Loading npm security reports…
JSQL-NEO — Rust-powered embedded database with WASM, REST API, B-Tree indexes, WAL, crash recovery
Explicitly starting WebUI exposes an unauthenticated SQL management API on all interfaces by default. Remote callers can query or modify JSON databases in its data directory.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgPackage source references a known benign dynamic code generation pattern.
lib/sqlite_worker.jsView on unpkg · L175Package source references dynamic require/import behavior.
bin/jsql-server-control.jsView on unpkg · L4Package source references weak cryptographic algorithms.
lib/mysql_server.jsView on unpkg · L6This report applies to jsql-neo@5.0.1.
See version security history for other recorded verdicts.
Evidence last updated: .
Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L48Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L48Package source references a known benign dynamic code generation pattern.
lib/sqlite_worker.jsView on unpkg · L175Package source references dynamic require/import behavior.
bin/jsql-server-control.jsView on unpkg · L4Package source references weak cryptographic algorithms.
lib/mysql_server.jsView on unpkg · L6