Home
Docs
GitHub
Pricing
Blog
Log In
DOCS
GITHUB
PRICING
BLOG
Log In

Run Sandworm Audit for your App

Get started
Hold on, we're currently generating a fresh version of this report
Generated on May 7, 2024 via pnpm
Repo
Npm
Home

@sematext/logagent 3.3.0

Smart log parser written in Node
Logagent
monitoring
alerting
log management
sematext
logsene
log parser
logging
log shipper
elasticsearch
indexing
etl
logstash alternative
filebeat alternative
mqtt client
internet of things
IoT
mqtt broker
kafka client
graylog
Sematext Cloud
Sematext Enterprise
MySQL client
PostgreSQL client
Log aggregation
influxdb
Cassandra
Package summary
Share
35
issues
1
critical severity
license
1
18
high severity
vulnerability
2
license
5
meta
11
9
moderate severity
vulnerability
5
license
2
meta
2
7
low severity
license
7
15
licenses
351
MIT
37
ISC
34
Apache-2.0
39
other licenses
BSD-3-Clause
18
BSD-2-Clause
5
BSD
4
(MIT OR Apache-2.0)
2
+ 8 more
Package created
8 Sep 2016
Version published
25 May 2023
Maintainers
2
Total deps
461
Direct deps
60
License
Apache-2.0

Issues

35

1 critical severity issue

critical
clarinet@0.7.3
Package has no specified license
Recommendation: Check the package code and files for license information
via: docker-events@0.0.2
Collapse
Expand

18 high severity issues

high
xlsx@0.17.0
Prototype Pollution in sheetJS
Recommendation: Upgrade to version 0.19.3 or later
via: alasql@1.7.5
xlsx@0.17.0
SheetJS Regular Expression Denial of Service (ReDoS)
Recommendation: Upgrade to version 0.20.2 or later
via: alasql@1.7.5
docker-events@0.0.2
Package uses an invalid SPDX license ("BSD")
Recommendation: Validate that the package complies with your license policy
via: docker-events@0.0.2
jsuck@0.0.4
Package uses an invalid SPDX license ("BSD")
Recommendation: Validate that the package complies with your license policy
via: docker-events@0.0.2
semver@4.3.2
Package uses an invalid SPDX license ("BSD")
Recommendation: Validate that the package complies with your license policy
via: pg@7.18.2
try-call@0.0.2
Package uses an invalid SPDX license ("BSD")
Recommendation: Validate that the package complies with your license policy
via: try-call@0.0.2
logsene-js@1.1.77
Package uses an invalid SPDX license ("Apache 2.0")
Recommendation: Validate that the package complies with your license policy
via: logsene-js@1.1.77
async-cache@1.1.0
Deprecated package
via: stackman@3.0.2
aws-sdk@2.1614.0
Package uses postinstall script: "node scripts/warn-maintenance-mode.js"
via: aws-sdk@2.1614.0 & others
cpu-features@0.0.10
Package uses install script: "node buildcheck.js > buildcheck.gypi && node-gyp rebuild"
via: docker-events@0.0.2 & others
elasticsearch@15.5.0
Deprecated package
via: elasticsearch@15.5.0 & others
har-validator@5.1.5
Deprecated package
via: alasql@1.7.5 & others
json-influx@0.3.0
Deprecated package
via: json-influx@0.3.0
querystring@0.2.0
Deprecated package
via: aws-sdk@2.1614.0 & others
request@2.88.2
Deprecated package
via: alasql@1.7.5 & others
rotating-file-stream@1.4.6
Deprecated package
via: rotating-file-stream@1.4.6
ssh2@1.15.0
Package uses install script: "node install.js"
via: docker-events@0.0.2 & others
uuid@3.4.0
Deprecated package
via: alasql@1.7.5 & others
Collapse
Expand

