A simple, minimal PostgreSQL session store for Connect/Express
64%
Total Score
50
100
89
75
100
A prepare script runs during installation or packaging, adding build-time behavior that should be understood, although this signal alone does not indicate a severe problem.
The repository is owned by an individual rather than an organization, so the single registry maintainer represents a relatively thin ownership base.
The package has 31 releases over about 12.5 years, but its latest release was nearly two years ago and it has had no releases in the last 12 months. This is a meaningful maintenance concern despite its historically regular release interval.
The repository recorded zero commits and zero active maintainers in the last three months. This is a recent activity gap, though the repository's recent push and documented release history provide some compensation.
There were no new or closed issues or pull requests in the last month, while 18 pull requests remain open. This suggests limited current maintenance activity.
| Title | Versions | Severity |
|---|---|---|
CVE-2019-15658 connect-pg-simple is vulnerable to Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in versions 0.0.0 - 6.0.1. | 0.0.0 - 6.0.1 | High |
| Dependency | Last Release | Score |
|---|---|---|
pg Version ^8.12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.