Gathering detailed insights and metrics for rxdb
Gathering detailed insights and metrics for rxdb
A fast, local first, reactive Database for JavaScript Applications https://rxdb.info/
Installations
npm install rxdbDeveloper Guide
BETA
Typescript
Yes
Module System
CommonJS, ESM
Min. Node Version
>=18
Node Version
22.16.0
NPM Version
10.9.2
Releases
499
Languages
6
TypeScript
JavaScript
CSS
Dart
HTML
Shell
TypeScript (91.74%)
JavaScript (4.77%)
CSS (2.99%)
Dart (0.3%)
HTML (0.12%)
Shell (0.09%)
Developer
Download Statistics
Total Downloads
0
Last Day
0
Last Week
0
Last Month
0
Last Year
0
GitHub Statistics
Apache-2.0 License
22,493 Stars
12,826 Commits
1,121 Forks
206 Watchers
287 Branches
240 Contributors
Updated on Jul 11, 2025
Maintainers
1
Package Meta Information
Latest Version
16.13.0
Package Id
rxdb@16.13.0
Unpacked Size
7.84 MB
Size
1.40 MB
File Count
1,650
NPM Version
10.9.2
Node Version
22.16.0
Published on
May 30, 2025
Total Downloads
Cumulative downloads
Total Downloads
NaN
Last Day
0%
NaN
Compared to previous day
Last Week
0%
NaN
Compared to previous week
Last Month
0%
NaN
Compared to previous month
Last Year
0%
NaN
Compared to previous year
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dependencies
31
@babel/runtime@types/clone@types/cors@types/express@types/simple-peer@types/wsajvarray-push-at-sort-positionas-typedbroadcast-channelcrypto-jscustom-idle-queuedexieevent-reduce-jsfirebaseget-graphql-from-jsonschemagraphqlgraphql-wsis-my-json-validisomorphic-wsjs-base64jsonschema-key-compressionmingomongodbnatsoblivious-setreconnecting-websocketsimple-peerutilwsz-schema
Peer Dependencies
1
Dev Dependencies
107
@babel/cli@babel/core@babel/plugin-external-helpers@babel/plugin-proposal-class-properties@babel/plugin-proposal-object-rest-spread@babel/plugin-transform-literals@babel/plugin-transform-member-expression-literals@babel/plugin-transform-modules-commonjs@babel/plugin-transform-property-literals@babel/plugin-transform-runtime@babel/plugin-transform-spread@babel/plugin-transform-template-literals@babel/plugin-transform-typescript@babel/polyfill@babel/preset-env@babel/preset-typescript@babel/types@eslint/compat@eslint/eslintrc@eslint/js@firebase/rules-unit-testing@rollup/plugin-commonjs@rollup/plugin-node-resolve@stylistic/eslint-plugin@types/assert@types/core-js@types/cors@types/crypto-js@types/mocha@types/node@types/request@types/request-promise-native@types/source-map-support@typescript-eslint/eslint-plugin@typescript-eslint/parserappwriteassertasync-test-utilbabel-loaderbabel-plugin-transform-class-propertiesbrfschild-process-promisecloneconcurrentlycopy-webpack-plugincorscross-envdeletedependency-checkdisceslinteslint-plugin-importeslint-plugin-jsdocexists-fileexpressexpress-graphqlfake-indexeddbfirebase-toolsget-portglobalsgraphql-subscriptionsgzip-size-clihtml-webpack-pluginkarmakarma-babel-preprocessorkarma-chrome-launcherkarma-coveragekarma-detect-browserskarma-firefox-launcherkarma-ie-launcherkarma-mochakarma-opera-launcherkarma-safari-launcherkarma-sourcemap-loaderkarma-spec-reporterkarma-webpackleveldownmadgemini-css-extract-pluginmochamocha.parallelnconfnode-appwritenode-datachannelnode-pre-gyppre-commitprocessquerystring-es3random-intreadlinerimrafrolluprxdb-oldrxjsshelljssource-map-supportstreamterserterser-webpack-plugints-loadertypescriptwalk-syncwatchwebpackwebpack-bundle-analyzerwebpack-cliwebpack-dev-server
A fast, local-first, reactive Database for JavaScript Applications
What is RxDB?