9 moderate severity issues

moderate
got@9.6.0
Got allows a redirect to a UNIX socket
Recommendation: Upgrade to version 11.8.5 or later
via: kubernetes-client@8.3.7 & others
semver@4.3.2
semver vulnerable to Regular Expression Denial of Service
Recommendation: Upgrade to version 5.7.2 or later
via: pg@7.18.2
tough-cookie@2.5.0
tough-cookie Prototype Pollution vulnerability
Recommendation: Upgrade to version 4.1.3 or later
via: alasql@1.7.5 & others
request@2.88.2
Server-Side Request Forgery in Request
Recommendation: None
via: alasql@1.7.5 & others
jose@1.28.2
jose vulnerable to resource exhaustion via specifically crafted JWE with compressed plaintext
Recommendation: Upgrade to version 2.0.7 or later
via: kubernetes-client@8.3.7
device-detector-js@2.2.10
Package uses a problematic Weakly Protective license ("LGPL-3.0")
Recommendation: Validate that the package complies with your license policy
via: device-detector-js@2.2.10
jschardet@3.1.2
Package uses a problematic Weakly Protective license ("LGPL-2.1+")
Recommendation: Validate that the package complies with your license policy
via: tail-forever@0.3.16
pg-packet-stream@1.1.0
Package has no specified source code repository
via: pg@7.18.2
uclogs-async@0.1.0
Package has no specified source code repository
via: tail-forever@0.3.16
Collapse
Expand

7 low severity issues

low
docker-events@0.0.2
Package uses a license that is not OSI approved ("BSD")
Recommendation: Read and validate the license terms
via: docker-events@0.0.2
jsuck@0.0.4
Package uses a license that is not OSI approved ("BSD")
Recommendation: Read and validate the license terms
via: docker-events@0.0.2
semver@4.3.2
Package uses a license that is not OSI approved ("BSD")
Recommendation: Read and validate the license terms
via: pg@7.18.2
try-call@0.0.2
Package uses a license that is not OSI approved ("BSD")
Recommendation: Read and validate the license terms
via: try-call@0.0.2
device-detector-js@2.2.10
Package uses a deprecated license ("LGPL-3.0")
via: device-detector-js@2.2.10
jschardet@3.1.2
Package uses a deprecated license ("LGPL-2.1+")
via: tail-forever@0.3.16
logsene-js@1.1.77
Package uses a license that is not OSI approved ("Apache 2.0")
Recommendation: Read and validate the license terms
via: logsene-js@1.1.77
Collapse
Expand

Licenses

MIT
351
ISC
37
Apache-2.0
34
BSD-3-Clause
18
BSD-2-Clause
5
BSD
4
(MIT OR Apache-2.0)
2
Unlicense
2
0BSD
2
N/A
1
LGPL-3.0
1
(MIT or Apache-2.0)
1
LGPL-2.1+
1
(AFL-2.1 OR BSD-3-Clause)
1
Apache 2.0
1

MIT License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
Cannot
hold-liable
Must
include-copyright
include-license
351 Packages, Including:
@azure/abort-controller@1.1.0
@azure/abort-controller@2.1.2
@azure/core-amqp@4.2.2
@azure/core-auth@1.7.2
@azure/core-tracing@1.1.2
@azure/core-util@1.9.0
@azure/event-hubs@5.11.4
@azure/logger@1.1.2
@babel/runtime@7.24.5
@leichtgewicht/ip-codec@2.0.5
@panva/asn1.js@1.0.0
@sindresorhus/is@0.14.0
@szmarczak/http-timer@1.1.2
@types/caseless@0.12.5
@types/got@9.6.12
@types/js-yaml@3.12.10
@types/keyv@3.1.4
@types/node@10.17.60
@types/node@20.12.10
@types/request@2.48.12
@types/responselike@1.0.3
@types/tough-cookie@4.0.5
@types/underscore@1.11.15
@types/ws@6.0.4
aedes-packet@2.3.1
aedes-persistence@8.1.3
aedes-protocol-decoder@1.0.0
aedes@0.42.6
after-all-results@2.0.0
agentkeepalive@3.5.2
aggregate-error@3.1.0
ajv@6.12.6
alasql@1.7.5
ansi-regex@2.1.1
ansi-regex@5.0.1
ansi-styles@2.2.1
ansi-styles@3.2.1
ansi-styles@4.3.0
argparse@1.0.10
asn1@0.2.6
assert-plus@1.0.0
async-limiter@1.0.1
asynckit@0.4.0
available-typed-arrays@1.0.7
aws4@1.12.0
balanced-match@1.0.2
base64-js@1.5.1
base64url@3.0.1
big-number@1.0.0
bignumber.js@9.0.0

