I guess it would be mongo.db. But it really should be none of those. How would anyone create/enforce rules that would accurately limit the usage to what they are proposing? What is the validation for whether a project is or is not a JavaScript or NodeJS project?