
Security News
Knip Hits 500 Releases with v5.62.0, Improving TypeScript Config Detection and Plugin Integrations
Knip hits 500 releases with v5.62.0, refining TypeScript config detection and updating plugins as monthly npm downloads approach 12M.
A tool for serving simple websites, JSON APIs and static files directly from a SQLite database.
A tool for serving simple websites, static files and JSON APIs directly from a SQLite database.
SQLite is a fantastic way of storing data in a safe, well-structured, uniform way and querying it quickly. This project helps you expose that data to the web.
SQLSite is inspired by Datasette, but is much simpler. Unlike Datasette, SQLSite does not do anything automatically. It doesn't allow to you explore and visualize your data in nicely formatted tables and graphs. Instead, you must manually define how your data is exposed to the Web using SQL queries.
The first thing to note is that SQLSite is designed for building read only web applications. It does not allow you to build applications that modify the underlying SQLite database in any way. Use some other tool (like the sqlite3
command line tool, or sqlite-utils, or a SQLite GUI) to create and edit your database.
The second concept you'll need to know about is SQLite Archives. This is a file container format similar to a ZIP archive or Tarball but based on an SQLite database. This allows websites served by SQLSite to be completely self-contained. The HTML templates and static files needed by the web application are stored alongside its relational data in the same file. See below for more information on this.
SQLSite allows you to create routes that map incoming HTTP request URLs to configurable handlers. Handlers are like "views" (if you're accustomed to Django, Flask etc).
In most web frameworks, the routing of incoming URLs to views is configured in code (Django's URLConf
, Flask's @app.route
decorator, etc). In SQLSite, the routing is configured in the SQLite database itself.
Here's the schema for the route
table. To use a SQLite database with SQLSite, this table must exist:
CREATE TABLE route (
pattern TEXT PRIMARY KEY NOT NULL,
handler TEXT NOT NULL,
config TEXT NOT NULL,
existsquery TEXT
);
The columns of this table are:
pattern
This is a pattern that defines which incoming URL path or paths will be matched by the route. For example:
/
)blog/
- matches /blog/
Patterns can also be dynamic: they can contain parameters which will be extracted from the path. Parameter syntax is based on similar <type:name>
functionality in Django and Flask.
blog/<int:year>/
- matches (for example) /blog/2019/
and /blog/2020/
.blog/<slug:slug>/
- matches /blog/some-blog-post-slug/
Available types are:
str
- matches any text without a slashpath
- like str
but also accepts slashesint
- matches positive integersuuid
- matches formatted UUIDs (lowercase, with dashes)slug
- matches any string consisting of ASCII letters or numbers, plus the hyphen and underscore charactersThings to note:
/
in your patterns./
, incoming paths that do not end with a slash will 301 redirect to the version with the trailing slash. If your pattern does not end with a /
, it will be matched against the incoming path exactly (ie will not redirect).handler
This is the name of the handler that should respond to HTTP requests whose path matches the given pattern
. Valid handlers are template
, json
, static
and redirect
. See below for details of each handler.
config
Configuration for the handler. The meaning of this field is different for each handler. See below for details.
existsquery
This column is optional. If it is used, it should contain an SQL query that will be executed before your handler runs, and should return a single row with a single column containing a boolean value. If the value is 0
, the handler will not run and instead 404 Not Found
will be returned. The SQL query can contain named parameters which will be populated with captured values from the route's URL pattern.
This allows you to check whether a row in the database exists before attempting to render it. An example value for the existsquery
column might be:
SELECT EXISTS(SELECT 1 FROM blogpost WHERE slug=:slug)
You can also put your query inside a file in the SQLite Archive and use file=yourfilename.sql
in the existsquery
column.
template
handlerThis handler is used to respond to requests by rendering HTML pages. It uses Jinja and can build HTML dynamically by running database queries.
If you use the template
handler, the config
field for the route should be set to the name of the template you wish to use. However, SQLSite does not use templates stored in the filesystem, like you would normally use with Jinja2. Instead, SQLSite stores the templates inside the database using SQLite's "Archive" feature. See below for details of how to use this.
Note that template paths start at the root of the archive, so if your template is in a "directory" (templates/
) you should provide the full path (templates/index.html
). If you use Jinja's template inheritance functionality, you should also fully-qualify template names, for example: {% extends "templates/base.html" %}
Your Jinja template will be rendered with a special function included in its context called sql
. This allows you to run any database query and generate HTML dynamically using the results. For example, to build a blog index page you may use a template like this:
<html>
<head><title>Blog!</title></head>
<body>
<h1>My blog!</h1>
<ul>
{% for post in sql("SELECT * FROM blogpost") %}
<li><a href="/posts/{{ post.slug }}/">{{ post.title }}</a></li>
{% endfor %}
</ul>
</body>
</html>
Queries run using the sql
function can contain named parameters. The optional second argument to sql
is a dictionary of parameter values. The context for your template contains a variable called url
, which is a dictionary containing all values captured from the URL pattern.
