
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
postgres-migrate-cli
Advanced tools
Migrations tool for PostgreSQL
npm i postgres-migrate-cli
postgres-migrate-cli [command] [options]
options:
--table - table name in DB to store migrations. Default is `migrations`
--config - path to configuration file. Default is `./config.json`
--path - path to migrations folder. Default is `./migrations`
--count - count of applied/reverted migrations (only for `up` and 'down' commands)
commands:
up - apply new migrations. Default command
down - revert all migrations
create - create migration file in migrations folder
Config format:
{
"development": {
"host": "127.0.0.1",
"user": "devUser",
"password": "devPassword",
"database": "testDB"
},
"production": {
"host": "www.com",
"user": "prodUser",
"password": "prodPassword",
"database": "prodDB"
}
}
By default used development
config. Please use NODE_ENV to switch config
module.exports = {
up: 'ALTER TABLE my_cool_table ADD COLUMN super_column TEXT;',
down: 'ALTER TABLE my_cool_table DROP COLUMN super_column;'
}
where up
and down
is plain SQL:
up
section applies migrationdown
section revert migrationpackage.json
You may have some scripts in your package.json:
{
"devDependencies": {
"postgres-migrate-cli": "latest",
"cross-env": "latest"
},
"scripts": {
"migrations:dev": "cross-env NODE_ENV=development postgres-migrate-cli up --table migrationsDev",
"migrations:prod": "cross-env NODE_ENV=production postgres-migrate-cli",
"migrations:revert:dev": "postgres-migrate-cli down --count 1 --table migrationsDev",
"migrations:revert:all": "postgres-migrate-cli down --table migrationsDev",
"migration:create": "postgres-migrate-cli create"
}
}
FAQs
Migrations tool for PostgreSQL
The npm package postgres-migrate-cli receives a total of 7 weekly downloads. As such, postgres-migrate-cli popularity was classified as not popular.
We found that postgres-migrate-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.