Generated on Apr 11, 2024 via pnpm

Npm

Home

@adpt/core 0.3.1

AdaptJS core library

adapt

adaptjs

adpt

unbounded

infrastructure-as-code

Package summary

issues

licenses

Package created

28 Jun 2019

Version published

5 Aug 2020

Maintainers

Total deps

202

Direct deps

License

Apache-2.0

Issues

1 critical severity issue

critical

minimist@0.0.8

Prototype Pollution in minimist

Recommendation: Upgrade to version 0.2.4 or later

via: mkdirp@0.5.1 & others

Collapse

Expand

11 high severity issues

high

moment@2.24.0

Moment.js vulnerable to Inefficient Regular Expression Complexity

Recommendation: Upgrade to version 2.29.4 or later

via: moment@2.24.0

moment@2.24.0

Path Traversal: 'dir/../../filename' in moment.locale

Recommendation: Upgrade to version 2.29.2 or later

via: moment@2.24.0

lodash@4.17.19

Command Injection in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: @adpt/dom-parser@0.3.1 & others

json5@2.1.1

Prototype Pollution in JSON5 via Parse Method

Recommendation: Upgrade to version 2.2.2 or later

via: @adpt/utils@0.3.1

yarn@1.22.0

Yarn untrusted search path vulnerability

Recommendation: Upgrade to version 1.22.13 or later

via: @adpt/utils@0.3.1

jsonify@0.0.1

Package uses an invalid SPDX license ("Public Domain")

Recommendation: Validate that the package complies with your license policy

via: @adpt/utils@0.3.1 & others

spdx-exceptions@2.5.0

Package uses an atypical license ("CC-BY-3.0")

Recommendation: Read and validate the license terms

via: read-pkg-up@4.0.0

debug@4.1.1

Deprecated package

via: debug@4.1.1

graphql-tools@4.0.6

Deprecated package

via: graphql-tools@4.0.6

mkdirp@0.5.1

Deprecated package

via: mkdirp@0.5.1 & others

uuid@3.4.0

Deprecated package

via: graphql-tools@4.0.6

Collapse

Expand

3 moderate severity issues

moderate

lodash@4.17.19

Regular Expression Denial of Service (ReDoS) in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: @adpt/dom-parser@0.3.1 & others

minimist@0.0.8

Prototype Pollution in minimist

Recommendation: Upgrade to version 0.2.1 or later

via: mkdirp@0.5.1 & others

xml2js@0.4.22

xml2js is vulnerable to prototype pollution

Recommendation: Upgrade to version 0.5.0 or later

via: @adpt/dom-parser@0.3.1

Collapse

Expand

4 low severity issues

low

debug@4.1.1

Regular Expression Denial of Service in debug

Recommendation: Upgrade to version 4.3.1 or later

via: debug@4.1.1

jsonify@0.0.1

Package uses a license that is not OSI approved ("Public Domain")

Recommendation: Read and validate the license terms

via: @adpt/utils@0.3.1 & others

spdx-exceptions@2.5.0

Package uses a license that is not OSI approved ("CC-BY-3.0")

Recommendation: Read and validate the license terms

via: read-pkg-up@4.0.0

spdx-license-ids@3.0.17

Package uses a license that is not OSI approved ("CC0-1.0")

