Generated on Oct 26, 2023 via pnpm

Npm

Home

@storybook/addon-info 5.3.21

A Storybook addon to show additional information for your stories.

addon

storybook

Package summary

issues

licenses

Package created

17 May 2017

Version published

28 Aug 2020

Maintainers

Total deps

209

Direct deps

License

MIT

Issues

15 high severity issues

high

prismjs@1.17.1

Cross-Site Scripting in Prism

Recommendation: Upgrade to version 1.21.0 or later

via: @storybook/components@5.3.21

prismjs@1.17.1

Regular Expression Denial of Service (ReDoS) in Prism

Recommendation: Upgrade to version 1.24.0 or later

via: @storybook/components@5.3.21

prismjs@1.17.1

Cross-site Scripting in Prism

Recommendation: Upgrade to version 1.27.0 or later

via: @storybook/components@5.3.21

marked@0.3.19

Inefficient Regular Expression Complexity in marked

Recommendation: Upgrade to version 4.0.10 or later

via: marksy@8.0.0

marked@0.3.19

Inefficient Regular Expression Complexity in marked

Recommendation: Upgrade to version 4.0.10 or later

via: marksy@8.0.0

prismjs@1.17.1

Denial of service in prismjs

Recommendation: Upgrade to version 1.23.0 or later

via: @storybook/components@5.3.21

node-fetch@1.7.3

node-fetch forwards secure headers to untrusted sites

Recommendation: Upgrade to version 2.6.7 or later

via: react-addons-create-fragment@15.6.2

core-js@1.2.7

Deprecated package

via: react-addons-create-fragment@15.6.2

core-js@3.33.1

Package uses postinstall script: "node -e "try{require('./postinstall')}catch(e){}""

via: @storybook/addons@5.3.21 & others

highlight.js@9.13.1

Deprecated package

via: @storybook/components@5.3.21

highlight.js@9.18.5

Deprecated package

via: @storybook/components@5.3.21

highlight.js@9.18.5

Package uses postinstall script: "node deprecated.js"

via: @storybook/components@5.3.21

popper.js@1.16.1

Deprecated package

via: @storybook/components@5.3.21

react-dom@16.14.0

Deprecated package

via: @storybook/addons@5.3.21 & others

react@16.14.0

Deprecated package

via: @storybook/addons@5.3.21 & others

Collapse

Expand

5 moderate severity issues

moderate

highlight.js@9.18.5

ReDOS vulnerabities: multiple grammars

Recommendation: Upgrade to version 10.4.1 or later

via: @storybook/components@5.3.21

marked@0.3.19

Marked ReDoS due to email addresses being evaluated in quadratic time

Recommendation: Upgrade to version 0.6.2 or later

via: marksy@8.0.0

prismjs@1.17.1

prismjs Regular Expression Denial of Service vulnerability

Recommendation: Upgrade to version 1.25.0 or later

via: @storybook/components@5.3.21

highlight.js@9.13.1

Prototype Pollution in highlight.js

Recommendation: Upgrade to version 9.18.2 or later

via: @storybook/components@5.3.21

typed-styles@0.0.7

Package has no specified source code repository

via: @storybook/components@5.3.21

Collapse

Expand

1 low severity issue

low

node-fetch@1.7.3

The `size` option isn't honored after following a redirect in node-fetch

Recommendation: Upgrade to version 2.6.1 or later

via: react-addons-create-fragment@15.6.2

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

198 Packages, Including:

@babel/code-frame@7.22.13

@babel/helper-module-imports@7.22.15

@babel/helper-string-parser@7.22.5

@babel/helper-validator-identifier@7.22.20

@babel/highlight@7.22.20

@babel/runtime@7.23.2

@babel/standalone@7.23.2

@babel/types@7.23.0

@emotion/cache@10.0.29

@emotion/core@10.3.1

@emotion/css@10.0.27

@emotion/hash@0.8.0

@emotion/is-prop-valid@0.8.8

@emotion/memoize@0.7.4

@emotion/serialize@0.11.16

@emotion/sheet@0.9.4

@emotion/styled-base@10.3.0

@emotion/styled@10.3.0

@emotion/stylis@0.8.5

@emotion/unitless@0.7.5

@emotion/utils@0.11.3

@emotion/weak-memoize@0.2.5

@hypnosphi/create-react-context@0.3.1

@reach/router@1.3.4

@storybook/addon-info@5.3.21

@storybook/addons@5.3.21

@storybook/api@5.3.21

@storybook/channels@5.3.21

@storybook/client-logger@5.3.21

@storybook/components@5.3.21

@storybook/core-events@5.3.21

@storybook/csf@0.0.1

@storybook/router@5.3.21

@storybook/theming@5.3.21

@types/is-function@1.0.2

@types/parse-json@4.0.1

@types/prop-types@15.7.9

@types/reach__router@1.3.13

@types/react-syntax-highlighter@11.0.4

@types/react-textarea-autosize@4.3.6

@types/react@18.2.33

@types/scheduler@0.16.5

ansi-styles@3.2.1

asap@2.0.6

babel-plugin-emotion@10.2.2

babel-plugin-macros@2.8.0

babel-plugin-syntax-jsx@6.18.0

call-bind@1.0.5

callsites@3.1.0

can-use-dom@0.1.0

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

5 Packages, Including:

highlight.js@9.13.1

highlight.js@9.18.5

hoist-non-react-statics@3.3.2

qs@6.11.2

source-map@0.5.7

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

2 Packages, Including:

semver@6.3.1

yaml@1.10.2

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

1 Packages, Including:

@base2/pretty-print-object@1.0.1

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

1 Packages, Including:

react-helmet-async@1.3.0

(MIT OR GPL-3.0)

Permissive

1 Packages, Including:

store2@2.14.2

BSD Zero Clause License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

include-copyright

include-license

include-original

Cannot

hold-liable

Must

1 Packages, Including:

tslib@2.6.2

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of @storybook/addon-info 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
@storybook/addons	5.3.21	10.39 kB	MIT	prod	3
@storybook/client-logger	5.3.21	1.99 kB	MIT	prod	1
@storybook/components	5.3.21	136.37 kB	MIT	prod	11 4
@storybook/theming	5.3.21	15.1 kB	MIT	prod	3
core-js	3.33.1	275.05 kB	MIT	prod	1
global	4.4.0	1.85 kB	MIT	prod
marksy	8.0.0	13.97 kB	MIT	prod	2 1
nested-object-assign	1.0.4	2.87 kB	MIT	prod
prop-types	15.8.1	22.12 kB	MIT	prod peer
react-addons-create-fragment	15.6.2	10.09 kB	MIT	prod	2 1
react-element-to-jsx-string	14.3.4	46.22 kB	MIT	prod	2
react-is	16.13.1	5.33 kB	MIT	prod
react-lifecycles-compat	3.0.4	5.86 kB	MIT	prod
react	16.14.0	59.16 kB	MIT	prod peer	1
util-deprecate	1.0.2	2.19 kB	MIT	prod