Version 1.4.4-r.1 • License MIT
One-Line Verdict
"Stable for production use."
Caution
Actively Maintained
2 CVE History
Historical vulnerabilities found.
74.1 KB
Light footprint.
0
Niche adoption.
Package Payload
0 Direct
Clean dependency structure.
Cold-Start Impact
+1 ms
Estimated execution overhead on standard hardware.
Current Threat Level
Risk Detected
Our audit detected 2 active or historical security flags. Critical CVEs have been mapped to this library.
Accuracy Protocol
Scanned against OSV.dev (Google Open Source) databases. Last Deep-Scan: 2026.
Is @duckdb/node-bindings too heavy? Compare it with these industry standards:
"[Node](https://nodejs.org/) bindings to the [DuckDB C API](https://duckdb.org/docs/api/c/overview)."
@duckdb/node-bindings is used to facilitate high-performance Node.js workflows. It provides a slim footprint of 74.1 KB on disk.
# Install via NPM
npm install @duckdb/node-bindings
# Install via Yarn
yarn add @duckdb/node-bindings
You are currently viewing a proprietary security audit for @duckdb/node-bindings on PAudit. We aggregate global databases to provide a safety rating of 75/100.
Run npm install @duckdb/node-bindings. This installs version 1.4.4-r.1 and adds 0 direct dependencies to your project.
Yes, @duckdb/node-bindings records 0 weekly downloads, making it a Niche adoption. part of the ecosystem.