A TDS driver, for connecting to MS SQLServer databases.
91%
Total Score
healthy
Active releases and a maintained organization-backed repository make this a healthy dependency, despite unpinned workflow actions.
The package has eight publishing accounts and clear organization backing through the Microsoft domain, though consumer and outside-domain accounts such as pe kim (gmail.com), arthurschreiber (googlemail.com), v-suhame (gmail.com), rossipedia, bretcope, and patriksimek add account-hygiene caution.
All six workflows were analyzed with no high- or medium-severity findings, and permissions are generally scoped at job level. However, all 44 action references are unpinned and the release workflow has a high-confidence adhoc-packages finding, so workflow supply-chain hygiene warrants caution.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
bl Version ^6.1.4 | — | — |
js-md4 Version ^0.3.2 | — | — |
iconv-lite Version ^0.7.0 | — | — |
@types/node Version >=22 | — | — |
@js-joda/core Version ^6.0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.