RxDB (short for Reactive Database) is a local-first, NoSQL-database for JavaScript Applications like Websites, hybrid Apps, Electron-Apps, Progressive Web Apps, Deno and Node.js.
Reactive means that you can not only query the current state, but subscribe to all state changes like the result of a query or even a single field of a document.
This is great for UI-based realtime applications in a way that makes it easy to develop and also has great performance benefits but can also be used to create fast backends in Node.js.
RxDB provides an easy to implement protocol for realtime replication with your existing infrastructure or one of the plugins for HTTP, GraphQL, CouchDB, Websocket, WebRTC, Supabase, Firestore, NATS.
RxDB is based on a storage interface that enables you to swap out the underlying storage engine. This increases code reuse because you can use the same database code for different JavaScript environments by just switching out the storage settings.
Use the quickstart, read the documentation or explore the example projects.
Used by many
RxDB is a proven technology used by thousands of developers worldwide. With its flexibility, RxDB is used in a diverse range of apps and services.
(add yours)
Multiplayer realtime applications
Replicate with your existing infrastructure
RxDB provides an easy to implement, battle-tested Sync Engine for realtime replication with your existing infrastructure.
You do not have to use a specific cloud or backend database. The protocol works by implementing three simple HTTP endpoints.
There are also production-ready plugins to easily replicate with GraphQL, CouchDB, Websocket, WebRTC (P2P),Supabase, Firestore or NATS.
Flexible storage layer
RxDB is based on a storage interface that enables you to swap out the underlying storage engine. This increases code reuse because the same database code can be used in different JavaScript environments by just switching out the storage settings.
You can use RxDB on top of LocalStorage, IndexedDB, OPFS, LokiJS, Dexie.js, in-memory, SQLite, in a WebWorker thread and even on top of FoundationDB and DenoKV.
No matter what kind of runtime you have, as long as it runs JavaScript, it can run RxDB:
Browsers
Node.js
React Native
Capacitor
NativeScript
Flutter
or as an 
Electron Database
All the features that you need
Since its beginning in 2018, RxDB has gained a huge set of features and plugins which makes it a flexible full solution regardless of which type of application you are building. Every feature that you need now or might need in the future is already there.
|
Logging Attachments ORM Conflict Handling Middleware Signals |
State Backup Replication Server Storages Local Documents |
Schema Validation Compression Migration Encryption CRDT Population |
Quick start
Install
1npm install rxdb rxjs --save
Store data
1import { 2 createRxDatabase 3} from 'rxdb/plugins/core'; 4 5/** 6 * For browsers, we use the localstorage based storage. 7 * In other JavaScript runtimes, we can use different storages: 8 * @link https://rxdb.info/rx-storage.html 9 */ 10import { getRxStorageLocalstorage } from 'rxdb/plugins/storage-localstorage'; 11 12// create a database 13const db = await createRxDatabase({ 14 name: 'heroesdb', // the name of the database 15 storage: getRxStorageLocalstorage() 16}); 17 18// add collections 19await db.addCollections({ 20 heroes: { 21 schema: mySchema 22 } 23}); 24 25// insert a document 26await db.heroes.insert({ 27 name: 'Bob', 28 healthpoints: 100 29});
Query data once
1const aliveHeroes = await db.heroes.find({ 2 selector: { 3 healthpoints: { 4 $gt: 0 5 } 6 } 7}).exec(); // the exec() returns the result once
Observe a Query
1await db.heroes.find({ 2 selector: { 3 healthpoints: { 4 $gt: 0 5 } 6 } 7}) 8.$ // the $ returns an observable that emits each time the result set of the query changes 9.subscribe(aliveHeroes => console.dir(aliveHeroes));
Get started
Get started now by reading the docs or exploring the example-projects.
Support and Contribute
- Leave a Star ☝️
- Check out how you can contribute to this project.
- Read this when you have found a bug
- Buy access to the premium plugins
- Join us at discord to get help
- Follow us at LinkedIn
More content
Angular Database, Frontend Database, localStorage, React Database, Browser Database, React Native Database, PWA Database, In-memory NoSQL database, JSON database, Angular IndexedDB, React IndexedDB, Optimistic UI, local database, React Native Encryption, Vue Database, jQuery Database, Vue IndexedDB, Firestore Alternative, Firebase Realtime Database Alternative, Ionic Storage
No vulnerabilities found.
