Database

Convex: latest release, open vulnerabilities and status today

The latest release of the convex package is 1.47.0. No advisories for the convex package were published in the last 12 months. Convex Status shows no open incidents right now.

Last checked against npm, OSV.dev and Convex Status.

Latest convex release
1.47.0
npm downloads last week
1.7M
Licence
Apache-2.0

Security advisories

OSV.dev, CISA KEV and FIRST EPSS

No advisories published in the last 12 months. Checked packages: convex.

All convex advisories on OSV.dev

Status now

No open incidents or maintenance right now.

5 incidents in the last 90 days (4 major). Most recent major: “Failing function calls” (2026-10-09). Consider retries, timeouts and a fallback path for this dependency. Not counted: 1 notice marked no impact.

Convex Status

Alternatives

  • Firebase Realtime Database

    Real-time NoSQL cloud database

    Strengths

    • Real-time synchronization
    • Offline support

    Trade-offs

    • Google vendor lock-in
    • Limited querying
    Firebase Realtime Database health today
  • Supabase Realtime

    Open-source Firebase alternative

    Strengths

    • PostgreSQL-based
    • Open-source

    Trade-offs

    • Younger project
    • Fewer integrations
    Supabase Realtime health today
  • PocketBase

    Open-source backend in a single file with real-time database

    Strengths

    • Single executable (Go) - no dependencies
    • Built-in authentication and file storage

    Trade-offs

    • SQLite limitations for high concurrency
    • Single-server deployment (no horizontal scaling)
  • Appwrite

    Open-source backend server with real-time database and auth

    Strengths

    • Self-hosted and open-source
    • All-in-one backend (database, auth, storage, functions)

    Trade-offs

    • Requires Docker/container infrastructure
    • More complex setup than PocketBase

Docs and release notes

Check Convex in your own stack

This page checks Convex in general. Your repo pins specific versions: the free dependency check reads your manifests and lists what to fix first. Prism Agent runs the same live checks on your whole stack and turns them into a plan your coding agent can build.