Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
sqlite-worker
Advanced tools
Social Media Photo by benjamin lehman on Unsplash
A simple, and persistent, SQLite database for Web and Workers, based on sql.js and sqlite-tag.
Obviously I was too naive to believe I could import(...)
modules in 2021 inside workers too, but the reality is different:
import(...)
anythingimport
, or even static, I believe, so Worker here won't workThis means that while this module recommendation is to use its SQLiteWorker export, or to use the directly its init export via Service Worker, none of these recommendation actually work as expected, so that for a cross browser experience, using the init export from the main thread is the only option.
Please note the WASM module should also offload from the main thread, but the thing is that I'd love for browsers to fix their inconsistencies regarding ES Modules and remove this whole warning session once they do.
This module is pre-bundled in a way it should work, and survive, 3rd party tools, but it needs to be able to reach its own dist
folder.
Accordingly, the easiest way to use this module is the following:
// note: no ?module needed, this is already exported as ESM
import {init, SQLiteWorker} from '//unpkg.com/sqlite-worker';
// either direct init([options])
// or use SQLiteWorker with defaults (Chrome only)
SQLiteWorker({name: 'my-db'}).then(() => {
console.log('ready');
});
Options defaults, such as dir
and library
, or even the Worker
path, are all resolved automatically, as long as all dist
files are reachable.
It is, however, possible to change these configurations.
Both init([options])
and SQLiteWorker([options])
optionally accept a configuration/options object with the following fields:
'sqlite-worker'
Uint8Array
instance. This is used only the very first time, and it fallbacks to new Uint8Array(0)
.250
.These options work only with direct initialization, so either in the main thread or via Service Worker (once fixed in Chrome) after importing its init
export.
Uint8Array
, whenever some query executed an INSERT
, a DELETE
, or an UPDATE
.These options work only with SQLiteWorker
initialization.
These options are resolved by default internally to find the right files. Change these options only if you know what you are doing.
sql.js
files. By default it's the current module folder plus /../sqlite
.sqlite-worker
library itself. By default is wherever the module has been exported.Both init(...)
and SQLiteWorker(...)
resolves with the sqlite-tag API, except for the raw
utility, which is not implemented via the Worker interface, but it's exported within the init(...)
, as it requires a special instance that won't survive postMessage
dance.
The API in a nutshell is:
All tags are asynchronous, so that it's possible to await their result.
This is currently the cross browser way to use this module, and it won't work within a Service Worker until Chrome fixes its bug.
import {init} from 'sqlite-worker';
// init([options])
init({name: 'my-db'}).then(async ({all, get, query}) => {
await query`CREATE TABLE IF NOT EXISTS todos (id INTEGER PRIMARY KEY, value TEXT)`;
const {total} = await get`SELECT COUNT(id) as total FROM todos`;
if (total < 1) {
console.log('Inserting some value');
await query`INSERT INTO todos (value) VALUES (${'a'})`;
await query`INSERT INTO todos (value) VALUES (${'b'})`;
await query`INSERT INTO todos (value) VALUES (${'c'})`;
}
console.log(await all`SELECT * FROM todos`);
});
This module can also be used as Worker, which is a recommendation where the browser is compatible.
If specified, you can pass your own worker via the worker
option, but by default, this module can be initialized as such:
import {SQLiteWorker} from 'sqlite-worker';
// SQLiteWorker([options])
SQLiteWorker({name: 'my-db'})
.then(async ({all, get, query}) => {
await query`CREATE TABLE IF NOT EXISTS todos (id INTEGER PRIMARY KEY, value TEXT)`;
const {total} = await get`SELECT COUNT(id) as total FROM todos`;
if (total < 1) {
console.log('Inserting some value');
await query`INSERT INTO todos (value) VALUES (${'a'})`;
await query`INSERT INTO todos (value) VALUES (${'b'})`;
await query`INSERT INTO todos (value) VALUES (${'c'})`;
}
console.log(await all`SELECT * FROM todos`);
});
This module requires a browser compatible with WASM and dynamic import(...)
. This module won't work in old Edge or IE, as these don't even know what's a Service Worker.
Please note if you bundle this module there are chances it might not work as expected, as it needs to import WASM and other files at runtime, and bundlers might not give it a chance to find these files. Keep the dist
folder as it is, and import this module from it.
FAQs
A simple, and persistent, SQLite database for Web and Workers
The npm package sqlite-worker receives a total of 48 weekly downloads. As such, sqlite-worker popularity was classified as not popular.
We found that sqlite-worker demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.