@mikro-orm/sql
Clear licensing, bundled typings, release notes, and build provenance make integration and publication transparent. The workflow audit found high-confidence template-injection patterns and one release workflow with broad write access, so CI hygiene deserves attention.
88%
Total Score
100
100
100
88
100
Health Score Breakdown
All four workflows were analyzed, all 39 action references are pinned, and no untrusted checkout or script-injection trigger was found. High-confidence template-injection findings in release and test workflows, plus a release workflow with top-level write access and ad hoc package installs, are workflow hygiene concerns, but no trigger-and-sink combination makes them a severe health risk here.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-645757 @mikro-orm/sql is vulnerable to Incorrect Control Flow Implementation in versions 0.0.1 - 7.1.8. | 0.0.1 - 7.1.8 | Low |
CVE-2026-44680 @mikro-orm/sql is vulnerable to Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in versions 0.0.0 - 7.0.13. | 0.0.0 - 7.0.13 | High |
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 kysely Version 0.29.6 | — | — |
Weekly Downloads
Info
- Last Published
- 3 days ago
- Created
- 9 months ago
- Unpacked Size
- 1.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.