
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
sqlite-lines
Advanced tools
`sqlite-lines` is distributed on `npm` for Node.js developers. To install on [supported platforms](#supported-platforms), simply run:
sqlite-lines NPM Packagesqlite-lines is distributed on npm for Node.js developers. To install on supported platforms, simply run:
npm install sqlite-lines
The sqlite-lines package is meant to be used with Node SQLite clients like better-sqlite3 and node-sqlite3. For better-sqlite3, call .loadExtension() on your database object, passing in getLoadablePath().
import Database from "better-sqlite3";
import * as sqlite_lines from "sqlite-lines";
const db = new Database(":memory:");
db.loadExtension(sqlite_lines.getLoadablePath());
const version = db.prepare("select lines_version()").pluck().get();
console.log(version); // "v0.2.0"
For node-sqlite3, call the similarly named .loadExtension() method on your database object, and pass in getLoadablePath().
import sqlite3 from "sqlite3";
import * as sqlite_lines from "sqlite-lines";
const db = new sqlite3.Database(":memory:");
db.loadExtension(sqlite_lines.getLoadablePath());
db.get("select lines_version()", (err, row) => {
console.log(row); // {json_schema_version(): "v0.2.0"}
});
See the full API Reference for the Node API, and docs.md for documentation on the sqlite-lines SQL API.
Since the underlying lines0 SQLite extension is pre-compiled, the sqlite-lines NPM package only works on a few "platforms" (operating systems + CPU architectures). These platforms include:
darwin-x64 (MacOS x86_64)win32-x64 (Windows x86_64)linux-x64 (Linux x86_64)To see which platform your machine is, check the process.arch and process.platform values like so:
$ node -e 'console.log([process.platform, process.arch])'
[ 'darwin', 'x64' ]
When the sqlite-lines NPM package is installed, the correct pre-compiled extension for your operating system and CPU architecture will be downloaded from the optional dependencies, with platform-specific packages like sqlite-lines-darwin-x64. This will be done automatically, there's no need to directly install those packages.
More platforms may be supported in the future. Consider supporting my work if you'd like to see more operating systems and CPU architectures supported in sqlite-lines.
Returns the full path to where the sqlite-lines should be installed, based on the sqlite-lines's package.json optional dependencies and the host's operating system and architecture.
This path can be directly passed into better-sqlite3's .loadExtension().
import Database from "better-sqlite3";
import * as sqlite_lines from "sqlite-lines";
const db = new Database(":memory:");
db.loadExtension(sqlite_lines.getLoadablePath());
It can also be used in node-sqlite3's .loadExtension().
import sqlite3 from "sqlite3";
import * as sqlite_lines from "sqlite-lines";
const db = new sqlite3.Database(":memory:");
db.loadExtension(sqlite_lines.getLoadablePath());
This function throws an Error in two different cases. The first case is when sqlite-lines is installed and run on an unsupported platform. The second case is when the platform-specific optional dependency is not installed. If you reach this, ensure you aren't using --no-optional flag, and file an issue if you are stuck.
The db.loadExtension() function may also throw an Error if the compiled extension is incompatible with your SQLite connection for any reason, including missing system packages, outdated glib versions, or other misconfigurations. If you reach this, please file an issue.
FAQs
`sqlite-lines` is distributed on `npm` for Node.js developers. To install on [supported platforms](#supported-platforms), simply run:
We found that sqlite-lines demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.