Reason
30 commit(s) and 15 issue activity found in the last 90 days -- score normalized to 10
Reason
no dangerous workflow patterns detected
Reason
license file detected
Details
- Info: project has a license file: LICENSE.txt:0
- Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0
Reason
packaging workflow detected
Details
- Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release.yml:20
Reason
binaries present in source code
Details
- Warn: binary detected: examples/angular/android/gradle/wrapper/gradle-wrapper.jar:1
Reason
Found 0/24 approved changesets -- score normalized to 0
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yml:26
- Warn: no topLevel permission defined: .github/workflows/build.yml:1
- Warn: no topLevel permission defined: .github/workflows/cloudflare-pages.yml:1
- Warn: no topLevel permission defined: .github/workflows/main.yml:1
- Warn: no topLevel permission defined: .github/workflows/prevent-commit-to-generated.yml:1
- Warn: no topLevel permission defined: .github/workflows/release.yml:1
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
branch protection not enabled on development/release branches
Details
- Warn: branch protection not enabled for branch 'master'
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 25 are checked with a SAST tool
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/build.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/build.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/build.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cloudflare-pages.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/cloudflare-pages.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/cloudflare-pages.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/cloudflare-pages.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:747: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:751: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:767: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:969: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:971: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:976: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:1006: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:1014: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:1027: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:100: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:107: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:254: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:527: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:529: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:547: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:717: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:721: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:738: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:804: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:808: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:825: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:217: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:219: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:224: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:244: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:631: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:633: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:776: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:780: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:795: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:883: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:885: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:126: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:155: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:160: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:299: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:301: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:306: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:326: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:328: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:333: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:345: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:417: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:419: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:424: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:557: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:559: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:579: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:594: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:602: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:604: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:622: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:168: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:170: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:175: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:194: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:362: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:366: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:371: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:400: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:456: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:458: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:463: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:475: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:480: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:485: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:490: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:496: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:501: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:660: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:662: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:666: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:679: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prevent-commit-to-generated.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/prevent-commit-to-generated.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/release.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/release.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/release.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/release.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/release.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:131: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/rxdb/release.yml/master?enable=pin
