mongodb
The official MongoDB driver for Node.js
88%
Total Score
healthy
Healthy release backed by active maintenance, attested publishing, and release notes; workflow pinning and security-policy gaps remain.
Health Score Breakdown
A prepare install-time script is present, adding build-time supply-chain surface, though this is not severe on its own and the release has build provenance.
No repository security policy was found, leaving vulnerability-reporting expectations and response guidance less transparent.
All 12 workflows were analyzed with no dangerous findings, untrusted checkouts, or script injections; however, 34 of 36 action references are unpinned and eight workflows grant top-level write permissions, creating avoidable workflow hygiene and credential-scope risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 bson Version ^7.3.2 | — | — |
@mongodb-js/saslprep Version ^1.5.0 | — | — |
mongodb-connection-string-url Version ^7.0.2 | — | — |
Weekly Downloads
Info
- Last Published
- 14 days ago
- Created
- 15 years ago
- Unpacked Size
- 3.4 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.