Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
sequelize-simple-cache
Advanced tools
A simple, transparent, client-side, in-memory cache for Sequelize
This is a simple, transparent, client-side, in-memory cache for Sequelize v4. Cache invalidation is based on time-to-live (ttl). Selectively add your Sequelize models to the cache.
This cache might work for you if you have a few database tables that (1) are frequently read but very rarely written and (2) contain only few rows of data.
In a project, we had a couple of database tables that were holding a sort of system configuration. Something like 4 or 5 tables with some 50 rows of data. Nearly every request needed this data, i.e., it was read all the time. But updated only very rarely, once a day maybe. So, pre-fetching or simple caching would work for us.
If that's not matching your scenario, better look for something more sophisticated such as Redis, memcached and alike.
npm install sequelize-simple-cache
Setup the cache along with loading your Sequelize models like this:
const Sequelize = require('sequelize');
const SequelizeSimpleCache = require('sequelize-simple-cache');
const sequelize = new Sequelize('database', 'username', 'password', { ... });
// initialize cache
const cache = new SequelizeSimpleCache({
User: { ttl: 5 * 60 }, // 5 minutes
Page: { }, // default ttl is 1 hour
});
// add your models to the cache
const User = cache.init(sequelize.import('./models/user'));
const Page = cache.init(sequelize.import('./models/page'));
const Balance = sequelize.import('./models/balance'); // no caching for this one
// first time resolved from database, subsequent times from local cache
const fred = User.findOne({ where: { username: 'fred' }});
Currently, the following methods on a Sequelize model instances are supported for caching:
findById
, findOne
, findAll
, findAndCountAll
, count
, min
, max
, sum
.
Make sure your queries are cacheable, i.e., do not have dynamic timestamps.
const { Op, fn } = require('sequelize');
// this is not good
Model.findOne({ where: { startDate: { [Op.lte]: new Date() }, } });
// you should do it this way
Model.findOne({ where: { startDate: { [Op.lte]: fn('NOW') }, } });
// if you don't want that to be cached, bypass the cache like this
Model.cacheNo().findOne({ where: { startDate: { [Op.lte]: fn('NOW') }, } });
There are these ways to clear the cache.
// clear all
cache.clear();
// clear all entries of a certain model
cache.clear('User');
// or do the same on the model
User.cacheClear();
User.cacheClearAll();
Caching can explicitly be bypassed like this:
User.cacheNo().findOne(...);
You can activate debug output to console.debug()
like this:
const cache = new SequelizeSimpleCache({
User: { ttl: 5 * 60 },
}, {
debug: true,
});
If you run unit tests against your Sequelize models, caching might be somewhat counterproductive. So, either clear the cache as needed in your unit tests. For example (using Mocha):
describe('API: GET /consent/sp/{spId}/customer/{lcId}', () => {
beforeEach(() => {
User.cacheClearAll();
});
// ...
Or disable the cache right from the beginning.
A quick idea... have a config value to be set in your project's /config/test.js
and start your unit tests with setting NODE_ENV=test
before.
const config = require('config');
//...
if (config.get('disablecache')) {
cache.disable();
}
FAQs
A simple, transparent, client-side, in-memory cache for Sequelize
The npm package sequelize-simple-cache receives a total of 623 weekly downloads. As such, sequelize-simple-cache popularity was classified as not popular.
We found that sequelize-simple-cache demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.