Recommendation: Read and validate the license terms

via: read-pkg-up@4.0.0

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

174 Packages, Including:

@unboundedsystems/node-graceful@3.0.0-unb.1

@usys/collections-ts@0.0.2

@wry/equality@0.1.11

apollo-link@1.2.14

apollo-utilities@1.3.4

array-buffer-byte-length@1.0.1

array-uniq@1.0.2

array.prototype.reduce@1.0.7

arraybuffer.prototype.slice@1.0.3

async-lock@1.2.4

available-typed-arrays@1.0.7

call-bind@1.0.7

callsites@3.1.0

collections@5.1.13

cross-spawn@7.0.3

data-view-buffer@1.0.1

data-view-byte-length@1.0.1

data-view-byte-offset@1.0.0

debug@4.1.1

decamelize@4.0.0

deep-diff@1.0.2

define-data-property@1.1.4

define-properties@1.2.1

deprecated-decorator@0.1.6

end-of-stream@1.4.4

error-ex@1.3.2

es-abstract@1.23.3

es-array-method-boxes-properly@1.0.0

es-define-property@1.0.0

es-errors@1.3.0

es-object-atoms@1.0.0

es-set-tostringtag@2.0.3

es-to-primitive@1.2.1

eventemitter2@6.4.3

eventemitter3@3.1.2

execa@3.4.0

fast-json-stable-stringify@2.1.0

find-up@3.0.0

find-up@4.1.0

flush-write-stream@2.0.0

for-each@0.3.3

fs-extra@8.1.0

function-bind@1.1.2

function.prototype.name@1.1.6

functions-have-names@1.2.3

get-intrinsic@1.2.4

get-stream@5.2.0

get-symbol-description@1.0.2

global-dirs@2.0.1

globalthis@1.0.3

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

12 Packages, Including:

capture-exit@2.0.0

graceful-fs@4.2.11

hosted-git-info@2.8.9

inherits@2.0.4

ini@1.3.8

isexe@2.0.0

once@1.4.0

sax@1.3.0

semver@5.7.2

signal-exit@3.0.7

which@2.0.2

wrappy@1.0.2

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

9 Packages, Including:

@adpt/core@0.3.1

@adpt/dom-parser@0.3.1

@adpt/utils@0.3.1

@usys/fork-require@1.0.9-unb1

human-signals@1.1.1

spdx-correct@3.2.0

tslib@1.10.0

validate-npm-package-license@3.0.4

weak-map@1.0.8

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

3 Packages, Including:

css-what@2.1.3

normalize-package-data@2.5.0

yarn@1.22.0

Public Domain

Invalid

Not OSI Approved

1 Packages, Including:

jsonify@0.0.1

Creative Commons Attribution 3.0 Unported

Uncategorized

Not OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

Cannot

Must

1 Packages, Including:

spdx-exceptions@2.5.0

Creative Commons Zero v1.0 Universal

Public Domain

Not OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

Cannot

Must

1 Packages, Including:

spdx-license-ids@3.0.17

The Unlicense

Public Domain

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

private-use

modify

Cannot

include-copyright

hold-liable

Must

1 Packages, Including:

stream-buffers@3.0.2

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of @adpt/core 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
@adpt/dom-parser	0.3.1	11.08 kB	Apache-2.0	prod	1 2
@adpt/utils	0.3.1	62.5 kB	Apache-2.0	prod	4 1 1
@usys/fork-require	1.0.9-unb1	33.56 kB	Apache-2.0	prod
async-lock	1.2.4	5.34 kB	MIT	prod
callsites	3.1.0	2.38 kB	MIT	prod
css-what	2.1.3	3.86 kB	BSD-2-Clause	prod
debug	4.1.1	21.26 kB	MIT	prod	1 1
flush-write-stream	2.0.0	2.48 kB	MIT	prod
graphlib	2.1.8	89.33 kB	MIT	prod	1 1
graphql-tag	2.10.1	17.24 kB	MIT	prod
graphql-tools	4.0.6	96.67 kB	MIT	prod	2
graphql-type-json	0.3.1	3.03 kB	MIT	prod
graphql	14.6.0	379.58 kB	MIT	prod peer
indent-string	3.2.0	1.91 kB	MIT	prod
json-stable-stringify	1.0.1	4.42 kB	MIT	prod	1 1
lodash	4.17.19	307.92 kB	MIT	prod	1 1
mkdirp	0.5.1	4.87 kB	MIT	prod	1 1 1
moment	2.24.0	517.34 kB	MIT	prod	2
node-json-db	0.11.0	10.3 kB	MIT	prod	1 1 1
p-defer	3.0.0	1.96 kB	MIT	prod
p-queue	4.0.0	5.74 kB	MIT	prod
p-settle	2.1.0	2.11 kB	MIT	prod
p-timeout	3.2.0	2.7 kB	MIT	prod
proper-lockfile	3.2.0	7.36 kB	MIT	prod
randomstring	1.1.5	4.27 kB	MIT	prod
read-pkg-up	4.0.0	2.01 kB	MIT	prod	1 2
ts-custom-error	3.1.1	12.26 kB	MIT	prod
tslib	1.10.0	9.25 kB	Apache-2.0	prod
type-name	2.0.2	4.42 kB	MIT	prod
urn-lib	1.2.0	8.4 kB	MIT	prod
xmlbuilder	15.1.1	61.4 kB	MIT	prod