Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
node-red-contrib-connectionmanager
Advanced tools
Node-RED implements generalised connections manager.
Node-Red generalized connection manager to allow connection pooling and UOW (unit of work) over multiple nodes. Maximizes asynchronous processing which is dependent on driver provider. Some drivers allow for more asynchronous processing. Tries to enable a common framework for connections which includes common pooling and minimization of variance in language implementations. For example for SQL alignment with ISO standard. Should help minimize swap between technologies. Other languages will be evolved as developed.
Currently handles following connection types:
and has been built in a way to readily add more types. Very quick if driver base aligns with deployed type.
Simple example for neo4j connection
Results in msg. Note, example is results for neoj4. For relational connections results standardized. In future, will give option of standardised form versus "as per software provider".
Configurations nodes that can be accessed via get connection.
Get a connection for a message and adds to the message as a property. A message can have many connections. Connection is used by all subsequent statement nodes.
Releases all connections from a message and frees connections to be used by new messages. Message can be committed or rolled back to checkpoint, All statements executed from get connection can be formed as part of UOW.
The statement will be executed against connection associated with the message. This can be minimized to only one of the connections by detailing the connection name. Mustache template for statements per message or once at node start. Message has access to msg. values along with node. values. This allows some tailoring of statement to cope with variances in DBMS. Result can be converted into the one form being array of rows and columns with data aggregated if more than one connection used.
This node takes in actions specified by the topic. Valid actions:
In future will be used as a means of dynamically changes certain properties such as pool size.
Generate the secure-connect zip file from DataStax and update options file as follows:
Run the following command in the root directory of your Node-RED install
npm install node-red-contrib-connectionmanager
Test/example flow in test/generalTest.json
Note The examples will require the drivers to be installed
0.1.4 Bug fix for bug fix
0.1.3 Bug fix node-red depreciated features on nodes-started, added initial test connection test, timeout for postgresql rather than wait indefinitely
0.1.1 Bug fix commits DataStax and Cassandra as concept doesn't exist
0.1.0 Add DataStax and Cassandra. Include drivers rather than separate install. Add limited mustache on statements. Performance metrics.
0.0.7 Use new feature in postgresql to return columns as array
0.0.6 fix bug with postgresql when parameters > 9.
0.0.4 fix bug on statement.
0.0.3 fix bug with error handling and arrays. Add pg in to package dependencies. More debug details.
0.0.2 get rid of monetdb warning. Add in access to flow.get env.get, global.get
0.0.1 base
FAQs
Node-RED implements generalised connections manager.
The npm package node-red-contrib-connectionmanager receives a total of 17 weekly downloads. As such, node-red-contrib-connectionmanager popularity was classified as not popular.
We found that node-red-contrib-connectionmanager demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.