
Research
Shai-Hulud Descends to Hades: Miasma Worm Campaign Spreads with New PyPI Wave
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.
PostgreSQL connection pool LRU cache manager with zero PostGraphile dependencies.
npm install pg-cache
import { pgCache, getPgPool } from 'pg-cache';
// Get or create a cached pool
const pool = getPgPool({
host: 'localhost',
port: 5432,
database: 'mydb',
user: 'postgres',
password: 'password'
});
// Use the pool
const result = await pool.query('SELECT NOW()');
// Pool is automatically cached and reused
const samePool = getPgPool({ database: 'mydb' }); // Returns cached pool
import { pgCache } from 'pg-cache';
import { Pool } from 'pg';
// Create and cache a pool manually
const pool = new Pool({ connectionString: 'postgres://...' });
pgCache.set('my-pool-key', pool);
// Retrieve it later
const cachedPool = pgCache.get('my-pool-key');
// Remove from cache (also disposes the pool)
pgCache.delete('my-pool-key');
Register callbacks to be notified when pools are disposed:
import { pgCache } from 'pg-cache';
// Register a cleanup callback
const unregister = pgCache.registerCleanupCallback((poolKey: string) => {
console.log(`Pool ${poolKey} was disposed`);
// Clean up any resources associated with this pool
});
// Later, unregister if needed
unregister();
A general-purpose cache is also provided:
import { svcCache } from 'pg-cache';
// Cache any service or object
svcCache.set('my-service', myServiceInstance);
const service = svcCache.get('my-service');
import { close, teardownPgPools } from 'pg-cache';
// In your shutdown handler
process.on('SIGTERM', async () => {
await close(); // or teardownPgPools()
process.exit(0);
});
The main PostgreSQL pool cache instance.
get(key: string): Pool | undefined - Get a cached poolset(key: string, pool: Pool): void - Cache a poolhas(key: string): boolean - Check if a pool is cacheddelete(key: string): void - Remove and dispose a poolclear(): void - Remove and dispose all poolsregisterCleanupCallback(callback: (key: string) => void): () => void - Register a cleanup callbackGet or create a cached PostgreSQL pool using the provided configuration.
A general-purpose LRU cache for services and objects.
Gracefully close all cached pools and wait for disposal.
This package is designed to be extended. For example, graphile-cache uses the cleanup callback system to automatically clean up PostGraphile instances when their associated pools are disposed.
🚀 Quickstart: Getting Up and Running Get started with modular databases in minutes. Install prerequisites and deploy your first module.
📦 Modular PostgreSQL Development with Database Packages Learn to organize PostgreSQL projects with pgpm workspaces and reusable database modules.
✏️ Authoring Database Changes Master the workflow for adding, organizing, and managing database changes with pgpm.
🧪 End-to-End PostgreSQL Testing with TypeScript Master end-to-end PostgreSQL testing with ephemeral databases, RLS testing, and CI/CD automation.
⚡ Supabase Testing Use TypeScript-first tools to test Supabase projects with realistic RLS, policies, and auth contexts.
💧 Drizzle ORM Testing Run full-stack tests with Drizzle ORM, including database setup, teardown, and RLS enforcement.
🔧 Troubleshooting Common issues and solutions for pgpm, PostgreSQL, and testing.
SET LOCAL) into queries—ideal for setting role, jwt.claims, and other session settings.libpg_query, converting SQL into parse trees.🛠 Built by the Constructive team — creators of modular Postgres tooling for secure, composable backends. If you like our work, contribute on GitHub.
AS DESCRIBED IN THE LICENSES, THE SOFTWARE IS PROVIDED "AS IS", AT YOUR OWN RISK, AND WITHOUT WARRANTIES OF ANY KIND.
No developer or entity involved in creating this software will be liable for any claims or damages whatsoever associated with your use, inability to use, or your interaction with other users of the code, including any direct, indirect, incidental, special, exemplary, punitive or consequential damages, or loss of profits, cryptocurrencies, tokens, or anything else of value.
FAQs
PostgreSQL connection pool LRU cache manager
The npm package pg-cache receives a total of 11,818 weekly downloads. As such, pg-cache popularity was classified as popular.
We found that pg-cache demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.

Security News
RubyGems and Bundler 4.0.13 introduced an opt-in cooldown feature that delays newly published gems during dependency resolution.

Security News
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.