npmpackage.info

Gathering detailed insights and metrics for sequelize

Other packages similar to sequelize

sequelize-pool

8.0.1

Resource pooling for Node.JS

sequelize-cli

6.6.3

The Sequelize CLI

@types/sequelize

4.28.20

TypeScript definitions for sequelize

egg-sequelize

6.0.0

egg Sequelize plugin

Gathering detailed insights and metrics for sequelize

sequelize - 6.37.7 | npmpackage.info

sequelize

Feature-rich ORM for modern Node.js and TypeScript, it supports PostgreSQL (with JSON and JSONB support), MySQL, MariaDB, SQLite, MS SQL Server, Snowflake, Oracle DB (v6), DB2 and DB2 for IBM i.

6.37.7

30,006

MIT

TypeScript

327.00 kB

417,590,178 6.5

Installations

npm install sequelize

Developer Guide

BETA

Typescript

Yes

Module System

CommonJS, ESM

Min. Node Version

>=10.0.0

Node Version

18.20.7

NPM Version

10.8.2 Score

88.2

Supply Chain

92.8

Quality

85.2

Maintenance

100

Vulnerability

99.6

License

Pull Requests

Open

89

Total

6,816

Closed

1,800

Merged

4,927

Issues

Open

878

Total

10,389

Closed

9,511

Releases

487

v6.37.7

Updated on Mar 28, 2025

v7.0.0-alpha.46

Updated on Mar 22, 2025

v6.37.6

Updated on Mar 04, 2025

v7.0.0-alpha.45

Updated on Feb 17, 2025

v7.0.0-alpha.44

Updated on Jan 27, 2025

v6.37.5

Updated on Oct 25, 2024

View All 487 releases

Languages

TypeScript

JavaScript

Shell

Batchfile

TypeScript (50.66%)

JavaScript (49.09%)

Shell (0.25%)

Developer

sequelize

Download Statistics

Total Downloads

417,590,178

Last Day

305,782

Last Week

1,910,148

Last Month

8,165,385

Last Year

99,223,980

GitHub Statistics

MIT License

30,006 Stars

11,517 Commits

4,294 Forks

404 Watchers

41 Branches

1,070 Contributors

Updated on May 30, 2025

Bundle Size

1.74 MB

Minified

327.00 kB

Minified + Gzipped

Bundlephobia

Sponsor this package

https://opencollective.com/sequelize

Maintainers

View All 1,070 Contributors

Package Meta Information

Latest Version

6.37.7

Package Id

sequelize@6.37.7

Unpacked Size

2.77 MB

Size

593.49 kB

File Count

300

NPM Version

10.8.2

Node Version

18.20.7

Published on

Mar 28, 2025

Total Downloads

Cumulative downloads

Total Downloads

417,590,178

Last Day

1.2%

305,782

Compared to previous day

Last Week

-3.7%

1,910,148

Compared to previous week

Last Month

7.2%

8,165,385

Compared to previous month

Last Year

15.8%

99,223,980

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

@types/debug @types/validator debug dottie inflection lodash moment moment-timezone pg-connection-string retry-as-promised semver sequelize-pool toposort-class uuid validator wkx

Dev Dependencies

Sequelize

Sequelize is an easy-to-use and promise-based Node.js ORM tool for Postgres, MySQL, MariaDB, SQLite, DB2, Microsoft SQL Server, and Snowflake. It features solid transaction support, relations, eager and lazy loading, read replication and more.

Would you like to contribute? Read our contribution guidelines to know more. There are many ways to help! 😃

🚀 Seeking New Maintainers for Sequelize! 🚀

We're looking for new maintainers to help finalize and release the next major version of Sequelize! If you're passionate about open-source and database ORMs, we'd love to have you onboard.

💰 Funding Available

We distribute $2,500 per quarter among maintainers and have additional funds for full-time contributions.

🛠️ What You’ll Work On

Finalizing and releasing Sequelize’s next major version
Improving TypeScript support and database integrations
Fixing critical issues and shaping the ORM’s future

🤝 How to Get Involved

Interested? Join our Slack and reach out to @WikiRik or @sdepold:
➡️ sequelize.org/slack

We’d love to have you on board! 🚀

:computer: Getting Started

Ready to start using Sequelize? Head to sequelize.org to begin!

