Generated on Apr 16, 2024 via pnpm

Npm

Home

@pm2/js-api 0.6.1

PM2.io API Client for Javascript

keymetrics

api

dashboard

monitoring

wrapper

Package summary

issues

licenses

Package created

15 May 2018

Version published

12 Nov 2020

Maintainers

Total deps

Direct deps

License

Apache-2

Issues

4 high severity issues

high

axios@0.19.2

axios Inefficient Regular Expression Complexity vulnerability

Recommendation: Upgrade to version 0.21.2 or later

via: axios@0.19.2

follow-redirects@1.5.10

Exposure of sensitive information in follow-redirects

Recommendation: Upgrade to version 1.14.7 or later

via: axios@0.19.2

@pm2/js-api@0.6.1

Package uses an invalid SPDX license ("Apache-2")

Recommendation: Validate that the package complies with your license policy

via: @pm2/js-api@0.6.1

axios@0.19.2

Deprecated package

via: axios@0.19.2

Collapse

Expand

5 moderate severity issues

moderate

axios@0.19.2

Axios vulnerable to Server-Side Request Forgery

Recommendation: Upgrade to version 0.21.1 or later

via: axios@0.19.2

follow-redirects@1.5.10

Exposure of Sensitive Information to an Unauthorized Actor in follow-redirects

Recommendation: Upgrade to version 1.14.8 or later

via: axios@0.19.2

follow-redirects@1.5.10

Follow Redirects improperly handles URLs in the url.parse() function

Recommendation: Upgrade to version 1.15.4 or later

via: axios@0.19.2

axios@0.19.2

Axios Cross-Site Request Forgery Vulnerability

Recommendation: Upgrade to version 0.28.0 or later

via: axios@0.19.2

follow-redirects@1.5.10

follow-redirects' Proxy-Authorization header kept across hosts

Recommendation: Upgrade to version 1.15.6 or later

via: axios@0.19.2

Collapse

Expand

1 low severity issue

low

@pm2/js-api@0.6.1

Package uses a license that is not OSI approved ("Apache-2")

Recommendation: Read and validate the license terms

via: @pm2/js-api@0.6.1

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

10 Packages, Including:

async@2.6.4

axios@0.19.2

debug@3.1.0

debug@3.2.7

eventemitter2@6.4.9

follow-redirects@1.5.10

lodash@4.17.21

ms@2.0.0

ms@2.1.3

ws@7.5.9

Apache-2

Invalid

Not OSI Approved

1 Packages, Including:

@pm2/js-api@0.6.1

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of @pm2/js-api 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
async	2.6.4	120.04 kB	MIT	prod
axios	0.19.2	85.88 kB	MIT	prod	3 5
debug	3.2.7	16.48 kB	MIT	prod
eventemitter2	6.4.9	18.67 kB	MIT	prod
ws	7.5.9	28.37 kB	MIT	prod

Tree

Treemap

Recent Versions

@pm2/js-api 0.6.1