Version 8.18.0 • License MIT
One-Line Verdict
"Stable for production use."
Healthy
Actively Maintained
1 CVE History
Historical vulnerabilities found.
88.9 KB
Light footprint.
17,541,930
Highly Trusted
Package Payload
6 Direct
Clean dependency structure.
Cold-Start Impact
+1 ms
Estimated execution overhead on standard hardware.
Current Threat Level
Risk Detected
Our audit detected 1 active or historical security flags. Critical CVEs have been mapped to this library.
Accuracy Protocol
Scanned against OSV.dev (Google Open Source) databases. Last Deep-Scan: 2026.
Is pg too heavy? Compare it with these industry standards:
"PostgreSQL client - pure javascript & libpq with the same API"
pg is used to facilitate high-performance Node.js workflows. It provides a slim footprint of 88.9 KB on disk.
# Install via NPM
npm install pg
# Install via Yarn
yarn add pg
You are currently viewing a proprietary security audit for pg on PAudit. We aggregate global databases to provide a safety rating of 85/100.
Run npm install pg. This installs version 8.18.0 and adds 6 direct dependencies to your project.
Yes, pg records 17,541,930 weekly downloads, making it a Highly Trusted part of the ecosystem.