npmpackage.info

pouchdb

🦘 - PouchDB is a pocket-sized database.

9.0.0

16,988

Apache-2.0

JavaScript

37.46 kB

14,696,084 4.4

Installations

npm install pouchdb

Developer Guide

BETA

Typescript

No

Module System

CommonJS, UMD

Node Version

20.11.1

NPM Version

10.7.0 Score

65.8

Supply Chain

77.6

Quality

81.3

Maintenance

100

Vulnerability

98.4

License

Pull Requests

Open

35

Total

4,677

Closed

2,868

Merged

1,774

Issues

Open

122

Total

4,310

Closed

4,188

Releases

9.0.0

Published on 21 Jun 2024

8.0.1

Published on 09 Feb 2023

8.0.0

Published on 15 Dec 2022

7.3.1

Published on 11 Nov 2022

7.3.0

Published on 14 Apr 2022

7.2.2

Published on 27 Jul 2020

View all 69 releases

Contributors

377

View all 377 contributors

Languages

JavaScript

Shell

HTML

JavaScript (98.81%)

Shell (0.68%)

HTML (0.51%)

Developer

pouchdb

Download Statistics

Total Downloads

14,696,084

Last Day

2,470

Last Week

30,188

Last Month

180,793

Last Year

2,095,125

GitHub Statistics

16,988 Stars

5,206 Commits

1,467 Forks

270 Watching

1,555 Branches

377 Contributors

Bundle Size

115.93 kB

Minified

37.46 kB

Minified + Gzipped

Bundlephobia

Package Meta Information

Latest Version

9.0.0

Package Id

pouchdb@9.0.0

Unpacked Size

5.27 MB

Size

1.46 MB

File Count

NPM Version

10.7.0

Node Version

20.11.1

Publised On

21 Jun 2024

Total Downloads

Cumulative downloads

Total Downloads

14,696,084

Last day

-64.3%

2,470

Compared to previous day

Last week

-28.6%

30,188

Compared to previous week

Last month

-5.9%

180,793

Compared to previous month

Last year

-13.4%

2,095,125

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

double-ended-queue fetch-cookie level level-codec level-write-stream leveldown levelup ltgt node-fetch readable-stream spark-md5 through2 uuid vuvuzela

Versions

pouchdb

PouchDB is a pocket-sized database.

Usage

1npm install pouchdb

1var PouchDB = require('pouchdb');
2var db = new PouchDB('my_db');

For full API documentation and guides on PouchDB, see PouchDB.com.

This is the full, batteries-included pouchdb package containing code that is designed for both the Browser and Node.js. For details on PouchDB sub-packages, see the Custom Builds documentation.

Source

PouchDB and its sub-packages are distributed as a monorepo.

For a full list of packages, see the GitHub source.

Stable Version

9.0.0

CRITICAL

0/10

Summary

Arbitrary Code Injection in pouchdb

Affected Versions

< 6.0.5

dependency not pinned by hash detected -- score normalized to 0

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:129: update your workflow using https://app.stepsecurity.io/secureworkflow/pouchdb/pouchdb/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:172: update your workflow using https://app.stepsecurity.io/secureworkflow/pouchdb/pouchdb/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:212: update your workflow using https://app.stepsecurity.io/secureworkflow/pouchdb/pouchdb/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:251: update your workflow using https://app.stepsecurity.io/secureworkflow/pouchdb/pouchdb/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/pouchdb/pouchdb/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/pouchdb/pouchdb/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/pouchdb/pouchdb/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/pouchdb/pouchdb/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/pouchdb/pouchdb/docs.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/pouchdb/pouchdb/docs.yml/master?enable=pin
Info: 0 out of 9 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 1 third-party GitHubAction dependencies pinned

0

Signed-Releases

Determines if the project cryptographically signs release artifacts.

0

Fuzzing

Determines if the project uses fuzzing.

0

SAST

Determines if the project uses static code analysis.

0

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

Reason

45 existing vulnerabilities detected

Details

Warn: Project is vulnerable to: GHSA-2rxp-v6pw-ch6m
Warn: Project is vulnerable to: GHSA-4xqq-m2hx-25v8
Warn: Project is vulnerable to: GHSA-5866-49gr-22v4
Warn: Project is vulnerable to: GHSA-r55c-59qm-vjw6
Warn: Project is vulnerable to: GHSA-vmwr-mc7x-5vc3
Warn: Project is vulnerable to: GHSA-qwcr-r2fm-qrc7
Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
Warn: Project is vulnerable to: GHSA-x9w5-v3q2-3rhw
Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x
Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
Warn: Project is vulnerable to: GHSA-9vvw-cc9w-f27h
Warn: Project is vulnerable to: GHSA-gxpj-cx7g-858c
Warn: Project is vulnerable to: GHSA-jc84-3g44-wf2q
Warn: Project is vulnerable to: GHSA-434g-2637-qmqr
Warn: Project is vulnerable to: GHSA-49q7-c7j4-3p7m
Warn: Project is vulnerable to: GHSA-977x-g7h5-7qgw
Warn: Project is vulnerable to: GHSA-f7q4-pwc6-w24p
Warn: Project is vulnerable to: GHSA-fc9h-whq2-v747
Warn: Project is vulnerable to: GHSA-4gmj-3p3h-gm8h
Warn: Project is vulnerable to: GHSA-rv95-896h-c2vc
Warn: Project is vulnerable to: GHSA-qw6h-vgh9-j6wx
Warn: Project is vulnerable to: GHSA-9qj9-36jm-prpv
Warn: Project is vulnerable to: GHSA-wrvr-8mpx-r7pp
Warn: Project is vulnerable to: GHSA-hxm2-r34f-qmc5
Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3
Warn: Project is vulnerable to: GHSA-vh95-rmgr-6w4m / GHSA-xvch-5gv4-984h
Warn: Project is vulnerable to: GHSA-3fx5-fwvr-xrjg
Warn: Project is vulnerable to: GHSA-w9mr-4mfr-499f
Warn: Project is vulnerable to: GHSA-mwcw-c2x4-8c55
Warn: Project is vulnerable to: GHSA-7mc5-chhp-fmc3
Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g
Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w
Warn: Project is vulnerable to: GHSA-9wv6-86v2-598j
Warn: Project is vulnerable to: GHSA-gqgv-6jq5-jjj9
Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp
Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6
Warn: Project is vulnerable to: GHSA-gcx4-mw62-g8wm
Warn: Project is vulnerable to: GHSA-x6fg-f45m-jf5q
Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
Warn: Project is vulnerable to: GHSA-jgqf-hwc5-hh37
Warn: Project is vulnerable to: GHSA-m6fv-jmcg-4jfg
Warn: Project is vulnerable to: GHSA-cm22-4g7w-348p
Warn: Project is vulnerable to: GHSA-4wf5-vphf-c2xc
Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3
Warn: Project is vulnerable to: GHSA-fhg7-m89q-25r3

Score

4.4

/10

Last Scanned on 2024-12-16

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More

Other packages similar to pouchdb

pouchdb-collections

8.0.1

Map and Set shims for PouchDB

pouchdb-collate

9.0.0

Collation functions for PouchDB map/reduce

pouchdb-errors

9.0.0

Errors exposed by PouchDB.

pouchdb-utils

9.0.0

Unassorted utilities used by PouchDB.