Database
MongoDB: supported versions and end-of-life dates today
MongoDB 9.0, 8.3, 8.0 and 7.0 are supported; 8.2 reached end of life on Jul 31, 2026; the latest release is 9.0.4.
Last checked against endoflife.date and deps.dev.
- Latest release
- 9.0.4
- GitHub stars
- 28.6k
- OpenSSF Scorecard
- 4.7 / 10
Supported versions
Licence
MongoDB Community Server is under the SSPL (not OSI-approved)
Using MongoDB as your app’s database is fine; offering MongoDB itself as a service would require releasing your whole service stack under the SSPL.
Licence sourceOpen alternative: FerretDB (MongoDB-compatible, Apache 2.0)
Maintenance and supply chain
OpenSSF Scorecard 4.7 / 10 (scored )
The Scorecard rates the repository’s security practices, not known vulnerabilities. Recent activity: 30 commits and 0 issue updates found in the last 90 days.
Weakest checks
- Little code review (Code-Review 0/10)
- No security policy (Security-Policy 0/10)
- No static analysis (SAST 0/10)
Production checklist
MongoDB production checklist: 6 checks before launch
- Must do: Enable access control and never expose an unauthenticated instance
- Must do: Back up on a schedule and test a restore
- Should do: Restrict network access to your app’s IPs (no 0.0.0.0/0)
Alternatives
DynamoDB
AWS-managed serverless NoSQL database
Strengths
- Fully managed serverless operation
- Single-digit millisecond latency
Trade-offs
- AWS vendor lock-in
- Limited query capabilities (requires indexes)
Cassandra
Distributed wide-column NoSQL database for high scalability
Strengths
- Linear scalability across nodes
- No single point of failure
Trade-offs
- Complex to operate and tune
- No joins or transactions
Couchbase
Document and key-value NoSQL database with caching
Strengths
- Built-in caching layer
- SQL-like query language (N1QL)
Trade-offs
- Smaller community than MongoDB
- Enterprise features require licensing
ScyllaDB
Cassandra-compatible NoSQL database written in C++ for performance
Strengths
- 10x lower latency than Cassandra
- Drop-in Cassandra replacement (CQL compatible)
Trade-offs
- Smaller community than Cassandra
- Fewer third-party tools and integrations
Docs and release notes
Check MongoDB in your own stack
This page checks MongoDB in general. Your repo pins specific versions: the free dependency check reads your manifests and lists what to fix first. Prism Agent runs the same live checks on your whole stack and turns them into a plan your coding agent can build.