once at node start. Message has access to msg. values along with node. values. This allows some tailoring of statement to cope with variances in DBMS.
This node takes in actions specified by the topic. Valid actions:
In future will be used as a means of dynamically changes certain properties such as pool size.
Generate the secure-connect zip file from DataStax and update options file as follows:
Run the following command in the root directory of your Node-RED install
npm install node-red-contrib-connectionmanager
Test/example flow in test/generalTest.json
Note The examples will require the drivers to be installed
0.1.0 Add DataStax and Cassandra. Include drivers rather than separate install. Add limited mustache on statements. Performance metrics.
0.0.7 Use new feature in postgresql to return columns as array
0.0.6 fix bug with postgresql when parameters > 9.
0.0.4 fix bug on statement.
0.0.3 fix bug with error handling and arrays. Add pg in to package dependencies. More debug details.
0.0.2 get rid of monetdb warning. Add in access to flow.get env.get, global.get
0.0.1 base
FAQs
Node-RED implements generalised connections manager.
The npm package node-red-contrib-connectionmanager receives a total of 22 weekly downloads. As such, node-red-contrib-connectionmanager popularity was classified as not popular.
We found that node-red-contrib-connectionmanager demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.