
Security News
Free Certified Patch for Critical Rails Active Storage Vulnerability
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.
Bringing the .where() statement to Firebase
.greaterThan(), .lessThan(), and .startsWith().Querybase takes a Firebase Database reference with a list of fields to create composite keys.
// Set the configuration for your app
// TODO: Replace with your project's config object
const config = {
apiKey: '<your-api-key>',
authDomain: '<your-auth-domain>',
databaseURL: '<your-database-url>',
storageBucket: '<your-storage-bucket>'
};
firebase.initializeApp(config);
// Get a reference to the database service
const database = firebase.database();
const databaseRef = database.ref().child('people');
const querybaseRef = querybase.ref(databaseRef, ['name', 'age', 'location']);
// Automatically handles composite keys
querybaseRef.push({
name: 'David',
age: 27,
location: 'SF'
});
// Find records by multiple fields
querybaseRef
.where({
name: 'David',
age: 27
})
// returns a Firebase Database ref
.on('value', (snap) => {
console.log(snap);
});
// Get a reference to the database service
const database = firebase.database();
const databaseRef = database.ref().child('people');
const queryRef = querybase.query(databaseRef);
// Querybase for single criteria, returns a Firebase Ref
querybaseRef.where({ name: 'David'});
// Querybase for a single string criteria, returns
// a QuerybaseQuery, which returns a Firebase Ref
querybaseRef.where('name').startsWith('Da');
querybaseRef.where('age').lessThan(30);
querybaseRef.where('age').greaterThan(20);
querybaseRef.where('age').between(20, 30);
FAQs
Bringing the where statement to Firebase
The npm package querybase receives a total of 151 weekly downloads. As such, querybase popularity was classified as not popular.
We found that querybase demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.

Security News
/Threat Research
A malicious Ruby gem runs a credential-stealing worm during installation, poisons AI coding tools, and can wipe files when a stolen GitHub token is revoked.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.