
Security News
npm ‘is’ Package Hijacked in Expanding Supply Chain Attack
The ongoing npm phishing campaign escalates as attackers hijack the popular 'is' package, embedding malware in multiple versions.
This project is based on the (seemingly) unmaintained aiocoucdb but is not a drop-in replacement for that project.
Using aiocouchdb3
is pretty easy.
import aiocouchdb3 as couchdb
user_jwt = get_user_jwt()
async with couchdb.connect() as client:
async with client.with_token(user_jwt) as session:
for db in await session.all_dbs:
print(await db.info)
Thanks for considering adding your skills to improve this library.
Please review the Contributor Covenant Code of Conduct.
You must comply with it to contribute to aiocouchdb3
.
Check .python-version
for the minimum version
of Python supported by aiocouchdb3
. Install that and use it to create a
Poetry environment.
Install dependencies with
poetry install --all-extras
You must provide both mocked and integration tests when contributing. Get a CouchDB v3 instance up and running. (If you use Docker, see the following section about using Docker to run a properly configured CouchDB v3 instance.)
There are two kinds of tests in the project found the ./tests
directory.
./tests/mocked
contain proper unit tests isolated from the execution
environment.
./tests/integration
contain integration tests that rely on a running
instance of CouchDB. To run these copy ./test.env
to ./.test.env
and provide values for the two empty keys in it (and modify the other
two if you want to).
# Copy this file to .test.env and provide values for your
# instance of CouchDB
COUCHDB_USER =
COUCHDB_PASSWORD =
COUCHDB_DB_BASE_URL = http://locahost:5984
COUCHDB_JWT_SECRET = devsecret
There's a Docker compose file in tests
available for you to use if you want to use that.
docker compose --env-file .test.env -f tests/docker-compose/docker-compose.yaml up
Run the tests with
poetry run pytest
If you want to run the tests while you're developing
poetry run ptw .
FAQs
A client for interacting with CouchDB 3 based on aiohttp
We found that aiocouchdb3 demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
The ongoing npm phishing campaign escalates as attackers hijack the popular 'is' package, embedding malware in multiple versions.
Security News
A critical flaw in the popular npm form-data package could allow HTTP parameter pollution, affecting millions of projects until patched versions are adopted.
Security News
Bun 1.2.19 introduces isolated installs for smoother monorepo workflows, along with performance boosts, new tooling, and key compatibility fixes.