mongodb-client-encryption
npmv7.2.1TypeScriptOfficial client encryption module for the MongoDB Node.js driver
Adopt with care
mongodb-client-encryption is usable, with caveats. This package runs an install script on your machine.
- BAdoption: grade B, Good.
211.1K downloads per week and 2 known dependents.
- AMaintenance: grade A, Excellent.
Last published 41 days ago. 11 releases in the last 2 years.
- AWeight: grade A, Excellent.
Pulls in 2 transitive packages, about 152 KB installed (at least — some of the tree is still being crawled).
- CSupply chain: grade C, Fair — worth a look.
This package runs an install script on your machine.
- ALicense: grade A, Excellent.
Apache-2.0 — permissive, with no copyleft found in the dependency tree.
Grades are computed deterministically from registry metadata collected by PackageGraph — downloads, dependents, publish dates, the resolved dependency tree, maintainer count, and declared licenses. No third-party scores are used.
Install cost
What you actually take on by adding mongodb-client-encryption to a project.
Runtime packages this one declares itself.
Distinct packages in the full runtime tree, deduplicated the way a package manager would.
Unpacked size of this package plus its entire runtime tree.
Longest resolved dependency chain below this package.
Part of this dependency tree has not been crawled yet, so these figures are a lower bound rather than a final total.
Compatibility
- Node.js
- node >=20.19.0
- Module format
- CommonJS only
- TypeScript
- Types included
- Install scripts
- Runs on install
Installing this package executes a script defined by its publisher. That is normal for native modules, but it is also how supply-chain attacks run — review it before installing in CI or on a machine with credentials.
Quick start
A usage example from the mongodb-client-encryption README.
node libmongocrypt.mjs [optional flags]
By default attempts to download and compile the bindings with the crypto prebuilds of libmongocrypt.
Can be configured to clone and build without crypto.
--gitURL=string A custom remote git repository to clone libmongocrypt from. You must also set --build to use this.
--libVersion=string A custom version reference to either download or checkout after cloning.
You may use "latest" to get current libmongocrypt `HEAD`.
--clean Combined with --build, the script will not skip cloning and rebuilding libmongocrypt.
--build Instead of downloading, clone and build libmongocrypt along with the bindings.
--dynamic Skips cloning or downloading libmongocrypt, runs prebuild with build_type set to "dynamic" to compile
a prebuild that links to a system copy of libmongocrypt.
--skip-bindings Skips running prebuild. Useful if only the libmongocrypt dependency is desired.
Dependencies
Declared by mongodb-client-encryption v7.2.1. Runtime dependencies are installed with the package; dev dependencies are not.
Runtime (2)
Dev (28)
Used by
Popular packages that depend on mongodb-client-encryption.
Relationship graph
Dependencies (left) and dependents (right) of mongodb-client-encryption.
Frequently installed together
An AST-based pattern checker for JavaScript.
Fast, unopinionated, minimalist web framework
TypeScript definitions for node
RFC9562 UUIDs
A family of specs for interoperable TypeScript
Parse, validate, manipulate, and display dates
The fast, flexible & elegant library for parsing and manipulating HTML and XML.
{G,S}et object values using MongoDB-like path notation
Expressive query building for MongoDB
MongoDB query filtering in JavaScript
Tiny millisecond conversion utility
Next-generation take on pre/post function hooks
Release history
11 releases in the last two years, typically about 34 days apart.
| Version | Published | Size | License |
|---|---|---|---|
| 7.2.1latest | 1 month ago | 152 KB | Apache-2.0 |
| 7.2.0 | 2 months ago | 151 KB | Apache-2.0 |
| 7.1.0 | 2 months ago | 151 KB | Apache-2.0 |
| 7.0.0 | 10 months ago | 150 KB | Apache-2.0 |
| 7.0.0-alpha.1 | 11 months ago | 150 KB | Apache-2.0 |
| 7.0.0-alpha | 11 months ago | 149 KB | Apache-2.0 |
| 6.5.0 | 1 year ago | 131 KB | Apache-2.0 |
| 6.4.0 | 1 year ago | 130 KB | Apache-2.0 |
| 6.3.0 | 1 year ago | 129 KB | Apache-2.0 |
| 6.2.0 | 1 year ago | 128 KB | Apache-2.0 |
| 6.1.1 | 1 year ago | 126 KB | Apache-2.0 |
| 6.1.0 | 2 years ago | 123 KB | Apache-2.0 |
| 6.1.0-alpha.0 | 2 years ago | 90 KB | Apache-2.0 |
| 6.1.0-alpha | 2 years ago | 87 KB | Apache-2.0 |
| 6.0.1 | 2 years ago | 74 KB | Apache-2.0 |
Overview
mongodb-client-encryption is an npm package that official client encryption module for the MongoDB Node.js driver. It is very popular, with about 211.1K downloads per week and 2 known dependents in the graph. The latest version is 7.2.1, released under the Apache-2.0 license.
Who should use it
Teams working in the npm ecosystem who need official client encryption module for the MongoDB Node.js driver and value a battle-tested, widely-adopted solution.
When not to use it
Consider an alternative if you need to minimize your dependency tree, or if a more actively-maintained option better fits your npm stack.
Pros
- Large, well-established user base (211.1K weekly downloads).
- Ships TypeScript type definitions.
- Clear open-source license (Apache-2.0).
Cons
- Large dependency tree (30 direct dependencies) increases install size and audit surface.
Auto-generated from collected registry metadata. No external claims are inferred.
Frequently asked questions
Should I use mongodb-client-encryption?
mongodb-client-encryption is usable, with caveats. This package runs an install script on your machine.
How do I install mongodb-client-encryption?
Run `npm install mongodb-client-encryption` to add mongodb-client-encryption to your npm project.
How many dependencies does mongodb-client-encryption have?
mongodb-client-encryption declares 30 direct dependencies and pulls in 2 packages in total once its runtime tree is resolved totalling about 152 KB on disk.
What license is mongodb-client-encryption released under?
mongodb-client-encryption is distributed under the Apache-2.0 license.
How popular is mongodb-client-encryption?
mongodb-client-encryption has approximately 211,115 downloads per week and 2 known dependent packages.
Is mongodb-client-encryption still maintained?
The most recent release of mongodb-client-encryption (v7.2.1) was published 1 month ago.
Does mongodb-client-encryption run install scripts?
Yes. mongodb-client-encryption defines a lifecycle script that executes when the package is installed. Review it before installing in CI or on a machine holding credentials.