
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
sqlite-ulid
Advanced tools
`sqlite-ulid` is distributed on `npm` for Node.js developers. To install on [supported platforms](#supported-platforms), simply run:
sqlite-ulid
NPM Packagesqlite-ulid
is distributed on npm
for Node.js developers. To install on supported platforms, simply run:
npm install sqlite-ulid
The sqlite-ulid
package is meant to be used with Node SQLite clients like better-sqlite3
and node-sqlite3
. For better-sqlite3
, call .loadExtension()
on your database object, passing in getLoadablePath()
.
import Database from "better-sqlite3";
import * as sqlite_ulid from "sqlite-ulid";
const db = new Database(":memory:");
db.loadExtension(sqlite_ulid.getLoadablePath());
const version = db.prepare("select ulid_version()").pluck().get();
console.log(version); // "v0.2.0"
For node-sqlite3
, call the similarly named .loadExtension()
method on your database object, and pass in getLoadablePath()
.
import sqlite3 from "sqlite3";
import * as sqlite_ulid from "sqlite-ulid";
const db = new sqlite3.Database(":memory:");
db.loadExtension(sqlite_ulid.getLoadablePath());
db.get("select ulid_version()", (err, row) => {
console.log(row); // {ulid_version(): "v0.2.0"}
});
See the full API Reference for the Node API, and docs.md
for documentation on the sqlite-ulid
SQL API.
Since the underlying ulid0
SQLite extension is pre-compiled, the sqlite-ulid
NPM package only works on a few "platforms" (operating systems + CPU architectures). These platforms include:
darwin-x64
(MacOS x86_64)darwin-arm64
(MacOS M1 and M2 chips)win32-x64
(Windows x86_64)linux-x64
(Linux x86_64)To see which platform your machine is, check the process.arch
and process.platform
values like so:
$ node -e 'console.log([process.platform, process.arch])'
[ 'darwin', 'x64' ]
When the sqlite-ulid
NPM package is installed, the correct pre-compiled extension for your operating system and CPU architecture will be downloaded from the optional dependencies, with platform-specific packages like sqlite-ulid-darwin-x64
. This will be automatically, there's no need to directly install those packages.
More platforms may be supported in the future. Consider supporting my work if you'd like to see more operating systems and CPU architectures supported in sqlite-ulid
.
Returns the full path to where the sqlite-ulid
should be installed, based on the sqlite-ulid
's package.json
optional dependencies and the host's operating system and architecture.
This path can be directly passed into better-sqlite3
's .loadExtension()
.
import Database from "better-sqlite3";
import * as sqlite_ulid from "sqlite-ulid";
const db = new Database(":memory:");
db.loadExtension(sqlite_ulid.getLoadablePath());
It can also be used in node-sqlite3
's .loadExtension()
.
import sqlite3 from "sqlite3";
import * as sqlite_ulid from "sqlite-ulid";
const db = new sqlite3.Database(":memory:");
db.loadExtension(sqlite_ulid.getLoadablePath());
This function throws an Error
in two different cases. The first case is when sqlite-ulid
is installed and run on an unsupported platform. The second case is when the platform-specific optional dependency is not installed. If you reach this, ensure you aren't using --no-optional
flag, and file an issue if you are stuck.
The db.loadExtension()
function may also throw an Error if the compiled extension is incompatible with your SQLite connection for any reason, including missing system packages, outdated glib versions, or other misconfigurations. If you reach this, please file an issue.
FAQs
`sqlite-ulid` is distributed on `npm` for Node.js developers. To install on [supported platforms](#supported-platforms), simply run:
The npm package sqlite-ulid receives a total of 37 weekly downloads. As such, sqlite-ulid popularity was classified as not popular.
We found that sqlite-ulid demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.