w3bs.AccountStart building
PACKAGES / Profullstack

nichedb

CLI and stdio MCP server for a NicheDB deployment: browse collections, manage sources and feeds, and search items.

ThreatCrush · No malware found
INSTALLw3bs install nichedb.dev/nichedb

No w3bs yet? curl -fsSL https://w3bs.org/install.sh | sh

Get started

What to type once it is installed.

  1. w3bs install nichedb.dev/nichedbInstall nichedb and track it for updates
  2. nichedb login --api https://nichedb.devSave an API key from /settings
  3. nichedb collectionsList collections
  4. nichedb items npm-latest --limit 20Show the latest items in a feed
  5. nichedb search "mcp server" --collection packages --jsonSearch items in a collection
  6. claude mcp add nichedb -- nichedb mcp --api https://nichedb.devUse NicheDB as an MCP server in Claude Code

Every option: nichedb --help · docs ↗

Malware scan

ThreatCrush found no malware indicators in nichedb 0.58.0. The other findings below are ordinary code-review notes, not malware.

Scanned
2026-11-03 04:48 UTC · threatcrush 0.13.30
Files
853 (installer + github.com/profullstack/niche-db@21806b235022)
Findings
7 high · 62 medium · 109 low
100+ other findings (not malware)
  • high
    Database URL with credentialssource/.env.example:2secret-database-url · CWE-798
  • high
    Database URL with credentialssource/.github/workflows/ci.yml:40secret-database-url · CWE-798
  • high
    outbound request to a non-constant URLsource/apps/web/public/sw.js:25js-ssrf-outbound-request · CWE-918
  • high
    Database URL with credentialssource/docker-compose.yml:10secret-database-url · CWE-798
  • high
    TLS certificate verification disabledsource/packages/db/src/index.js:27tls-verification-disabled · CWE-295
  • high
    outbound request to a non-constant URLsource/scripts/discover-police-sources.py:70py-ssrf-outbound-request · CWE-918
  • high
    outbound request to a non-constant URLsource/scripts/discover-police-sources.py:212py-ssrf-outbound-request · CWE-918
  • medium
    predictable temporary filesource/ops/selfhost-supabase/nichedb-db:512sh-predictable-temp-path · CWE-377
  • medium
    predictable temporary filesource/ops/selfhost-supabase/nichedb-db:516sh-predictable-temp-path · CWE-377
  • medium
    predictable temporary filesource/ops/selfhost-supabase/nichedb-db:752sh-predictable-temp-path · CWE-377
  • medium
    predictable temporary filesource/ops/selfhost-supabase/nichedb-db:768sh-predictable-temp-path · CWE-377
  • medium
    MAC or signature compared with ==source/packages/adapters/src/census-acs.js:490js-timing-unsafe-mac-compare · CWE-208
  • medium
    regex with nested unbounded quantifierssource/packages/adapters/src/installmap.js:88redos-nested-quantifier · CWE-1333
  • medium
    SQL built from a template literal or f-stringsource/packages/auth/src/api-keys.js:66sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/auth/src/api-keys.js:72sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/auth/src/api-keys.js:101sql-template-interpolation · CWE-89
  • medium
    regex with nested unbounded quantifierssource/packages/core/src/adapter.js:252redos-nested-quantifier · CWE-1333
  • medium
    SQL built from a template literal or f-stringsource/packages/core/src/data-dumps.js:146sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/core/src/data-dumps.js:215sql-template-interpolation · CWE-89
  • medium
    regex with nested unbounded quantifierssource/packages/core/src/names.js:228redos-nested-quantifier · CWE-1333
  • medium
    regex with nested unbounded quantifierssource/packages/core/src/profiles.js:106redos-nested-quantifier · CWE-1333
  • medium
    SQL built from a template literal or f-stringsource/packages/db/src/account.js:142sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/db/src/account.js:144sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/db/src/automotive.js:21sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/db/src/build-indexes.js:80sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/db/src/build-indexes.js:120sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/db/src/knowledge.js:339sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/db/src/knowledge.js:479sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/db/src/migrate.js:47sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/db/src/premium.js:191sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/db/src/profiles.js:69sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/db/src/profiles.js:95sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/db/src/profiles.js:116sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/db/src/profiles.js:163sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/db/src/profiles.js:211sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/db/src/profiles.js:217sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/db/src/profiles.js:245sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/db/src/queries.js:210sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/db/src/queries.js:214sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/db/src/queries.js:218sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/db/src/queries.js:239sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/db/src/queries.js:258sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/db/src/queries.js:306sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/db/src/queries.js:310sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/db/src/queries.js:364sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/