albe/node-event-storage

This system is an embedded, append-only event store library for Node.js designed for event-sourced architectures. It provides core capabilities for committing and querying events via streams, managing durable consumer positions, and maintaining index-backed metadata matching. The implementation emphasizes crash safety with automatic torn-write repair and supports concurrent access through file-watcher synchronization and read-only modes.

Added a new \bench/\ directory containing JavaScript benchmark scripts that compare the current implementation against the previous stable version. The suite includes benchmarks for event store commit/read performance, index add/range operations, metadata matcher throughput (including raw buffer matching optimizations), read scenarios (full scans, range scans, stream joins), and scalability metrics (startup time, write/read latency as partitions and indexes grow).

bench · high confidence

This entry introduces the initial version of the event-storage library, providing an embedded, append-only event store for Node.js. The codebase is converted to ES Modules (ESM) only, with a CJS fallback available for version 0.x users. The public API includes EventStore for committing and querying events, EventStream for reading streams with fluent range/direction options, Consumer for durable position tracking, and CommitCondition for Dynamic Consistency Boundaries (DCB). The release also includes extensive documentation (README, mkdocs site, AGENTS.md), configuration files for ReadTheDocs and GitHub Actions, and a .gitignore tailored to the project's build and test artifacts.

(repo-wide) · high confidence

This change introduces the core event-sourcing library, providing a persistent, index-backed event store with durable consumer support. Users can now commit events to streams, query them using a flexible selector and matcher system (including hierarchical stream names and type/tag accessors), and consume events via durable consumers that persist their state and position. The implementation includes a monotonic clock for event ordering, an LRU file handle pool for performance, and a directory watcher for real-time stream updates.

src · high confidence

The index module now includes a ReadOnlyIndex class that extends ReadableIndex to monitor the underlying index file for external modifications. When the file is appended to or truncated by another process, the index automatically updates its internal state and emits 'append' or 'truncate' events, allowing consumers to react to changes without manual polling. This complements the existing ReadableIndex and WritableIndex classes, providing a robust way to handle concurrent access scenarios where the index file might be modified externally.

src/Index · high confidence

The storage layer now includes a dedicated ReadOnlyStorage class that enables append-only, read-only access to existing data directories. This mode uses a file watcher to automatically detect and sync new partitions and index files as they appear on disk, emitting events for changes without requiring manual rescans. Additionally, the WritableStorage component now features automatic torn-write repair: on open, it scans partitions for incomplete writes, truncates corrupted data, and rebuilds lagging indexes to ensure data consistency before becoming ready.

src/Storage · high confidence

The src/utils directory now includes several new helper modules that standardize and optimize core operations. apiHelpers.js normalizes constructor overloads and argument types for commit and consumer APIs, ensuring consistent behavior across different call signatures. fsUtil.js introduces robust file-system utilities, including support for resolving paths with the \~/ home-directory shorthand and recursive directory scanning with regex-based file matching. metadataUtil.js provides a high-performance, pre-compiled matcher engine that uses WeakMap caching to efficiently evaluate document properties against operator-based queries (such as $eq, $gt, and $has). Additionally, dcbUtil.js adds support for compiling DcbQuery objects into selector-algebra arrays, while deprecations.js centralizes one-time deprecation warning emissions to reduce console noise.

src/utils · high confidence

Added ReadOnlyPartition, a new class that extends ReadablePartition to automatically sync its size with the underlying file and emit 'append' or 'truncate' events when the file changes, enabling safe monitoring of externally modified partition files. The underlying ReadablePartition and WritablePartition implementations were refactored to improve buffer handling: the default read buffer size was increased to 64KB, dirty reads are now explicitly configurable (defaulting to true for WritablePartition), and internal methods like prepareReadBufferBackwards were fixed to correctly consider the write buffer for unflushed data. Additionally, partition metadata is now read from the file header upon opening, and file handle pooling semantics were tightened to avoid processing watcher events after closure.

src/Partition · high confidence

Added crash-safety and memory consumption stress tests; Initial test suite for core storage and eventing components.

The project updates its core dependencies, including Mocha to 12.0.0, c8 to 12.0.0, and mkdirp to 3.0.1, while raising the minimum Node.js engine requirement to 20.0. A new benchmarking suite (event-storage-bench) has been added to the repository, utilizing the benchmark and beautify-benchmark libraries to measure performance against the event-storage package.

(dependencies) · high confidence

Written by watchdog.canine.dev from the codebase's own history, inside the signed delivery this page is composed from.

• CAI 58 → 59 (+1.3)
• Rubric changed (rubric-2026.08.19 → rubric-2026.09.15) — scores are not directly comparable.

• Code Health 48 → 48 (-0.7)
• Architecture 87 → 83 (-3.9)
• Maturity 76 → 75 (-0.5)
• Readiness 57 → 61 (+4.7)
• Security 68 → 82 (+14.4)

• Coverage not included — suite not readable by the collector
• Dependency hygiene not measured — dependency manifest found but not parsed for hygiene
• High CVE: [GHSA redacted] (package-lock.json)
• High CVE: [GHSA redacted] (package-lock.json)
• High CVE: [GHSA redacted] (package-lock.json)
• High vulnerability: [GHSA redacted] (package-lock.json)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• LLM evaluation failed
• Low CVE: [GHSA redacted] (package-lock.json)
• No exposed public API
• Off-boarding risk: anonymized user #1
• …and 10 more

• Documentation: no usage examples (README.md)
• EventStore.ensureStreams (cognitive 27) (src/EventStore.js)
• High CVE: [GHSA redacted] (package-lock.json)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• …and 19 more

• 7 commits — 7 feature/other, 0 fixes

• (repo) — 4 commits
• (root) — 3 commits

• change: Bump brace-expansion from 5.0.6 to 5.0.12
• change: Bump mocha from 12.0.0 to 12.0.1
• change: Bump serialize-javascript and mocha
• change: Merge pull request #341 from albe/dependabot/npm_and_yarn/fs-extra-11.4.0
• change: Merge pull request #343 from albe/dependabot/npm_and_yarn/multi-67416dcff4
• change: Merge pull request #345 from albe/dependabot/npm_and_yarn/mocha-12.0.1
• change: Merge pull request #346 from albe/dependabot/npm_and_yarn/brace-expansion-5.0.12

Written by watchdog.canine.dev from the codebase's own history, inside the signed delivery this page is composed from.

albe/node-event-storage was measured the same way every project in this corpus was: the same rubric, at a pinned commit, with the result published in full. Point a surveyor at a repository you know and see whether you agree with it.