
Security News
pnpm 10.16 Adds New Setting for Delayed Dependency Updates
pnpm's new minimumReleaseAge setting delays package updates to prevent supply chain attacks, with other tools like Taze and NCU following suit.
The PGXN Client <https://pgxn.github.io/pgxnclient/>
__ is a command
line tool designed to interact with the PostgreSQL Extension Network <https://pgxn.org/>
__ allowing searching, compiling, installing, and removing
extensions in PostgreSQL databases.
For example, to install the semver_ extension, the client can be invoked as::
$ pgxn install semver
which would download and compile the extension for one of the PostgreSQL servers hosted on the machine and::
$ pgxn load -d somedb semver
which would load the extension in one of the databases of the server.
The client interacts with the PGXN web service and a Makefile
provided by
the extension. The best results are achieved with makefiles using the
PostgreSQL Extension Building Infrastructure
__; however the client tries to
degrade gracefully in presence of any package hosted on PGXN.
.. _semver: https://pgxn.org/dist/semver .. __: https://www.postgresql.org/docs/current/extend-pgxs.html
Please refer to the files in the docs
directory or online__ for
instructions about the program installation and usage.
You can create a local development environment with::
virtualenv .venv
source .venv/bin/activate
pip install -e .[dev]
and run pytest
to run the test suite.
FAQs
A command line tool to interact with the PostgreSQL Extension Network.
We found that pgxnclient demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm's new minimumReleaseAge setting delays package updates to prevent supply chain attacks, with other tools like Taze and NCU following suit.
Security News
The Rust Security Response WG is warning of phishing emails from rustfoundation.dev targeting crates.io users.
Product
Socket now lets you customize pull request alert headers, helping security teams share clear guidance right in PRs to speed reviews and reduce back-and-forth.