</>PackageGraphPackageGraph

mongodb-client-encryption

npmv7.2.1TypeScript

Official client encryption module for the MongoDB Node.js driver

Adopt with care

mongodb-client-encryption is usable, with caveats. This package runs an install script on your machine.

  • BAdoption: grade B, Good.

    211.1K downloads per week and 2 known dependents.

  • AMaintenance: grade A, Excellent.

    Last published 41 days ago. 11 releases in the last 2 years.

  • AWeight: grade A, Excellent.

    Pulls in 2 transitive packages, about 152 KB installed (at least — some of the tree is still being crawled).

  • CSupply chain: grade C, Fair — worth a look.

    This package runs an install script on your machine.

  • ALicense: grade A, Excellent.

    Apache-2.0 — permissive, with no copyleft found in the dependency tree.

Grades are computed deterministically from registry metadata collected by PackageGraph — downloads, dependents, publish dates, the resolved dependency tree, maintainer count, and declared licenses. No third-party scores are used.

Install cost

What you actually take on by adding mongodb-client-encryption to a project.

2
Direct dependencies

Runtime packages this one declares itself.

2
Total installed

Distinct packages in the full runtime tree, deduplicated the way a package manager would.

152 KB
Install size

Unpacked size of this package plus its entire runtime tree.

1
Tree depth

Longest resolved dependency chain below this package.

Part of this dependency tree has not been crawled yet, so these figures are a lower bound rather than a final total.

Compatibility

Node.js
node >=20.19.0
Module format
CommonJS only
TypeScript
Types included
Install scripts
Runs on install

Installing this package executes a script defined by its publisher. That is normal for native modules, but it is also how supply-chain attacks run — review it before installing in CI or on a machine with credentials.

Quick start

A usage example from the mongodb-client-encryption README.

node libmongocrypt.mjs [optional flags]

By default attempts to download and compile the bindings with the crypto prebuilds of libmongocrypt.
Can be configured to clone and build without crypto.

--gitURL=string         A custom remote git repository to clone libmongocrypt from. You must also set --build to use this.
--libVersion=string     A custom version reference to either download or checkout after cloning.
                        You may use "latest" to get current libmongocrypt `HEAD`.
--clean                 Combined with --build, the script will not skip cloning and rebuilding libmongocrypt.
--build                 Instead of downloading, clone and build libmongocrypt along with the bindings.
--dynamic               Skips cloning or downloading libmongocrypt, runs prebuild with build_type set to "dynamic" to compile
                        a prebuild that links to a system copy of libmongocrypt.
--skip-bindings         Skips running prebuild. Useful if only the libmongocrypt dependency is desired.
Example truncated — see the full README.

Dependencies

Declared by mongodb-client-encryption v7.2.1. Runtime dependencies are installed with the package; dev dependencies are not.

Runtime (2)

node-addon-api ^8.6.0prebuild-install ^7.1.3

Dev (28)

@types/bindings ^1.5.5@types/chai ^5.2.1@types/mocha ^10.0.10@types/node ^24.9.2@types/semver ^7.7.1@types/sinon ^21.0.0@types/sinon-chai ^4.0.0@typescript-eslint/eslint-plugin ^8.56.1bson ^6.10.4chai ^4.5.0chai-subset ^1.6.0clang-format ^1.8.0eslint ^9.38.0eslint-config-prettier ^10.1.8eslint-plugin-prettier ^5.5.5mocha ^11.7.5node-gyp ^11.5.0prebuild ^13.0.1prettier ^3.8.1semver ^7.7.4sinon ^21.0.1sinon-chai ^3.7.0source-map-support ^0.5.21standard-version ^9.5.0tar ^7.5.9ts-node ^10.9.2typescript ^5.9.3typescript-cached-transpile ^0.0.6

Used by

Popular packages that depend on mongodb-client-encryption.

Relationship graph

Dependencies (left) and dependents (right) of mongodb-client-encryption.

mongoosemongodbmongodb-client-en…
mongodb-client-encryption dependencies dependents

Frequently installed together

Release history

11 releases in the last two years, typically about 34 days apart.

Recent versions of mongodb-client-encryption
VersionPublishedSizeLicense
7.2.1latest1 month ago152 KBApache-2.0
7.2.02 months ago151 KBApache-2.0
7.1.02 months ago151 KBApache-2.0
7.0.010 months ago150 KBApache-2.0
7.0.0-alpha.111 months ago150 KBApache-2.0
7.0.0-alpha11 months ago149 KBApache-2.0
6.5.01 year ago131 KBApache-2.0
6.4.01 year ago130 KBApache-2.0
6.3.01 year ago129 KBApache-2.0
6.2.01 year ago128 KBApache-2.0
6.1.11 year ago126 KBApache-2.0
6.1.02 years ago123 KBApache-2.0
6.1.0-alpha.02 years ago90 KBApache-2.0
6.1.0-alpha2 years ago87 KBApache-2.0
6.0.12 years ago74 KBApache-2.0

Overview

mongodb-client-encryption is an npm package that official client encryption module for the MongoDB Node.js driver. It is very popular, with about 211.1K downloads per week and 2 known dependents in the graph. The latest version is 7.2.1, released under the Apache-2.0 license.

Who should use it

Teams working in the npm ecosystem who need official client encryption module for the MongoDB Node.js driver and value a battle-tested, widely-adopted solution.

When not to use it

Consider an alternative if you need to minimize your dependency tree, or if a more actively-maintained option better fits your npm stack.

Pros

  • Large, well-established user base (211.1K weekly downloads).
  • Ships TypeScript type definitions.
  • Clear open-source license (Apache-2.0).

Cons

  • Large dependency tree (30 direct dependencies) increases install size and audit surface.

Auto-generated from collected registry metadata. No external claims are inferred.

Maintainers

Frequently asked questions

Should I use mongodb-client-encryption?

mongodb-client-encryption is usable, with caveats. This package runs an install script on your machine.

How do I install mongodb-client-encryption?

Run `npm install mongodb-client-encryption` to add mongodb-client-encryption to your npm project.

How many dependencies does mongodb-client-encryption have?

mongodb-client-encryption declares 30 direct dependencies and pulls in 2 packages in total once its runtime tree is resolved totalling about 152 KB on disk.

What license is mongodb-client-encryption released under?

mongodb-client-encryption is distributed under the Apache-2.0 license.

How popular is mongodb-client-encryption?

mongodb-client-encryption has approximately 211,115 downloads per week and 2 known dependent packages.

Is mongodb-client-encryption still maintained?

The most recent release of mongodb-client-encryption (v7.2.1) was published 1 month ago.

Does mongodb-client-encryption run install scripts?

Yes. mongodb-client-encryption defines a lifecycle script that executes when the package is installed. Review it before installing in CI or on a machine holding credentials.