mongodb 5.3.0

The official MongoDB driver for Node.js

mongodb@5.3.0 was published on 2023-04-18. Its manifest declares 4 runtime dependencies and 3 peer requirements. Type declarations are bundled according to the package metadata. The declared Node.js requirement is >=14.20.1.

All mongodb versions · Permanent reference to 5.3.0 · View npm registry JSON · Latest release

Package specifications

Version	5.3.0
License declaration	Apache-2.0
Published	2023-04-18T17:37:34.106Z
Node.js requirement	>=14.20.1
Type declarations	Bundled declarations
Runtime dependency count	4
Peer requirement count	3
Optional dependency count	1
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	2489.22 KiB
Published file count	324
Package type	Not declared
ES module entry	Not declared
Default entry	lib/index.js
Side effects declaration	Not declared
Direct advisories	1
Resolved graph dependencies	16
Repository stars	10172
Repository forks	1819

Install mongodb 5.3.0

npm install mongodb@5.3.0
pnpm add mongodb@5.3.0
yarn add mongodb@5.3.0

Runtime dependencies

bson ^5.2.0
socks ^2.7.1
saslprep ^1.0.3
mongodb-connection-string-url ^2.6.0

Peer requirements

snappy ^7.2.2 (optional peer)
mongodb-client-encryption >=2.3.0 <3 (optional peer)
@aws-sdk/credential-providers ^3.201.0 (optional peer)

Optional dependencies

saslprep ^1.0.3

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

@types/node@26.6.6 — indirect
@types/webidl-conversions@7.0.3 — indirect
@types/whatwg-url@8.2.2 — indirect
bson@5.5.1 — direct
ip-address@10.7.5 — indirect
memory-pager@1.5.0 — indirect
mongodb-connection-string-url@2.6.0 — direct
punycode@2.3.1 — indirect
saslprep@1.0.3 — direct
smart-buffer@4.2.0 — indirect
socks@2.8.10 — direct
sparse-bitfield@3.0.3 — indirect
tr46@3.0.0 — indirect
undici-types@8.9.0 — indirect
webidl-conversions@7.0.0 — indirect
whatwg-url@11.0.0 — indirect

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

Known direct advisories

GHSA-vxvm-qww3-2fh7

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Code-Review	9/10 — Found 21/22 approved changesets -- score normalized to 9
Maintained	10/10 — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices	0/10 — no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow	10/10 — no dangerous workflow patterns detected
Token-Permissions	0/10 — detected GitHub workflow tokens with excessive permissions
Security-Policy	0/10 — security policy file not detected
License	10/10 — license file detected
Signed-Releases	8/10 — 5 out of the last 5 releases have a total of 5 signed artifacts.
Branch-Protection	5/10 — branch protection is not maximal on development and all release branches
SAST	9/10 — SAST tool detected but not run on all commits
Fuzzing	0/10 — project is not fuzzed
Binary-Artifacts	10/10 — no binaries found in the repo
Pinned-Dependencies	0/10 — dependency not pinned by hash detected -- score normalized to 0

Evidence and freshness

Readable npm registry JSON — retrieved 2026-11-02T03:57:28.321Z
https://api.deps.dev/v3/projects/github.com%2Fmongodb%2Fnode-mongodb-native — retrieved 2026-11-02T00:12:54.426Z
https://api.deps.dev/v3/systems/npm/packages/mongodb/versions/5.3.0 — retrieved 2026-11-02T03:57:28.734Z
https://api.deps.dev/v3/systems/npm/packages/mongodb/versions/5.3.0:dependencies — retrieved 2026-11-02T03:57:28.762Z