Generated on Feb 29, 2024 via pnpm

Npm

Home

@slack/oauth 2.5.4

Official library for interacting with Slack's Oauth endpoints

slack

oauth

bot

http

api

Package summary

issues

licenses

Package created

29 Apr 2020

Version published

8 Jul 2022

Maintainers

Total deps

Direct deps

License

MIT

Issues

3 moderate severity issues

moderate

jsonwebtoken@8.5.1

jsonwebtoken unrestricted key type could lead to legacy keys usage

Recommendation: Upgrade to version 9.0.0 or later

via: jsonwebtoken@8.5.1

jsonwebtoken@8.5.1

jsonwebtoken's insecure implementation of key retrieval function could lead to Forgeable Public/Private Tokens from RSA to HMAC

Recommendation: Upgrade to version 9.0.0 or later

via: jsonwebtoken@8.5.1

jsonwebtoken@8.5.1

jsonwebtoken vulnerable to signature validation bypass due to insecure default algorithm in jwt.verify()

Recommendation: Upgrade to version 9.0.0 or later

via: jsonwebtoken@8.5.1

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

40 Packages, Including:

@slack/logger@3.0.0

@slack/oauth@2.5.4

@slack/types@2.11.0

@slack/web-api@6.12.0

@types/is-stream@1.1.0

@types/jsonwebtoken@8.5.9

@types/node@20.11.22

@types/retry@0.12.0

asynckit@0.4.0

axios@1.6.7

combined-stream@1.0.8

delayed-stream@1.0.0

eventemitter3@3.1.2

eventemitter3@4.0.7

follow-redirects@1.15.5

form-data@2.5.1

form-data@4.0.0

is-electron@2.2.2

is-stream@1.1.0

jsonwebtoken@8.5.1

jwa@1.4.1

jws@3.2.2

lodash.includes@4.3.0

lodash.isboolean@3.0.3

lodash.isinteger@4.0.4

lodash.isnumber@3.0.3

lodash.isplainobject@4.0.6

lodash.isstring@4.0.1

lodash.once@4.1.1

mime-db@1.52.0

mime-types@2.1.35

ms@2.1.3

p-finally@1.0.0

p-queue@6.6.2

p-retry@4.6.2

p-timeout@3.2.0

proxy-from-env@1.1.0

retry@0.13.1

safe-buffer@5.2.1

undici-types@5.26.5

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

1 Packages, Including:

buffer-equal-constant-time@1.0.1

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

1 Packages, Including:

ecdsa-sig-formatter@1.0.11

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

1 Packages, Including:

semver@5.7.2

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of @slack/oauth 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
@slack/logger	3.0.0	2.97 kB	MIT	prod
@slack/web-api	6.12.0	199.32 kB	MIT	prod
@types/jsonwebtoken	8.5.9	3.95 kB	MIT	prod
@types/node	20.11.22	3.82 MB	MIT	prod
jsonwebtoken	8.5.1	21.01 kB	MIT	prod	3
lodash.isstring	4.0.1	2.13 kB	MIT	prod

Tree

Treemap

All Versions

@slack/oauth 2.5.4