@electric-sql/pglite

PGlite is a WASM Postgres build packaged into a TypeScript client library that enables you to run Postgres in the browser, Node.js and Bun, with no need to install any other dependencies. It is only 3.7mb gzipped.

Latest 0.5.9

NPM

86%

Total Score

healthy

Frequent releases, active organization-backed development, and verified publishing outweigh workflow pinning and permission gaps.

Health Score Breakdown

Repo tooling

The project uses TypeScript, npm scripts, and tsup for builds, but no security scanning tools were detected; this is a modest transparency and hygiene gap.

Security policy

No repository security policy was found, leaving vulnerability-reporting expectations undocumented.

Version stability

Version 0.5.9 is not a stable major release, but it is a normal release rather than a prerelease and recent prereleases make up 0% of releases, indicating reasonable release discipline.

Workflow audit

The single workflow was fully analyzed with no untrusted checkouts, script injection, or audit findings, but all 113 action uses are unpinned and the workflow has top-level write permissions, creating a meaningful build-integrity hygiene concern.