ISC License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
Cannot
hold-liable
Must
include-copyright
include-license
37 Packages, Including:
async-cache@1.1.0
chownr@1.1.4
clickhouse@1.2.88888888
cliui@7.0.4
fastparallel@2.4.1
fastseries@2.0.0
fs.realpath@1.0.0
get-caller-file@2.0.5
glob@7.2.3
graceful-fs@4.2.11
har-schema@2.0.0
in-publish@2.0.1
inflight@1.0.6
inherits@2.0.4
json-stringify-safe@5.0.1
lru-cache@4.1.5
lru-cache@5.1.1
lru-cache@6.0.0
make-error@1.3.6
minimatch@3.1.2
mqemitter@4.5.0
once@1.4.0
pg-int8@1.0.1
pseudomap@1.0.2
sax@1.2.1
semver@5.7.2
split-ca@1.0.1
split2@2.2.0
split2@3.2.2
split2@4.2.0
syslogd@1.1.2
wrappy@1.0.2
y18n@5.0.8
yallist@2.1.2
yallist@3.1.1
yallist@4.0.0
yargs-parser@20.2.9

Apache License 2.0

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
use-patent-claims
place-warranty
Cannot
hold-liable
use-trademark
Must
include-copyright
include-license
state-changes
include-notice
34 Packages, Including:
@balena/dockerignore@1.0.2
@kubernetes/client-node@0.10.2
@sematext/logagent@3.3.0
adler-32@1.2.0
adler-32@1.3.1
aws-sdk@2.1614.0
aws-sign2@0.7.0
b4a@1.6.6
bare-events@2.2.2
caseless@0.12.0
cassandra-driver@3.6.0
cfb@1.2.2
codepage@1.14.0
crc-32@1.2.2
docker-modem@1.0.9
docker-modem@3.0.8
dockerode@2.5.8
dockerode@3.3.5
elasticsearch@15.5.0
exit-on-epipe@1.0.1
forever-agent@0.6.1
frac@1.1.2
jmespath@0.16.0
long@2.4.0
oauth-sign@0.9.0
printj@1.1.2
request@2.88.2
rhea-promise@3.0.2
rhea@3.0.2
ssf@0.11.2
tunnel-agent@0.6.0
wmf@1.0.2
word@0.3.0
xlsx@0.17.0

BSD 3-Clause "New" or "Revised" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
use-trademark
hold-liable
Must
include-copyright
include-license
18 Packages, Including:
bcrypt-pbkdf@1.0.2
charenc@0.0.2
crypt@0.0.2
duplexer3@0.1.5
flat@5.0.2
ieee754@1.1.13
ieee754@1.2.1
jssha@3.3.1
md5@2.3.0
qs@6.12.1
qs@6.5.3
shelljs@0.8.5
source-map@0.5.7
sprintf-js@1.0.3
sprintf-js@1.1.3
stream-throttle@0.1.3
tiny-lru@6.0.1
tough-cookie@2.5.0

BSD 2-Clause "Simplified" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
hold-liable
Must
include-copyright
include-license
5 Packages, Including:
esprima@4.0.1
http-cache-semantics@4.1.1
uri-js@4.4.1
webidl-conversions@3.0.1
websocket-stream@5.5.2

BSD

Invalid
Not OSI Approved
4 Packages, Including:
docker-events@0.0.2
jsuck@0.0.4
semver@4.3.2
try-call@0.0.2

(MIT OR Apache-2.0)

Permissive
2 Packages, Including:
JSONStream@1.3.2
JSONStream@1.3.4

The Unlicense

Public Domain
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
private-use
modify
Cannot
include-copyright
hold-liable
Must
2 Packages, Including:
stream-buffers@3.0.2
tweetnacl@0.14.5

BSD Zero Clause License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
include-copyright
include-license
include-original
Cannot
hold-liable
Must
2 Packages, Including:
tslib@1.14.1
tslib@2.6.2

N/A

N/A
1 Packages, Including:
clarinet@0.7.3

GNU Lesser General Public License v3.0 only

Weakly Protective
OSI Approved
Deprecated
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
use-patent-claims
Cannot
sublicense
hold-liable
Must
include-original
state-changes
disclose-source
include-license
include-copyright
include-install-instructions
1 Packages, Including:
device-detector-js@2.2.10

(MIT or Apache-2.0)

Permissive
1 Packages, Including:
dom-storage@2.1.0

GNU Library General Public License v2.1 or later

Weakly Protective
OSI Approved
Deprecated
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
Cannot
Must
1 Packages, Including:
jschardet@3.1.2

(AFL-2.1 OR BSD-3-Clause)

Permissive
1 Packages, Including:
json-schema@0.4.0

Apache 2.0

Invalid
Not OSI Approved
1 Packages, Including:
logsene-js@1.1.77
Disclaimer

This deed highlights only some of the key features and terms of the actual license. It is not a license and has no legal value. You should carefully review all of the terms and conditions of the actual license before using the licensed material.

