Research
Security News
Kill Switch Hidden in npm Packages Typosquatting Chalk and Chokidar
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
PEV2: A VueJS component to show a graphical vizualization of a PostgreSQL execution plan.
PEV2: A VueJS component to show a graphical vizualization of a PostgreSQL execution plan.
To use the explain vizualizer you can choose one of the following options:
This service is provided by Dalibo
and can help you to share your plans with
colleagues or customers.
PEV2 can be run locally without any external internet resource.
Simply download index.html, open it in your favorite internet browser.
<script src="https://unpkg.com/vue@3.2.45/dist/vue.global.prod.js"></script>
<script src="https://unpkg.com/pev2/dist/pev2.umd.js"></script>
<link
href="https://unpkg.com/bootstrap@5.3.2/dist/css/bootstrap.min.css"
rel="stylesheet"
/>
<link rel="stylesheet" href="https://unpkg.com/pev2/dist/style.css" />
<div id="app">
<pev2 :plan-source="plan" plan-query="" />
</div>
<script>
const { createApp } = Vue
const plan = "Seq Scan on foo (cost=0.00..155.00 rows=10000 width=4)"
const app = createApp({
data() {
return {
plan: plan,
}
},
})
app.component("pev2", pev2.Plan)
app.mount("#app")
</script>
PEV2 can be integrated as a component in a web application.
Install it:
npm install pev2
Declare the PEV2
component and use it:
import { Plan } from "pev2"
import "pev2/dist/style.css"
export default {
name: "PEV2 example",
components: {
pev2: Plan,
},
data() {
return {
plan: plan,
query: query,
}
},
}
Then add the PEV2
component to your template:
<div id="app">
<pev2 :plan-source="plan" :plan-query="query"></pev2>
</div>
PEV2
requires Bootstrap (CSS)
to work so don't forget to
add the following in you header (or load them with your favorite bundler).
<link
href="https://unpkg.com/bootstrap@5.3.2/dist/css/bootstrap.min.css"
rel="stylesheet"
/>
This project is a rewrite of the excellent Postgres Explain Visualizer (pev). Kudos go to Alex Tatiyants.
The pev project was initialy written in early 2016 but seems to be abandoned since then. There was no activity at all for more than 3 years and counting though there are several issues open and relevant pull requests pending.
FAQs
PEV2: A VueJS component to show a graphical vizualization of a PostgreSQL execution plan.
The npm package pev2 receives a total of 4,390 weekly downloads. As such, pev2 popularity was classified as popular.
We found that pev2 demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.