sequelize 3.17.0

Multi dialect ORM for Node.JS/io.js

sequelize@3.17.0 was published on 2016-01-06. Its manifest declares 16 runtime dependencies and 0 peer requirements. Bundled type declarations are not declared in the inspected metadata. The declared Node.js requirement is >=0.6.21.

Deprecated: Please update to v6 or higher! A migration guide can be found here: https://sequelize.org/v6/manual/upgrade-to-v6.html

All sequelize versions · Permanent reference to 3.17.0 · Latest release

Package specifications

Version	3.17.0
License declaration	MIT
Published	2016-01-06T17:33:13.329Z
Node.js requirement	>=0.6.21
Type declarations	Not declared
Runtime dependency count	16
Peer requirement count	0
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	Not supplied
Published file count	Not supplied
Package type	Not declared
ES module entry	Not declared
Default entry	index
Side effects declaration	Not declared
Direct advisories	12
Resolved graph dependencies	84
Repository stars	30347
Repository forks	4442

Install sequelize 3.17.0

npm install sequelize@3.17.0
pnpm add sequelize@3.17.0
yarn add sequelize@3.17.0

Runtime dependencies

wkx 0.2.0
depd ^1.0.0
dottie ^1.0.0
lodash ^3.9.3
moment ^2.11.0
semver ^5.0.1
shimmer 1.1.0
bluebird ^3.1.0
microtime ^2.0.0
node-uuid ~1.4.4
validator ^4.0.4
wellknown ^0.4.0
inflection ^1.6.0
generic-pool 2.3.0
toposort-class ^1.0.1
moment-timezone ^0.5.0

Peer requirements

None declared

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

bluebird@3.7.2 — direct
depd@1.1.2 — direct
dottie@1.1.1 — direct
generic-pool@2.3.0 — direct
inflection@1.13.4 — direct
lodash@3.10.1 — direct
microtime@2.1.9 — direct
moment@2.31.0 — direct
moment-timezone@0.5.48 — direct
node-uuid@1.4.8 — direct
semver@5.7.2 — direct
shimmer@1.1.0 — direct
toposort-class@1.0.1 — direct
validator@4.9.0 — direct
wellknown@0.4.2 — direct
wkx@0.2.0 — direct
bindings@1.5.0 — indirect
nan@2.12.1 — indirect
prebuild-install@5.3.6 — indirect
depd@1.1.0 — indirect
concat-stream@1.5.2 — indirect
minimist@1.1.3 — indirect
file-uri-to-path@1.0.0 — indirect
detect-libc@1.0.3 — indirect
expand-template@2.0.3 — indirect
github-from-package@0.0.0 — indirect
minimist@1.2.8 — indirect
mkdirp-classic@0.5.3 — indirect
napi-build-utils@1.0.2 — indirect
node-abi@2.30.1 — indirect
noop-logger@0.1.1 — indirect
npmlog@4.1.2 — indirect
pump@3.0.4 — indirect
rc@1.2.8 — indirect
simple-get@3.1.1 — indirect
tar-fs@2.1.5 — indirect
tunnel-agent@0.6.0 — indirect
which-pm-runs@1.1.0 — indirect
inherits@2.0.4 — indirect
readable-stream@2.0.6 — indirect
typedarray@0.0.7 — indirect
are-we-there-yet@1.1.7 — indirect
console-control-strings@1.1.0 — indirect
gauge@2.7.4 — indirect
set-blocking@2.0.0 — indirect
end-of-stream@1.4.5 — indirect
once@1.4.0 — indirect
deep-extend@0.6.0 — indirect
ini@1.3.8 — indirect
strip-json-comments@2.0.1 — indirect
decompress-response@4.2.1 — indirect
simple-concat@1.0.1 — indirect
chownr@1.1.4 — indirect
tar-stream@2.2.0 — indirect
safe-buffer@5.1.2 — indirect
core-util-is@1.0.3 — indirect
isarray@1.0.0 — indirect
process-nextick-args@1.0.7 — indirect
string_decoder@0.10.31 — indirect
util-deprecate@1.0.2 — indirect
delegates@1.0.0 — indirect
readable-stream@2.3.8 — indirect
aproba@1.2.0 — indirect
has-unicode@2.0.1 — indirect
object-assign@4.1.1 — indirect
signal-exit@3.0.7 — indirect
string-width@1.0.2 — indirect
strip-ansi@3.0.1 — indirect
wide-align@1.1.5 — indirect
wrappy@1.0.2 — indirect
mimic-response@2.1.0 — indirect
bl@4.1.0 — indirect
fs-constants@1.0.0 — indirect
readable-stream@3.6.2 — indirect
process-nextick-args@2.0.1 — indirect
string_decoder@1.1.1 — indirect
code-point-at@1.1.0 — indirect
is-fullwidth-code-point@1.0.0 — indirect
ansi-regex@2.1.1 — indirect
buffer@5.7.1 — indirect
readable-stream@3.6.2 — indirect
number-is-nan@1.0.1 — indirect
base64-js@1.5.1 — indirect
ieee754@1.2.1 — indirect

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

Known direct advisories

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Maintained	10/10 — 13 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10
Security-Policy	10/10 — security policy file detected
Code-Review	6/10 — Found 16/25 approved changesets -- score normalized to 6
Dangerous-Workflow	10/10 — no dangerous workflow patterns detected
CII-Best-Practices	0/10 — no effort to earn an OpenSSF best practices badge detected
Token-Permissions	0/10 — detected GitHub workflow tokens with excessive permissions
Binary-Artifacts	10/10 — no binaries found in the repo
Pinned-Dependencies	9/10 — dependency not pinned by hash detected -- score normalized to 9
License	10/10 — license file detected
Branch-Protection	5/10 — branch protection is not maximal on development and all release branches
Fuzzing	0/10 — project is not fuzzed
SAST	7/10 — SAST tool is not run on all commits -- score normalized to 7

Evidence and freshness

https://registry.npmjs.org/sequelize/3.17.0 — retrieved 2026-11-01T05:35:03.417Z
https://api.deps.dev/v3/projects/github.com%2Fsequelize%2Fsequelize — retrieved 2026-11-01T05:22:01.148Z
https://api.deps.dev/v3/systems/npm/packages/sequelize/versions/3.17.0 — retrieved 2026-11-01T05:35:03.826Z
https://api.deps.dev/v3/systems/npm/packages/sequelize/versions/3.17.0:dependencies — retrieved 2026-11-01T05:35:03.849Z