- Warn: npmCommand not pinned by hash: examples/angular/reinstall.sh:8
- Warn: npmCommand not pinned by hash: examples/electron/reinstall.sh:7
- Warn: npmCommand not pinned by hash: examples/flutter/javascript/reinstall.sh:7
- Warn: npmCommand not pinned by hash: examples/graphql/reinstall.sh:7
- Warn: npmCommand not pinned by hash: examples/react-native/reinstall.sh:7
- Warn: npmCommand not pinned by hash: examples/react/reinstall.sh:7
- Warn: npmCommand not pinned by hash: examples/supabase/reinstall.sh:7
- Warn: npmCommand not pinned by hash: examples/svelte/reinstall.sh:7
- Warn: npmCommand not pinned by hash: examples/tauri/reinstall.sh:7
- Warn: npmCommand not pinned by hash: examples/vite-vanilla-ts/reinstall.sh:7
- Warn: npmCommand not pinned by hash: examples/vue/reinstall.sh:7
- Warn: npmCommand not pinned by hash: scripts/cloud-signaling-script.sh:5
- Warn: npmCommand not pinned by hash: .github/workflows/build.yml:28
- Warn: npmCommand not pinned by hash: .github/workflows/build.yml:34
- Warn: npmCommand not pinned by hash: .github/workflows/main.yml:53
- Warn: npmCommand not pinned by hash: .github/workflows/main.yml:187
- Warn: npmCommand not pinned by hash: .github/workflows/main.yml:210
- Warn: npmCommand not pinned by hash: .github/workflows/main.yml:237
- Warn: npmCommand not pinned by hash: .github/workflows/main.yml:386
- Warn: npmCommand not pinned by hash: .github/workflows/main.yml:394
- Warn: npmCommand not pinned by hash: .github/workflows/main.yml:508
- Warn: npmCommand not pinned by hash: .github/workflows/main.yml:586
- Warn: npmCommand not pinned by hash: .github/workflows/main.yml:592
- Warn: npmCommand not pinned by hash: .github/workflows/main.yml:146
- Warn: npmCommand not pinned by hash: .github/workflows/main.yml:282
- Warn: npmCommand not pinned by hash: .github/workflows/main.yml:284
- Warn: npmCommand not pinned by hash: .github/workflows/main.yml:318
- Warn: npmCommand not pinned by hash: .github/workflows/main.yml:351
- Warn: npmCommand not pinned by hash: .github/workflows/main.yml:438
- Warn: npmCommand not pinned by hash: .github/workflows/main.yml:449
- Warn: npmCommand not pinned by hash: .github/workflows/main.yml:611
- Warn: npmCommand not pinned by hash: .github/workflows/main.yml:618
- Warn: npmCommand not pinned by hash: .github/workflows/main.yml:756
- Warn: npmCommand not pinned by hash: .github/workflows/main.yml:763
- Warn: npmCommand not pinned by hash: .github/workflows/main.yml:639
- Warn: npmCommand not pinned by hash: .github/workflows/main.yml:646
- Warn: npmCommand not pinned by hash: .github/workflows/main.yml:726
- Warn: npmCommand not pinned by hash: .github/workflows/main.yml:733
- Warn: npmCommand not pinned by hash: .github/workflows/main.yml:813
- Warn: npmCommand not pinned by hash: .github/workflows/main.yml:820
- Warn: npmCommand not pinned by hash: .github/workflows/main.yml:890
- Warn: npmCommand not pinned by hash: .github/workflows/main.yml:895
- Warn: npmCommand not pinned by hash: .github/workflows/main.yml:119
- Warn: npmCommand not pinned by hash: .github/workflows/main.yml:537
- Warn: npmCommand not pinned by hash: .github/workflows/main.yml:544
- Warn: npmCommand not pinned by hash: .github/workflows/main.yml:687
- Warn: npmCommand not pinned by hash: .github/workflows/main.yml:694
- Warn: npmCommand not pinned by hash: .github/workflows/main.yml:785
- Warn: npmCommand not pinned by hash: .github/workflows/main.yml:792
- Warn: npmCommand not pinned by hash: .github/workflows/main.yml:988
- Warn: npmCommand not pinned by hash: .github/workflows/main.yml:1033
- Warn: npmCommand not pinned by hash: .github/workflows/main.yml:1038
- Warn: npmCommand not pinned by hash: .github/workflows/release.yml:73
- Warn: npmCommand not pinned by hash: .github/workflows/release.yml:85
- Info: 0 out of 69 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 28 third-party GitHubAction dependencies pinned
- Info: 0 out of 54 npmCommand dependencies pinned
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
23 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-9v85-q87q-g4vg
- Warn: Project is vulnerable to: GHSA-r285-q736-9v95
- Warn: Project is vulnerable to: RUSTSEC-2024-0413
- Warn: Project is vulnerable to: RUSTSEC-2024-0416
- Warn: Project is vulnerable to: GHSA-pg9f-39pc-qf8g
- Warn: Project is vulnerable to: RUSTSEC-2025-0024
- Warn: Project is vulnerable to: RUSTSEC-2024-0412
- Warn: Project is vulnerable to: RUSTSEC-2024-0418
- Warn: Project is vulnerable to: RUSTSEC-2024-0411
- Warn: Project is vulnerable to: RUSTSEC-2024-0417
- Warn: Project is vulnerable to: RUSTSEC-2024-0414
- Warn: Project is vulnerable to: GHSA-wrw7-89jp-8q8g
- Warn: Project is vulnerable to: RUSTSEC-2024-0429
- Warn: Project is vulnerable to: RUSTSEC-2024-0415
- Warn: Project is vulnerable to: RUSTSEC-2024-0420
- Warn: Project is vulnerable to: RUSTSEC-2024-0419
- Warn: Project is vulnerable to: RUSTSEC-2024-0370
- Warn: Project is vulnerable to: GHSA-c86p-w88r-qvqr
- Warn: Project is vulnerable to: RUSTSEC-2023-0071
- Warn: Project is vulnerable to: RUSTSEC-2022-0088 / GHSA-28m8-9j7v-x499
- Warn: Project is vulnerable to: GHSA-57fm-592m-34r7
- Warn: Project is vulnerable to: GHSA-rr8g-9fpq-6wmg
- Warn: Project is vulnerable to: RUSTSEC-2025-0023
Score
3.7
/10
Last Scanned on 2025-06-30
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More