@tanstack/db
A reactive client store for building super fast apps on sync
94%
Total Score
healthy
Frequent releases, active contributors, and verified provenance outweigh the repository's missing security policy.
Health Score Breakdown
No security policy was found in the repository, leaving vulnerability-reporting expectations undocumented. This is a transparency gap, but active maintenance and security scanning partly compensate.
Version 0.12.3 is not yet a stable major release, which indicates an evolving API, but it is not a prerelease and recent prerelease share is 0%.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-107994 @tanstack/db is vulnerable to Prototype Pollution in versions 0.2.0 - 0.6.10. | 0.2.0 - 0.6.10 | Medium |
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 @tanstack/db-ivm Version 0.1.26 | — | — |
@tanstack/pacer-lite Version ^0.2.1 | — | — |
@standard-schema/spec Version ^1.1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 day ago
- Created
- 1 year ago
- Unpacked Size
- 7.8 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.