Home
Docs
GitHub
Pricing
Blog
Log In

Run Sandworm Audit for your App

Get started
Hold on, we're currently generating a fresh version of this report
Generated on May 8, 2024 via pnpm

@alifd/next 1.26.24

A configurable component library for web built on React.
Package summary
Share
13
issues
5
critical severity
vulnerability
1
license
4
3
high severity
meta
3
5
moderate severity
meta
5
4
licenses
37
MIT
30
BSD-3-Clause
4
N/A
1
0BSD
Package created
11 Jul 2018
Version published
6 Sep 2023
Maintainers
6
Total deps
72
Direct deps
18
License
MIT

Issues

13

5 critical severity issues

critical
Recommendation: Upgrade to version 6.5.1 or later
via: @alifd/meet-react@2.9.9
Recommendation: Check the package code and files for license information
via: @alifd/meet-react@2.9.9
Recommendation: Check the package code and files for license information
via: @alifd/meet-react@2.9.9
Recommendation: Check the package code and files for license information
via: @alifd/meet-react@2.9.9
Recommendation: Check the package code and files for license information
via: @alifd/meet-react@2.9.9
Collapse
Expand

3 high severity issues

high
via: babel-runtime@6.26.0
via: babel-runtime@6.26.0
via: @alifd/meet-react@2.9.9
Collapse
Expand

5 moderate severity issues

moderate
via: @alifd/meet-react@2.9.9
via: @alifd/meet-react@2.9.9
via: @alifd/meet-react@2.9.9
via: @alifd/meet-react@2.9.9
via: @alifd/meet-react@2.9.9
Collapse
Expand

Licenses

MIT License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
Cannot
hold-liable
Must
include-copyright
include-license
37 Packages, Including:
@alifd/babel-runtime-jsx-style-transform@1.0.0
@alifd/field@1.5.8
@alifd/field@1.7.0
@alifd/meet-react-component-one@1.3.2
@alifd/meet-react@2.9.9
@alifd/next@1.26.24
@alifd/overlay@0.2.13
@alifd/validate@1.2.3
@alifd/validate@1.4.0
@babel/runtime@7.24.5
babel-runtime@6.26.0
big.js@6.2.1
classnames@2.2.6
classnames@2.5.1
core-js@2.6.12
dayjs@1.11.11
dom-helpers@3.4.0
dom7@3.0.0
js-tokens@4.0.0
lodash.clonedeep@4.5.0
loose-envify@1.4.0
moment@2.30.1
object-assign@4.1.1
omit.js@2.0.2
prop-types@15.8.1
react-dom@18.3.1
react-is@16.13.1
react-lifecycles-compat@3.0.4
react@18.3.1
regenerator-runtime@0.11.1
regenerator-runtime@0.14.1
resize-observer-polyfill@1.5.1
scheduler@0.23.2
shallow-element-equals@1.0.1
ssr-window@3.0.0
style-equal@1.0.0
swiper@6.5.0

BSD 3-Clause "New" or "Revised" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
use-trademark
hold-liable
Must
include-copyright
include-license
30 Packages, Including:
@uni/action-sheet@1.0.8
@uni/clipboard@1.0.9
@uni/env@1.1.1
@uni/file@1.1.1
@uni/image@1.1.3
@uni/navigate@1.0.11
@uni/page-scroll-to@1.0.0
@uni/vibrate@1.0.1
@uni/video@1.0.8
driver-dom@2.2.2
driver-miniapp@0.1.5
driver-universal@3.5.0
driver-weex@2.1.0
hoist-non-react-statics@3.3.2
rax-children@1.0.0
rax-clone-element@1.0.0
rax-create-factory@1.0.0
rax-is-valid-element@1.0.1
rax@1.2.3
react-transition-group@2.9.0
style-unit@2.0.1
style-unit@3.0.5
universal-choose-image@1.3.0
universal-device@1.0.3
universal-device@2.3.1
universal-env@0.6.6
universal-env@2.0.0
universal-panresponder@0.6.5
universal-transition@1.1.1
universal-unit-tool@1.0.0

N/A

N/A
4 Packages, Including:
@gcanvas/core@1.0.0
universal-canvas-context@1.0.0
universal-element@0.0.6
universal-env@3.3.3

BSD Zero Clause License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
include-copyright
include-license
include-original
Cannot
hold-liable
Must
1 Packages, Including:
tslib@2.6.2
Disclaimer

This deed highlights only some of the key features and terms of the actual license. It is not a license and has no legal value. You should carefully review all of the terms and conditions of the actual license before using the licensed material.

Sandworm is not a law firm and does not provide legal services. Distributing, displaying, or linking to this deed or the license that it summarizes does not create a lawyer-client or any other relationship.

Direct Dependencies

18
All Dependencies CSV
β“˜ This is a list of @alifd/next 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.
NameVersionSizeLicenseTypeVulnerabilities
@alifd/field1.5.8328.09 kBMIT
prod
@alifd/meet-react2.9.911.64 MBMIT
prod peer
5
1
5
@alifd/overlay0.2.13215.37 kBMIT
prod
@alifd/validate1.2.322.24 kBMIT
prod
babel-runtime6.26.013.06 kBMIT
prod
2
big.js6.2.115.88 kBMIT
prod
classnames2.5.18.46 kBMIT
prod
dayjs1.11.11650.17 kBMIT
prod
hoist-non-react-statics3.3.29.83 kBBSD-3-Clause
prod
lodash.clonedeep4.5.011.36 kBMIT
prod
moment2.30.1698.76 kBMIT
prod peer
prop-types15.8.122.12 kBMIT
prod
react-dom18.3.14.3 MBMIT
prod peer
react-lifecycles-compat3.0.45.86 kBMIT
prod
react-transition-group2.9.037.92 kBBSD-3-Clause
prod
react18.3.1310.65 kBMIT
prod peer
resize-observer-polyfill1.5.131.97 kBMIT
prod
shallow-element-equals1.0.13.36 kBMIT
prod

Visualizations