@apostrophecms/db-connect
Database connection library and dump/restore tools for ApostropheCMS
68%
Total Score
caution
Usable with caveats: active releases and solid package documentation, but source transparency is limited.
Health Score Breakdown
No build attestation, trusted publisher, or staged publishing is reported, so the connection between source and published artifact cannot be independently verified.
Three of four publishing accounts use the apostrophecms.com domain, suggesting organizational continuity. bodonkey (gmail.com) is a consumer-domain publishing account, creating a modest account-hygiene concern rather than proving a weak maintainer base.
No type declarations are included, which is a real integration drawback for a database API consumed by typed JavaScript projects.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-254207 New @apostrophecms/db-connect is vulnerable to Prototype Pollution in versions 0.0.1 - 1.0.2. | 0.0.1 - 1.0.2 | High |
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 pg Version ^8.23.0 | — | — |
better-sqlite3 Version ^12.11.1 | — | — |
@apostrophecms/emulate-mongo-3-driver Version ^1.0.7 | — | — |
Weekly Downloads
Info
- Last Published
- 15 days ago
- Created
- 5 months ago
- Unpacked Size
- 0.5 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.