July 2024 Summaries

The Supabase client library is now available on JSR (JavaScript Registry), a modern open source JavaScript registry that simplifies publishing and importing modules. JSR supports TypeScript source code, auto-generating documentation and type definition files, provenance attestation for security, and can be used with npm-like package managers. Supabase's client library, supabase-js, is fully isomorphic and can be used across any environment that speaks JavaScript and HTTPS. Installing Supabase via JSR offers an excellent developer experience with first class TypeScript support and auto-generated documentation accessible in your code editor.

Over the past three months, the team has focused on enhancing security, performance, and stability in their platform. They have collaborated with Eva, a rising star in the world of security, who has been instrumental in discovering misconfigured projects and collaborating on fixes and features. The team's approach to security is based on a Shared Responsibility Model, providing developers full control while ensuring the most secure platform for development. They have launched several tools and guides, including Security Advisor, Lunchcat integration, API hardening, column-level security, user impersonation, RLS AI Assistant, network restrictions, and more. Future developments include improved Security Advisor, network restrictions 2.0, OpenAPI management, "Hard mode" development, CI/CD warnings, revamped API keys, and a private Vulnerability Disclosure Program with HackerOne.

The article discusses the use of range-type columns in Postgres to handle events or periods efficiently. Traditionally, developers use two separate columns for start and end times, which can lead to complex queries and difficulty ensuring data integrity. Range types are a solution that hold the beginning and end of a range of a base type, such as int4range for integers, tstzrange for timestamps, and daterange for dates. These range values allow for easy querying using operators like && and can be used to add constraints preventing overlapping events or reservations. The article also demonstrates how to create an air-tight table that holds reservations by leveraging these features in Postgres.

This tutorial teaches how to use Supabase Realtime, PostGIS, and Edge Functions to create a live location tracking system. The process involves creating an Edge Function that captures live location data from a Telegram Bot and inserts it into the database using RPC (remote procedure call). Supabase Realtime is then used to listen for changes in the database, while MapLibre GL JS in React is employed to draw live location data onto the map. The tutorial also highlights how Protomaps hosted on Supabase Storage can be utilized for the base map. Overall, this solution effectively leverages PostGIS and Supabase Realtime for geospatial applications.