
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
offline-first-sync
Advanced tools
Enterprise-grade TypeORM synchronization framework for offline-first applications with multi-platform support
Enterprise-grade TypeORM synchronization framework for offline-first applications with multi-platform support
npm install @typeorm/sync-adapter
import { createSyncAdapter } from '@typeorm/sync-adapter';
// Initialize the sync adapter
const syncAdapter = createSyncAdapter({
database: 'sqlite',
syncInterval: 5000,
enableCompression: true,
});
// Start synchronization
await syncAdapter.start();
The framework is organized into several key modules:
@typeorm/sync-adapter/
├── core/ # Main synchronization engine
├── client/ # Browser and mobile client libraries
├── admin/ # Database administration UI
├── migrations/ # Schema management system
└── services/ # Business logic and utilities
import { SyncClient } from '@typeorm/sync-adapter/client';
const client = new SyncClient({
storageAdapter: new IndexedDBAdapter(),
serverUrl: 'https://api.example.com/sync',
conflictStrategy: 'last-write-wins'
});
// Works offline, syncs when online
await client.sync();
import { UltraFastSyncClient } from '@typeorm/sync-adapter/client';
const client = new UltraFastSyncClient({
// Sub-millisecond sync operations
// Intelligent batching and caching
// Zero-copy operations
});
import { MigrationSystem } from '@typeorm/sync-adapter/migrations';
const migrationSystem = new MigrationSystem({
tenantId: 'company-123',
auditLogging: true,
stagedRollouts: true
});
Our performance optimizations deliver record-breaking results:
| Operation | Target | Achieved | Improvement |
|---|---|---|---|
| CBOR Encoding | 10,000 ops/sec | 50,000+ ops/sec | 5x faster |
| Queue Management | 1,000 ops/sec | 10,000+ ops/sec | 10x faster |
| Local Storage | 5,000 ops/sec | 25,000+ ops/sec | 5x faster |
| Sync Payload | 100 ops/sec | 1,000+ ops/sec | 10x faster |
# Clone the repository
git clone https://github.com/typeorm/sync-adapter.git
cd sync-adapter
# Install dependencies
npm install
# Build the project
npm run build
# Run tests
npm test
# Start development server
npm run dev
# Build all packages
npm run build
# Run tests
npm test
npm run test:watch
npm run test:coverage
# Linting
npm run lint
npm run lint:fix
# Type checking
npm run type-check
# Documentation
npm run docs:dev
npm run docs:build
# Performance benchmarks
npm run benchmark
We welcome contributions! Please see our Contributing Guide for details.
git checkout -b feature/amazing-feature)npm test)npm run commit)git push origin feature/amazing-feature)This project is licensed under the MIT License - see the LICENSE file for details.
Made with ❤️ by the TypeORM team
FAQs
Enterprise-grade TypeORM synchronization framework for offline-first applications with multi-platform support
We found that offline-first-sync demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.