
Security News
Node.js Drops Bug Bounty Rewards After Funding Dries Up
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.
node-red-contrib-mydb
Advanced tools
This package has been renamed! Please consider to upgrade to: '@open-kappa/node-red-contrib-mydb' This version is no longer maintained.
This package provides two node-red nodes:
At the moment only Postgres is supported, but maybe other DB's will be supported in the future.
node-red-contrib-mydb uses mustache to render queries templates. The node input is a message JSON object with the values to be substituted, e.g.:
msg = {
"tableName": "test"
}
In the node body, write the query tempalte, e.g.:
select * from {{msg.tableName}};
It is worth noting that the syntax with double curly brackets sanitizes the template parameters. If raw expansion is desired (namely "sql injection"), just uses triple curly brackets:
{{{msg.query}}}
This package can be used as a drop-in replacement of postgrestor, but:
set schema command followed by the actual
query.// Single query result:
"payload": {
"command": ...,
"rowCount": ...,
rows: [...],
...
}
// Multiple queries result:
"payload": [
{
"command": ...,
"rowCount": ...,
rows: [...],
...
},
{
"command": ...,
"rowCount": ...,
rows: [...],
...
},
...
]
This package has been initially designed as a drop-in replacement of other available nodes, more precisely postgrestor since it seems currently unmaintained. It also tries to solve some of postgrestor open issues.
We know that there are other Postgres nodes, but:
Therefore, we have decided to try to implement a node by ourselves.
Project homepage: hosted on GitLab Pages
Project sources: hosted on gitlab.com
node-red-contrib-mydb is released under the liberal MIT License. Please refer to the LICENSE.txt project file for further details.
All the stuff into this package as been created from scratch, with the following exceptions:
This node-red module has been sponsored by Gizero Energie s.r.l..
FAQs
Simple DB access node for node-red
We found that node-red-contrib-mydb demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.