Our Getting Started guide for Sequelize 6 (stable)

:money_with_wings: Supporting the project

Do you like Sequelize and would like to give back to the engineering team behind it?

We have recently created an OpenCollective based money pool which is shared amongst all core maintainers based on their contributions. Every support is wholeheartedly welcome. ❤️

:pencil: Major version changelog

Please find upgrade information to major versions here:

Upgrade from v5 to v6

:book: Resources

:wrench: Tools

:speech_balloon: Translations

English (Official)
中文文档 (Unofficial)

:warning: Responsible disclosure

If you have security issues to report, please refer to our Responsible Disclosure Policy for more details.

Critical

9.8/10

Summary

SQL Injection in sequelize

Affected Versions

>= 5.0.0, < 5.15.1

Patched Versions

5.15.1

Critical

9.8/10

Summary

SQL Injection in sequelize

Affected Versions

< 4.44.3

Patched Versions

4.44.3

Critical

9.8/10

Summary

SQL Injection via GeoJSON in sequelize

Affected Versions

>= 3.4.0, < 3.23.6

Patched Versions

3.23.6

Critical

10/10

Summary

Sequelize - Default support for “raw attributes” when using parentheses

Affected Versions

< 6.29.0

Patched Versions

6.29.0

Critical

10/10

Summary

Duplicate advisory: Sequelize vulnerable to Improper Filtering of Special Elements

Affected Versions

<= 6.28.2

Patched Versions

6.29.0

Critical

10/10

Summary

Unsafe fall-through in getWhereConditions

Affected Versions

< 6.28.1

Patched Versions

6.28.1

Critical

10/10

Summary

Sequelize vulnerable to SQL Injection via replacements

Affected Versions

< 6.19.1

Patched Versions

6.19.1

Critical

9.8/10

Summary

SQL Injection in sequelize

Affected Versions

< 3.35.1

Patched Versions

3.35.1

Critical

9.8/10

Summary

SQL Injection in sequelize

Affected Versions

>= 5.0.0, < 5.8.11

Patched Versions

5.8.11

Critical

9.8/10

Summary

SQL Injection in sequelize

Affected Versions

>= 4.0.0, < 4.44.3

Patched Versions

4.44.3

Critical

9.8/10

Summary

SQL Injection in sequelize

Affected Versions

< 3.35.1

Patched Versions

3.35.1

High

7.5/10

Summary

SQL Injection in sequelize

Affected Versions

>= 5.0.0, < 5.3.0

Patched Versions

5.3.0

High

7.5/10

Summary

SQL Injection in sequelize

Affected Versions

<= 3.19.3

Patched Versions

3.20.0

High

0/10

Summary

SQL Injection in sequelize

Affected Versions

<= 2.0.0-rc7

Patched Versions

2.0.0-rc8

High

0/10

Summary

NoSQL Injection in sequelize

Affected Versions

< 4.12.0

Patched Versions

4.12.0

High

0/10

Summary

SQL Injection in sequelize

Affected Versions

< 3.17.0

Patched Versions

3.17.0

High

0/10

Summary

Potential SQL Injection in sequelize

Affected Versions

<= 2.1.3

Patched Versions

3.0.0

Moderate

5.3/10

Summary

Sequelize information disclosure vulnerability

Affected Versions

< 6.28.1

Patched Versions

6.28.1

Moderate

0/10

Summary

Denial of Service in sequelize

Affected Versions

< 4.44.4

Patched Versions

4.44.4

Moderate

0/10

Summary

SQL Injection in sequelize

Affected Versions

<= 1.7.0-alpha2

Patched Versions

1.7.0

10

Security-Policy

Determines if the project has published a security policy.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Maintained

Determines if the project is "actively maintained".

10

License

Determines if the project has defined a license.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

SAST

Determines if the project uses static code analysis.

9

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

7

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

0

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

Fuzzing

Determines if the project uses fuzzing.

Score

6.5

/10

Last Scanned on 2025-05-26

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More