
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
封装常用数据库操作,简化针对数据库的编码,支持 MySQL,SQLite,支持读写分离,支持 escape。
每一次完整的业务处理过程称之为一个context,可以理解为它是业务级的事物。支持多次数据库请求使用同一个数据库连接,支持追踪 sql 语句,支持业务级事物的标识,支持在一次业务处理过程中涉及多个数据库。
支持 json 数据的双向自动转换。
编译
npm run build
支持的配置信息如下:
{
mysql:{
master: {},
writalbe: {}
},
sqlite:{
path: '',
memory: false
}
}
安装包的时候不自动安装依赖的mysql和better-sqlite3(依赖关系放在了 peerDependencies 中),使用tms-db包的工程需要使用哪个数据再安装哪个包。
每个实例保留一个连接
FAQs
封装数据库操作,支持MySQL,SQLite。
We found that tms-db demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.