Advisories for Npm/Summit package

2018
2016

Unsafe eval()

When using the PouchDB driver in the module, an attacker can execute arbitrary commands via the collection name.