
Research
/Security News
DuckDB npm Account Compromised in Continuing Supply Chain Attack
Ongoing npm supply chain attack spreads to DuckDB: multiple packages compromised with the same wallet-drainer malware.
sync-mysql2
Advanced tools
Make synchronous queries to a mysql database using npm's mysql2 project
NPM - (https://www.npmjs.org/package/sync-mysql2)
npm install sync-mysql2 --save
var MySql = require('sync-mysql2');
var connection = new MySql({
host: 'localhost',
user: 'me',
password: 'secret',
database: 'mysqldbName'
});
const result = connection.query('SELECT 1 + 1 AS solution');
assert(result[0].solution === 2);
Assuming that the table passed has an id
column, get the record with that id.
Return an array of objects from a SQL query. The query may optionally contain ?s to be replaced with escaped values from values which should be an array.
Call a database procedure. If it returns only one set of values, that set of values is returned as an array of objects. If it returns multiple sets of values then they are returned as an array.
Close the connection.
Like query
and call
but does not wait for the result. instead it returns a function that synchronously waits for the results.
e.g.
var MySql = require('sync-mysql2');
var connection = new MySql({
host: 'localhost',
user: 'me',
password: 'secret'
});
// these three queries all run in parallel
const resultA = connection.queueQuery('SELECT 1 + 1 AS solution');
const resultB = connection.queueQuery('SELECT 1 + 2 AS solution');
const resultC = connection.queueQuery('SELECT 1 + 3 AS solution');
// here we wait for them
assert(resultA()[0].solution === 2);
assert(resultB()[0].solution === 3);
assert(resultC()[0].solution === 4);
If you don't care about the results you can simply call connection.finishAll()
to wait for all queries and calls to end.
MIT
FAQs
Make synchronous queries to a mysql2 npm package database
We found that sync-mysql2 demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Ongoing npm supply chain attack spreads to DuckDB: multiple packages compromised with the same wallet-drainer malware.
Security News
The MCP Steering Committee has launched the official MCP Registry in preview, a central hub for discovering and publishing MCP servers.
Product
Socket’s new Pull Request Stories give security teams clear visibility into dependency risks and outcomes across scanned pull requests.