mysql

A node.js driver for mysql. It is written in JavaScript, does not require compiling, and is 100% MIT licensed.

Latest 2.18.1

NPM

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Attestations

Are you affected? Scan for Free

Health Score Breakdown

Release history

The package has 66 releases and a historically regular median interval of about 22 days, but its latest release was over six years ago and there were no releases in the last 12 months.

Build provenance

The release has no provenance attestation or trusted-publisher record, so the artifact's build origin is not independently verifiable.

Repo commit activity

The repository recorded zero commits and zero active maintainers over the last three months, reinforcing concern about current maintenance capacity.

Repo issue activity

There were no new or closed issues in the last month and no merged pull requests, while 141 issues and 35 pull requests remain open; this suggests limited recent operational activity.

Repo tooling

No build tools or security scanning tools were detected in the repository, which weakens evidence of automated maintenance and security checks.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-10224 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. mysql is vulnerable to SQL Injection in versions 0.0.1 - 2.18.1.	0.0.1 - 2.18.1	High
CVE-2019-14939 mysql is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in versions 2.17.1 - 2.17.1.	2.17.1 - 2.17.1	Medium
CVE-2015-9244 mysql is vulnerable to Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in versions 0.0.0 - 2.0.0-alpha7.	0.0.0 - 2.0.0-alpha7	Critical