npmpackage.info

Gathering detailed insights and metrics for sequelize

Other packages similar to sequelize

sequelize-pool

8.0.1

Resource pooling for Node.JS

sequelize-cli

6.6.3

The Sequelize CLI

@types/sequelize

6.12.0

Stub TypeScript definitions entry for sequelize, which provides its own types definitions

egg-sequelize

6.0.0

egg Sequelize plugin

Gathering detailed insights and metrics for sequelize

sequelize - 6.37.7 | npmpackage.info

sequelize

Feature-rich ORM for modern Node.js and TypeScript, it supports PostgreSQL (with JSON and JSONB support), MySQL, MariaDB, SQLite, MS SQL Server, Snowflake, Oracle DB (v6), DB2 and DB2 for IBM i.

6.37.7

30,080

MIT

TypeScript

2.77 MB

6.3

Installations

npm install sequelize

Developer Guide

BETA

Typescript

Yes

Module System

CommonJS, ESM

Min. Node Version

>=10.0.0

Node Version

18.20.7

NPM Version

10.8.2 Pull Requests

Open

90

Total

6,850

Closed

1,816

Merged

4,944

Issues

Open

884

Total

10,396

Closed

9,512

Releases

487

v6.37.7

Updated on Mar 28, 2025

v7.0.0-alpha.46

Updated on Mar 22, 2025

v6.37.6

Updated on Mar 04, 2025

v7.0.0-alpha.45

Updated on Feb 17, 2025

v7.0.0-alpha.44

Updated on Jan 27, 2025

v6.37.5

Updated on Oct 25, 2024

View All 487 releases

Languages

TypeScript

JavaScript

Shell

Batchfile

TypeScript (50.66%)

JavaScript (49.09%)

Shell (0.25%)

Developer

sequelize

Download Statistics

Total Downloads

Last Day

Last Week

Last Month

Last Year

GitHub Statistics

MIT License

30,080 Stars

11,564 Commits

4,297 Forks

405 Watchers

41 Branches

1,068 Contributors

Updated on Jul 14, 2025

Sponsor this package

https://opencollective.com/sequelize

Maintainers

View All 1,068 Contributors

Package Meta Information

Latest Version

6.37.7

Package Id

sequelize@6.37.7

Unpacked Size

2.77 MB

Size

593.49 kB

File Count

300

NPM Version

10.8.2

Node Version

18.20.7

Published on

Mar 28, 2025

Total Downloads

Cumulative downloads

Total Downloads

NaN

Last Day

NaN

Compared to previous day

Last Week

NaN

Compared to previous week

Last Month

NaN

Compared to previous month

Last Year

NaN

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

@types/debug @types/validator debug dottie inflection lodash moment moment-timezone pg-connection-string retry-as-promised semver sequelize-pool toposort-class uuid validator wkx

Dev Dependencies

Sequelize

Sequelize is an easy-to-use and promise-based Node.js ORM tool for Postgres, MySQL, MariaDB, SQLite, DB2, Microsoft SQL Server, and Snowflake. It features solid transaction support, relations, eager and lazy loading, read replication and more.

Would you like to contribute? Read our contribution guidelines to know more. There are many ways to help! 😃

🚀 Seeking New Maintainers for Sequelize! 🚀

We're looking for new maintainers to help finalize and release the next major version of Sequelize! If you're passionate about open-source and database ORMs, we'd love to have you onboard.

💰 Funding Available

We distribute $2,500 per quarter among maintainers and have additional funds for full-time contributions.

🛠️ What You’ll Work On

Finalizing and releasing Sequelize’s next major version
Improving TypeScript support and database integrations
Fixing critical issues and shaping the ORM’s future

🤝 How to Get Involved

Interested? Join our Slack and reach out to @WikiRik or @sdepold:
➡️ sequelize.org/slack

We’d love to have you on board! 🚀

:computer: Getting Started

Ready to start using Sequelize? Head to sequelize.org to begin!

