Home
Docs
GitHub
Pricing
Blog
Log In

Run Sandworm Audit for your App

Get started
Hold on, we're currently generating a fresh version of this report
Generated on Apr 17, 2024 via pnpm

@strapi/strapi 4.13.6

An open source headless CMS solution to create and manage your own API. It provides a powerful dashboard and features to make your life easier. Databases supported: MySQL, MariaDB, PostgreSQL, SQLite
Package summary
Share
69
issues
2
critical severity
license
2
35
high severity
vulnerability
3
license
20
meta
12
12
moderate severity
vulnerability
5
meta
7
20
low severity
license
20
17
licenses
1029
MIT
56
ISC
25
BSD-3-Clause
84
other licenses
Apache-2.0
24
BSD-2-Clause
24
SEE LICENSE IN LICENSE
18
Unlicense
3
+ 10 more
Package created
30 Jul 2021
Version published
13 Sep 2023
Maintainers
9
Total deps
1194
Direct deps
59
License
SEE LICENSE IN LICENSE

Issues

69

2 critical severity issues

critical
Recommendation: Check the package code and files for license information
via: koa@2.13.4
Recommendation: Check the package code and files for license information
via: @strapi/admin@4.13.6
Collapse
Expand

35 high severity issues

high
Recommendation: Upgrade to version 0.32.6 or later
via: @strapi/plugin-upload@4.13.6
Recommendation: Upgrade to version 5.0.0 or later
via: @koa/cors@3.4.3
Recommendation: Upgrade to version 4.5.2 or later
via: @vitejs/plugin-react@4.0.4 & others
Recommendation: Validate that the package complies with your license policy
via: @strapi/admin@4.13.6
Recommendation: Validate that the package complies with your license policy
via: @strapi/admin@4.13.6 & others
Recommendation: Validate that the package complies with your license policy
via: @strapi/database@4.13.6
Recommendation: Validate that the package complies with your license policy
via: @strapi/generate-new@4.13.6
Recommendation: Validate that the package complies with your license policy
via: @strapi/generators@4.13.6 & others
Recommendation: Validate that the package complies with your license policy
via: @strapi/admin@4.13.6 & others
Recommendation: Validate that the package complies with your license policy
via: @strapi/admin@4.13.6 & others
Recommendation: Validate that the package complies with your license policy
via: @strapi/admin@4.13.6 & others
Recommendation: Validate that the package complies with your license policy
via: @strapi/plugin-content-manager@4.13.6
Recommendation: Validate that the package complies with your license policy
via: @strapi/plugin-content-type-builder@4.13.6
Recommendation: Validate that the package complies with your license policy
via: @strapi/plugin-email@4.13.6
Recommendation: Validate that the package complies with your license policy
via: @strapi/plugin-upload@4.13.6
Recommendation: Validate that the package complies with your license policy
via: @strapi/admin@4.13.6
Recommendation: Validate that the package complies with your license policy
via: @strapi/plugin-email@4.13.6
Recommendation: Validate that the package complies with your license policy
via: @strapi/plugin-upload@4.13.6
Recommendation: Validate that the package complies with your license policy
via: @strapi/strapi@4.13.6
Recommendation: Validate that the package complies with your license policy
via: @strapi/admin@4.13.6 & others
Recommendation: Validate that the package complies with your license policy
via: @strapi/admin@4.13.6 & others
Recommendation: Read and validate the license terms
via: @strapi/admin@4.13.6 & others
Recommendation: Validate that the license expression complies with your license policy
via: @strapi/plugin-upload@4.13.6 & others
via: @strapi/strapi@4.13.6
via: @strapi/plugin-email@4.13.6
via: @strapi/admin@4.13.6 & others
via: @strapi/admin@4.13.6
via: @vitejs/plugin-react@4.0.4 & others
via: koa-body@4.2.0
via: @strapi/plugin-email@4.13.6
via: @strapi/generators@4.13.6 & others
via: @strapi/plugin-upload@4.13.6
via: @strapi/generators@4.13.6 & others
via: @strapi/generators@4.13.6 & others
via: @strapi/generators@4.13.6 & others
Collapse
Expand

