pg-connection-string
Functions for dealing with a PostgreSQL connection string
91%
Total Score
healthy
Healthy: regular releases and an actively maintained source repository support dependable use.
Health Score Breakdown
No repository security policy was found. This is a transparency gap, but it is outweighed by active maintenance and the presence of Dependabot scanning.
Both workflows use read-only permissions and the audit found no injection or high-severity findings. However, all 9 analyzed action references are unpinned, leaving a supply-chain hygiene gap.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-554446 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. pg-connection-string is vulnerable to Prototype Pollution in versions 2.6.0 - 2.12.0. | 2.6.0 - 2.12.0 | Medium |
Package versions
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 12 days ago
- Created
- 12 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.