Our Getting Started guide for Sequelize 6 (stable)

:money_with_wings: Supporting the project

Do you like Sequelize and would like to give back to the engineering team behind it?

We have recently created an OpenCollective based money pool which is shared amongst all core maintainers based on their contributions. Every support is wholeheartedly welcome. ❤️

:pencil: Major version changelog

Please find upgrade information to major versions here:

Upgrade from v5 to v6

:book: Resources

:wrench: Tools

:speech_balloon: Translations

English (Official)
中文文档 (Unofficial)

:warning: Responsible disclosure

If you have security issues to report, please refer to our Responsible Disclosure Policy for more details.

Critical

9.8/10

Summary

SQL Injection in sequelize

Affected Versions

>= 5.0.0, < 5.15.1

Patched Versions

5.15.1

Critical

9.8/10

Summary

SQL Injection in sequelize

Affected Versions

< 4.44.3

Patched Versions

4.44.3

Critical

9.8/10

Summary

SQL Injection via GeoJSON in sequelize

Affected Versions

>= 3.4.0, < 3.23.6

Patched Versions

3.23.6

Critical

10/10

Summary

Sequelize - Default support for “raw attributes” when using parentheses

Affected Versions

< 6.29.0

Patched Versions

6.29.0

Critical

10/10

Summary

Duplicate advisory: Sequelize vulnerable to Improper Filtering of Special Elements

Affected Versions

<= 6.28.2

Patched Versions

6.29.0

Critical

10/10

Summary

Unsafe fall-through in getWhereConditions

Affected Versions

< 6.28.1

Patched Versions

6.28.1

Critical

10/10

Summary

Sequelize vulnerable to SQL Injection via replacements

Affected Versions

< 6.19.1

Patched Versions

6.19.1

Critical

9.8/10

Summary

SQL Injection in sequelize

Affected Versions

< 3.35.1

Patched Versions

3.35.1

Critical

9.8/10

Summary

SQL Injection in sequelize

Affected Versions

>= 5.0.0, < 5.8.11

Patched Versions

5.8.11

Critical

9.8/10

Summary

SQL Injection in sequelize

Affected Versions

>= 4.0.0, < 4.44.3

Patched Versions

4.44.3

Critical

9.8/10

Summary

SQL Injection in sequelize

Affected Versions

< 3.35.1

Patched Versions

3.35.1

High

7.5/10

Summary

SQL Injection in sequelize

Affected Versions

>= 5.0.0, < 5.3.0

Patched Versions

5.3.0

High

7.5/10

Summary

SQL Injection in sequelize

Affected Versions

<= 3.19.3

Patched Versions

3.20.0

High

0/10

Summary

SQL Injection in sequelize

Affected Versions

<= 2.0.0-rc7

Patched Versions

2.0.0-rc8

High

0/10

Summary

NoSQL Injection in sequelize

Affected Versions

< 4.12.0

Patched Versions

4.12.0

High

0/10

Summary

SQL Injection in sequelize

Affected Versions

< 3.17.0

Patched Versions

3.17.0

High

0/10

Summary

Potential SQL Injection in sequelize

Affected Versions

<= 2.1.3

Patched Versions

3.0.0

Moderate

5.3/10

Summary

Sequelize information disclosure vulnerability

Affected Versions

< 6.28.1

Patched Versions

6.28.1

Moderate

0/10

Summary

Denial of Service in sequelize

Affected Versions

< 4.44.4

Patched Versions

4.44.4

Moderate

0/10

Summary

SQL Injection in sequelize

Affected Versions

<= 1.7.0-alpha2

Patched Versions

1.7.0

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Maintained

Determines if the project is "actively maintained".

10

Security-Policy

Determines if the project has published a security policy.

10

License

Determines if the project has defined a license.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

SAST

Determines if the project uses static code analysis.

9

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

5

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

Fuzzing

Determines if the project uses fuzzing.

Score

6.3

/10

Last Scanned on 2025-07-07

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More