
Product
Introducing Socket Scanning for VS Code Marketplace Extensions
Socket now scans VS Code extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.
Tedious is a pure-Javascript implementation of the TDS protocol, which is used to interact with instances of Microsoft's SQL Server. It is intended to be a fairly slim implementation of the protocol, with not too much additional functionality.
See the changelog for version history.
TDS 8.0 (SQL Server 2022 and later) is supported by setting options.encrypt to 'strict'.
Node.js is a prerequisite for installing tedious. Once you have installed Node.js, installing tedious is simple:
npm install tedious
More documentation and code samples are available at tediousjs.github.io/tedious/
Tedious is simply derived from a fast, slightly garbled, pronunciation of the letters T, D and S.
We welcome contributions from the community. Feel free to checkout the code and submit pull requests.
Please report security vulnerabilities privately. See our security policy for reporting instructions.
Copyright (c) 2010-2026 Mike D Pilsbury
The MIT License
Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
The mssql package is another popular choice for interacting with SQL Server databases from Node.js. It provides a higher-level abstraction over tedious, offering a simpler API for executing queries, parameterized statements, and transactions. While tedious offers more direct control over the TDS protocol, mssql simplifies many common tasks, making it a more accessible option for some developers.
node-mssql is an alias or a closely related package to mssql, providing similar functionalities. It's often used interchangeably in discussions and documentation, but primarily, 'mssql' is the package name used for installation and implementation in projects.
Sequelize is a promise-based Node.js ORM for Postgres, MySQL, MariaDB, SQLite, and Microsoft SQL Server. It features solid transaction support, relations, eager and lazy loading, read replication, and more. While tedious is focused on SQL Server and provides a low-level API for database operations, Sequelize offers an ORM layer, making it easier to work with different databases using a unified API. However, this abstraction comes at the cost of direct control over SQL execution.
FAQs
A TDS driver, for connecting to MS SQLServer databases.
The npm package tedious receives a total of 3,840,437 weekly downloads. As such, tedious popularity was classified as popular.
We found that tedious demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 8 open source maintainers collaborating on the project.

Product
Socket now scans VS Code extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.

Research
/Security News
Socket uncovered two malicious VS Code themes in a GlassWorm-linked cluster with thousands of installs across VS Code Marketplace and Open VSX.

Security News
/Company News
Capital One is partnering with Socket to proactively secure its open source supply chain.