sequelize 2.0.0-dev7

Multi dialect ORM for Node.JS

sequelize@2.0.0-dev7 was published on 2014-02-21. Its manifest declares 13 runtime dependencies and 0 peer requirements. Bundled type declarations are not declared in the inspected metadata. The declared Node.js requirement is >=0.6.21.

Deprecated: Please update to v6 or higher! A migration guide can be found here: https://sequelize.org/v6/manual/upgrade-to-v6.html

All sequelize versions · Permanent reference to 2.0.0-dev7 · Latest release

Package specifications

Version	2.0.0-dev7
License declaration	MIT
Published	2014-02-21T17:23:07.510Z
Node.js requirement	>=0.6.21
Type declarations	Not declared
Runtime dependency count	13
Peer requirement count	0
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	Not supplied
Published file count	Not supplied
Package type	Not declared
ES module entry	Not declared
Default entry	index
Side effects declaration	Not declared
Direct advisories	14
Resolved graph dependencies	16
Repository stars	30349
Repository forks	4354

Install sequelize 2.0.0-dev7

npm install sequelize@2.0.0-dev7
pnpm add sequelize@2.0.0-dev7
yarn add sequelize@2.0.0-dev7

Runtime dependencies

sql ~0.35.0
lingo ~0.0.5
dottie 0.1.0
lodash ~2.4.0
moment ~2.5.0
bluebird ~1.0.0
commander ~2.1.0
node-uuid ~1.4.1
validator ~3.2.0
generic-pool 2.0.4
circular-json ~0.1.5
toposort-class ~0.3.0
underscore.string ~2.3.0

Peer requirements

None declared

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

bluebird@1.0.8 — direct
circular-json@0.1.6 — direct
commander@2.1.0 — direct
dottie@0.1.0 — direct
generic-pool@2.0.4 — direct
lingo@0.0.5 — direct
lodash@1.3.1 — indirect
lodash@2.4.2 — direct
moment@2.5.1 — direct
node-uuid@1.4.8 — direct
sliced@0.0.5 — indirect
sql@0.35.0 — direct
toposort-class@0.3.1 — direct
underscore.string@2.3.3 — direct
validator@3.2.1 — direct
wru@0.3.0 — indirect

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

Known direct advisories

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Maintained	10/10 — 13 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10
Security-Policy	10/10 — security policy file detected
Code-Review	6/10 — Found 16/25 approved changesets -- score normalized to 6
Dangerous-Workflow	10/10 — no dangerous workflow patterns detected
CII-Best-Practices	0/10 — no effort to earn an OpenSSF best practices badge detected
Token-Permissions	0/10 — detected GitHub workflow tokens with excessive permissions
Binary-Artifacts	10/10 — no binaries found in the repo
Pinned-Dependencies	9/10 — dependency not pinned by hash detected -- score normalized to 9
License	10/10 — license file detected
Branch-Protection	5/10 — branch protection is not maximal on development and all release branches
Fuzzing	0/10 — project is not fuzzed
SAST	7/10 — SAST tool is not run on all commits -- score normalized to 7

Evidence and freshness

https://registry.npmjs.org/sequelize/2.0.0-dev7 — retrieved 2026-10-29T11:57:26.243Z
https://api.deps.dev/v3/projects/github.com%2Fsequelize%2Fsequelize — retrieved 2026-10-29T10:34:12.393Z
https://api.deps.dev/v3/systems/npm/packages/sequelize/versions/2.0.0-dev7 — retrieved 2026-10-29T11:57:26.772Z
https://api.deps.dev/v3/systems/npm/packages/sequelize/versions/2.0.0-dev7:dependencies — retrieved 2026-10-29T11:57:26.809Z