
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
A lightweight and fast queue database server with WebSocket support for real-time data streaming
QDB is a lightweight, local-first Real-time Queuing Database designed to be a "Firebase-lite" for your Node.js projects. It combines a JSON-based database, a robust job queue, real-time WebSocket subscriptions, and an admin UI into a single zero-dependency (almost) package.
enqueue, dequeue, ack, and fail operations.qdb init, qdb migrate, qdb start).npm install queuedb
Initialize and run QDB in seconds:
# Initialize a new database
npx qdb init my_project
# Start the server
npx qdb start my_project --port 3000
import { QDB, QDBServer } from 'queuedb';
// 1. Setup Database
const db = new QDB("my_project", {});
await db.init(); // Creates tables and queue system
// 2. Queue Operations
await db.enqueue('email_notifications', { userId: 1, type: 'welcome' });
// 3. Worker / Consumer
const job = await db.dequeue('worker_client_1');
if (job.success && job.data) {
console.log("Processing:", job.data);
// ... work ...
await db.ack(job.data.id);
}
// 4. Start Server for Realtime Access
const server = new QDBServer("main", { port: 3000 });
server.mountDb(db);
server.listen();
Clients can connect via WebSocket to receive updates instantly.
Connect:
ws://localhost:3000
Subscribe: Send a JSON message:
{
"type": "subscribe",
"method": "GET",
"route": "/my_project/users"
}
Receive Updates: You will receive a message whenever data changes in the subscribed route.
QDB can host a web-based Admin UI (e.g., a React app).
By default, the middleware serves files from dist/ui at the /admin route.
qdb init <name>: Create new DB structure.qdb start <name>: Start the QDB server.qdb migrate <name>: Run schema migrations.qdb archive <name> <table> <days>: Move old data to archive files.MIT
FAQs
A lightweight and fast queue database server with WebSocket support for real-time data streaming
The npm package queuedb receives a total of 19 weekly downloads. As such, queuedb popularity was classified as not popular.
We found that queuedb demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.