db/src/queries.js:399sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/db/src/queries.js:546sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/db/src/queries.js:551sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/db/src/queries.js:648sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/db/src/queries.js:1034sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/db/src/queries.js:1453sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/db/src/queries.js:1457sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/db/src/queries.js:1592sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/db/src/queries.js:1717sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/db/src/queries.js:1723sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/db/src/queries.js:1835sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/db/src/revenue.js:92sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/db/src/revenue.js:235sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/db/src/revenue.js:378sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/db/src/tlds.js:18sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/db/src/tlds.js:79sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/db/src/tlds.js:244sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/db/src/tlds.js:253sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/db/src/tlds.js:260sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/db/src/traffic.js:317sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/payments/src/referrals.js:32sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/payments/src/referrals.js:53sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/payments/src/referrals.js:57sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/packages/payments/src/referrals.js:95sql-template-interpolation · CWE-89
  • low
    Database URL with credentialssource/apps/web/src/lib/books.test.js:3secret-database-url · CWE-798
  • low
    Database URL with credentialssource/apps/web/src/lib/profiles-linkback.test.js:14secret-database-url · CWE-798
  • low
    Database URL with credentialssource/apps/web/src/lib/source-config.test.js:11secret-database-url · CWE-798
  • low
    Database URL with credentialssource/apps/web/src/lib/webhooks.test.js:5secret-database-url · CWE-798
  • low
    Database URL with credentialssource/apps/web/src/routes/coinpay.test.js:259secret-database-url · CWE-798
  • low
    Database URL with credentialssource/apps/web/src/routes/crawlstatus.test.js:4secret-database-url · CWE-798
  • low
    Database URL with credentialssource/apps/web/src/routes/credits.test.js:6secret-database-url · CWE-798
  • low
    Database URL with credentialssource/apps/web/src/routes/data-dumps.test.js:4secret-database-url · CWE-798
  • low
    Database URL with credentialssource/apps/web/src/routes/install-sh.test.js:4secret-database-url · CWE-798
  • low
    Database URL with credentialssource/apps/web/src/routes/lyrics.test.js:12secret-database-url · CWE-798
  • low
    Database URL with credentialssource/apps/web/src/routes/moderate.test.js:11secret-database-url · CWE-798
  • low
    Database URL with credentialssource/apps/web/src/routes/opensaas.test.js:10secret-database-url · CWE-798
  • low
    Database URL with credentialssource/apps/web/src/routes/premium.test.js:4secret-database-url · CWE-798
  • low
    Database URL with credentialssource/apps/web/src/routes/profiles.test.js:12secret-database-url · CWE-798
  • low
    Database URL with credentialssource/apps/web/src/routes/push.test.js:5secret-database-url · CWE-798
  • low
    Database URL with credentialssource/apps/web/src/routes/signup-profile.test.js:17secret-database-url · CWE-798
  • low
    Database URL with credentialssource/apps/web/src/routes/sites.test.js:11secret-database-url · CWE-798
  • low
    Database URL with credentialssource/apps/web/src/routes/tlds.test.js:12secret-database-url · CWE-798
  • low
    Database URL with credentialssource/apps/web/src/views/reputation.test.jsx:3secret-database-url · CWE-798
  • low
    Database URL with credentialssource/apps/web/src/views/traffic.test.jsx:3secret-database-url · CWE-798
  • low
    JSON Web Tokensource/packages/adapters/test/fixtures/thetvdb-login.json:4secret-jwt · CWE-798
  • low
    Database URL with credentialssource/test/adapters.test.js:32secret-database-url · CWE-798
  • low
    Database URL with credentialssource/test/api-key-permissions.test.js:9secret-database-url · CWE-798
  • low
    Database URL with credentialssource/test/automotive-part-feeds.test.js:4secret-database-url · CWE-798
  • low
    Database URL with credentialssource/test/automotive.test.js:6secret-database-url · CWE-798
  • low
    Database URL with credentialssource/test/aviation.test.js:21secret-database-url · CWE-798
  • low
    Database URL with credentialssource/test/blacklists.test.js:6secret-database-url · CWE-798
  • low
    Database URL with credentialssource/test/books-openlibrary-catalog.test.js:18secret-database-url · CWE-798
  • low
    Database URL with credentialssource/test/business.test.js:5secret-database-url · CWE-798
  • low
    Database URL with credentialssource/test/consumer-finance.test.js:20secret-database-url · CWE-798
  • low
    Database URL with credentialssource/test/courtlistener.test.js:22secret-database-url · CWE-798

Showing the first 100 findings.

Badge for your README

ThreatCrush: No malware found

[![ThreatCrush scan](https://w3bs.org/api/packages/nichedb.dev/nichedb/badge.svg)](https://w3bs.org/packages/nichedb.dev/nichedb)