For example, given the route pattern blog/<slug:slug>/
, your template may contain the following on the blog post detail page:
{% with post = sql("SELECT title, content FROM blogpost WHERE slug=:slug", {"slug": url.slug})[0] %}
<h2>{{ post.title }}</h2>
{% endwith %}
You can also put your SQL into a file (which, like the template, must be stored inside the SQLite Archive) by passing the filename prefixed with file=
to the sql
template function, rather than an SQL string.
SQLSite has support for rendering Markdown in your templates using the Misaka library. If Misaka is installed (pip install misaka
) then a markdown
filter becomes available in your templates:
{{ post.content | markdown }}
static
handlerThis handler serves static files. It does not serve files stored in the filesystem, but instead serves them directly from the SQLite Archive inside the database. See below for details of this.
If you use the static
handler, the config
field for the route should be set to the path prefix ("directory") inside the archive from which to serve files. For example, to serve files that are prefixed with static
, you should set the value of the config
column to static
.
The pattern
for the route must include a parameter called name
, which should capture the rest of the filename after the prefix you supplied in config
. You should use the path
parameter type.
For example, to serve static files under the URL prefix media
, using the filename prefix staticdir
, use:
INSERT INTO route (pattern, handler, config)
VALUES ('media/<path:name>', 'static', 'staticdir')
There is no need to populate the existsquery
column: the handler will automatically return 404 if the file does not exist inside the archive.
json
handlerThis handler takes the results of a query and serializes it into a list of JSON objects. The config
field should be the query to execute.
You can also put your query inside a file in the SQLite Archive and use file=yourfilename.sql
in the config
column.
redirect
handlerThis handler returns a 301 Permanent Redirect
response. The config
field should be an SQL query that returns the Location
to redirect to. The SQL query can contain named parameters which will be populated with captured values from the route's URL pattern.
For example, to redirect a single, static path:
INSERT INTO route (pattern, handler, config)
VALUES ('before/', 'redirect', 'SELECT "/after/"')
To route dynamically, try:
INSERT INTO route (pattern, handler, config)
VALUES ('before/<slug:slug>/', 'redirect', 'SELECT "/after/" || :slug || "/"')
Of course, your query can perform any arbirary operations such as looking up redirects in a table etc.
You can also put your query inside a file in the SQLite Archive and use file=yourfilename.sql
in the config
column.
SQLSite stores the HTML templates and static files needed to build your website inside the SQLite database itself. To do this, it uses the SQLite Archive format. Please read the SQLite documentation for full details of this feature, but a quick primer is below.
A SQLite Archive is just an ordinary SQLite database with an ordinary table inside it with a particular name and schema. The sqlite3
command line tool comes with a few commands to work with files stored in this table.
First, you need to create the special sqlar
table in your database with the following command:
sqlite3 db.sqlite -Ac
Then, given the following folder structure on disk:
db.sqlite
static/
cat.gif
templates/
index.html
You can copy this data into the archive as follows:
sqlite3 db.sqlite -Au static/* templates/*
To list the files stored in your database:
sqlite3 db.sqlite -At
This should return:
static/cat.gif
templates/index.html
You can install SQLSite with pip install sqlsite
. It requires Python 3.7+.
The only configuration option available is the name of the SQLite database file to use. By default, SQLSite uses a database called db.sqlite
. To change this, set the environment variable SQLSITE_DATABASE
to the name of your database file.
SQLSite is implemented as a WSGI application. WSGI is a Python standard for interfacing between a web application and a web server. SQLSite itself does not come with a web server, so you will have to install your own.
Gunicorn is a widely used Python web application server. Read its documentation carefully. An example command for local development might be:
pip install gunicorn
gunicorn --bind 0.0.0.0:8000 sqlsite:app
FAQs
A tool for serving simple websites, JSON APIs and static files directly from a SQLite database.
We found that sqlsite demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Knip hits 500 releases with v5.62.0, refining TypeScript config detection and updating plugins as monthly npm downloads approach 12M.
Security News
The EU Cyber Resilience Act is prompting compliance requests that open source maintainers may not be obligated or equipped to handle.
Security News
Crates.io adds Trusted Publishing support, enabling secure GitHub Actions-based crate releases without long-lived API tokens.