Sandworm is not a law firm and does not provide legal services. Distributing, displaying, or linking to this deed or the license that it summarizes does not create a lawyer-client or any other relationship.

Direct Dependencies

60
All Dependencies CSV
β“˜ This is a list of @sematext/logagent 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.
NameVersionSizeLicenseTypeVulnerabilities
@azure/event-hubs5.11.41.59 MBMIT
prod
aedes0.42.651.48 kBMIT
prod optional
alasql1.7.5847.73 kBMIT
prod
5
2
aws-sdk2.1614.091.24 MBApache-2.0
prod peer
2
cassandra-driver3.6.0151.85 kBApache-2.0
prod
chalk2.4.29.63 kBMIT
prod
clickhouse1.2.888888887.43 kBISC
prod
4
2
clone2.1.25.68 kBMIT
prod
co4.6.05.74 kBMIT
prod
commander2.20.318.26 kBMIT
prod
date-fns2.30.0682.42 kBMIT
prod optional
device-detector-js2.2.10129.95 kBLGPL-3.0
prod
1
1
docker-events0.0.22.26 kBBSD
prod
1
4
2
docker-loghose1.6.57.42 kBMIT
prod
dockerode3.3.519.85 kBApache-2.0
prod
2
elasticsearch15.5.0366.26 kBApache-2.0
prod peer
1
eventemitter33.1.29.03 kBMIT
prod
fast-safe-stringify2.1.17.71 kBMIT
prod
flat5.0.26.59 kBBSD-3-Clause
prod
flatstr1.0.123.53 kBMIT
prod
get-value3.0.15.47 kBMIT
prod
glob7.2.315.08 kBISC
prod
graceful-fs4.2.119.57 kBISC
prod
http-aws-es6.0.06.03 kBMIT
prod
3
influx-line-protocol-parser0.2.06.05 kBMIT
prod
js-yaml3.14.175.07 kBMIT
prod
json-influx0.3.04.57 kBMIT
prod
1
kubernetes-client8.3.71.07 MBMIT
prod
3
4
logsene-js1.1.771 BApache 2.0
prod
1
1
lru-cache5.1.15.69 kBISC
prod
maxmind-geolite-mirror1.3.015.75 kBMIT
prod
maxmind3.1.213.45 kBMIT
prod
md52.3.07.57 kBBSD-3-Clause
prod
merge2.1.12.49 kBMIT
prod
minimatch3.1.211.66 kBISC
prod
mkpath1.0.03.37 kBMIT
prod
moment-timezone0.5.45234.53 kBMIT
prod
moment2.30.1698.76 kBMIT
prod
mqtt4.3.8214.62 kBMIT
prod
mysql2.18.1118.9 kBMIT
prod
pg7.18.222.13 kBMIT
prod peer
1
2
1
prettyjson1.2.55.72 kBMIT
prod
public-ip4.0.44.21 kBMIT
prod
1
query-string6.14.18.07 kBMIT
prod
request2.88.257.83 kBApache-2.0
prod peer
3
2
requestretry7.1.014.93 kBMIT
prod
3
2
rotating-file-stream1.4.612.86 kBMIT
prod
1
set-value4.1.06.63 kBMIT
prod
split23.2.24.58 kBISC
prod
stackman3.0.210.01 kBMIT
prod
1
stream-throttle0.1.33.99 kBBSD-3-Clause
prod
string-template1.0.019.96 kBMIT
prod
syslogd1.1.22.31 kBISC
prod
tail-forever0.3.166.03 kBMIT
prod
2
1
tedious3.0.157.08 kBMIT
prod
throng4.0.02.34 kBMIT
prod
through24.0.23.92 kBMIT
prod
try-call0.0.2734 BBSD
prod
1
1
unset-value1.0.03.09 kBMIT
prod
websocket-stream5.5.28.01 kBBSD-2-Clause
prod optional

Visualizations

Tree
Treemap

Recent Versions

Sandworm Dunes
Ready to start?

Scan your app for security vulnerabilities and license issues

Start Free With GitHub
Sandworm Open Source
Sandworm
Getting Started Issue Types Resolve Issues License Policies Sandworm Guard
Explore
Npm Package List Composer Package List Npm Categories List Npm Security Vulnerabilities Composer Security Vulnerabilities
Support
Sponsor Discuss Terms of Use Privacy Policy Security
More from Sandworm
Newsletter 𝕏 / Twitter 𝕏 / Twitter Security Alerts Knowledge Base Blog Contact