
Research
/Security News
Malicious npm Packages Target WhatsApp Developers with Remote Kill Switch
Two npm packages masquerading as WhatsApp developer libraries include a kill switch that deletes all files if the phone number isn’t whitelisted.
typeorm-dynamodb
Advanced tools
This package adds DynamoDB support to TypeORM. It works by wrapping TypeORM. Supports Typeorm version 0.3+
To get started using NPM, you can use the following commands:
npm install --save typeorm-dynamodb
import { Entity, PrimaryColumn, Column } from 'typeorm'
import { GlobalSecondaryIndex } from 'typeorm-dynamodb'
@Entity({ name: 'user' })
@GlobalSecondaryIndex({ name: 'ageIndex', partitionKey: 'age', sortKey: ['lastname','firstname'] })
export class User extends BaseEntity {
@PrimaryColumn({ name: 'id', type: 'varchar' })
id: string
@Column({ name: 'firstname', type: 'varchar' })
firstname: string
@Column({ name: 'lastname', type: 'varchar' })
lastname: string
@Column({ name: 'age', type: 'varchar' })
age: string
}
import { EntityRepository } from 'typeorm'
import { PagingAndSortingRepository } from 'typeorm-repository'
import { User } from '../entities/user'
export class UserRepository extends PagingAndSortingRepository<User> {
}
import { UserRepository } from '../repositories/user-repository'
import { User } from '../entities/user'
import { datasourceManager } from 'typeorm-dynamodb'
export class UserService {
async get (id: string) {
const repository = datasourceManager.getCustomRepository(UserRepository, User)
return repository.get(id)
}
async put (user: User) {
const repository = datasourceManager.getCustomRepository(UserRepository, User)
await repository.put(user)
}
async delete (id: string) {
const repository = datasourceManager.getCustomRepository(UserRepository, User)
await repository.delete({ id })
}
async findPage (criteria: any, pageable: Pageable) {
if (criteria.age) {
const repository = datasourceManager.getCustomRepository(UserRepository, User)
return repository.findPage({
index: 'ageIndex',
where: {
age: criteria.age
}
}, pageable)
}
return repository.findPage({}, pageable)
}
}
In the User example the GlobalSecondaryIndex annotation allows you to use the dynamodb query method. It's extremely important to use an index whenever you are querying to avoid full table scans.
When new records are written to the database a column will be populated automatically that will store the value needed by the index.
For example, the sort column ["lastname","firstname"]
will automatically populate a column "lastname#firstname" when the record is
saved to the database. Magic!
In dynamodb we don't really "open" a connection. However, we will need to read in all the entities so TypeORM knows about them.
There are two easy ways to initialized TypeORM.
import { datasourceManager } from 'typeorm-dynamodb'
import { User } from '../entities/user.ts'
const run = async () => {
await datasourceManager.open({
entities: [User],
synchronize: false // true will attempt to create tables
})
// now you can read / write to dynamodb
}
import express from 'express'
import { datasourceInitializer, environmentUtils, pageableRoutes } from 'typeorm-dynamodb'
import { User } from '../entities/user'
const app = express()
app.use(datasourceInitializer({
entities: [User],
synchronize: environmentUtils.isLocal()
}))
app.use(pageableRoutes)
// ... continue with Express configuration
This will automatically parse query string parameters "page", "size" and "sort" and populate a req.pageable object. You can pass pageable straight through to your findPage repository method to pull back a limited result set.
FAQs
Query a DynamoDB database with NodeJS
The npm package typeorm-dynamodb receives a total of 284 weekly downloads. As such, typeorm-dynamodb popularity was classified as not popular.
We found that typeorm-dynamodb demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Two npm packages masquerading as WhatsApp developer libraries include a kill switch that deletes all files if the phone number isn’t whitelisted.
Research
/Security News
Socket uncovered 11 malicious Go packages using obfuscated loaders to fetch and execute second-stage payloads via C2 domains.
Security News
TC39 advances 11 JavaScript proposals, with two moving to Stage 4, bringing better math, binary APIs, and more features one step closer to the ECMAScript spec.