12 moderate severity issues

moderate
Recommendation: Upgrade to version 4.4.12 or later
via: @vitejs/plugin-react@4.0.4 & others
Recommendation: Upgrade to version 1.6.0 or later
via: @strapi/admin@4.13.6 & others
Recommendation: Upgrade to version 2.12.1 or later
via: @strapi/admin@4.13.6
Recommendation: Upgrade to version 4.5.3 or later
via: @vitejs/plugin-react@4.0.4 & others
Recommendation: Upgrade to version 6.2.1 or later
via: @strapi/admin@4.13.6 & others
via: @strapi/admin@4.13.6 & others
via: @strapi/admin@4.13.6 & others
via: @strapi/admin@4.13.6 & others
via: @strapi/plugin-upload@4.13.6
via: @strapi/admin@4.13.6 & others
via: @strapi/admin@4.13.6
via: @strapi/admin@4.13.6 & others
Collapse
Expand

20 low severity issues

low
Recommendation: Read and validate the license terms
via: @strapi/admin@4.13.6
Recommendation: Read and validate the license terms
via: @strapi/admin@4.13.6 & others
Recommendation: Read and validate the license terms
via: @strapi/database@4.13.6
Recommendation: Read and validate the license terms
via: @strapi/generate-new@4.13.6
Recommendation: Read and validate the license terms
via: @strapi/generators@4.13.6 & others
Recommendation: Read and validate the license terms
via: @strapi/admin@4.13.6 & others
Recommendation: Read and validate the license terms
via: @strapi/admin@4.13.6 & others
Recommendation: Read and validate the license terms
via: @strapi/admin@4.13.6 & others
Recommendation: Read and validate the license terms
via: @strapi/plugin-content-manager@4.13.6
Recommendation: Read and validate the license terms
via: @strapi/plugin-content-type-builder@4.13.6
Recommendation: Read and validate the license terms
via: @strapi/plugin-email@4.13.6
Recommendation: Read and validate the license terms
via: @strapi/plugin-upload@4.13.6
Recommendation: Read and validate the license terms
via: @strapi/admin@4.13.6
Recommendation: Read and validate the license terms
via: @strapi/plugin-email@4.13.6
Recommendation: Read and validate the license terms
via: @strapi/plugin-upload@4.13.6
Recommendation: Read and validate the license terms
via: @strapi/strapi@4.13.6
Recommendation: Read and validate the license terms
via: @strapi/admin@4.13.6 & others
Recommendation: Read and validate the license terms
via: @strapi/admin@4.13.6 & others
Recommendation: Read and validate the license terms
via: @strapi/admin@4.13.6 & others
Recommendation: Read and validate the license terms
via: @strapi/admin@4.13.6
Collapse
Expand

Licenses

MIT License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
Cannot
hold-liable
Must
include-copyright
include-license
1029 Packages, Including:
@babel/code-frame@7.24.2
@babel/compat-data@7.24.4
@babel/core@7.24.4
@babel/generator@7.24.4
@babel/helper-annotate-as-pure@7.22.5
@babel/helper-compilation-targets@7.23.6
@babel/helper-environment-visitor@7.22.20
@babel/helper-function-name@7.23.0
@babel/helper-hoist-variables@7.22.5
@babel/helper-module-imports@7.24.3
@babel/helper-module-transforms@7.23.3
@babel/helper-plugin-utils@7.24.0
@babel/helper-simple-access@7.22.5
@babel/helper-split-export-declaration@7.22.6
@babel/helper-string-parser@7.24.1
@babel/helper-validator-identifier@7.22.20
@babel/helper-validator-option@7.23.5
@babel/helpers@7.24.4
@babel/highlight@7.24.2
@babel/parser@7.24.4
@babel/plugin-syntax-jsx@7.24.1
@babel/plugin-transform-react-jsx-self@7.24.1
@babel/plugin-transform-react-jsx-source@7.24.1
@babel/runtime-corejs3@7.24.4
@babel/runtime@7.24.4
@babel/template@7.24.0
@babel/traverse@7.24.1
@babel/types@7.24.0
@casl/ability@5.4.4
@codemirror/autocomplete@6.16.0
@codemirror/commands@6.3.3
@codemirror/lang-json@6.0.1
@codemirror/language@6.10.1
@codemirror/lint@6.5.0
@codemirror/search@6.5.6
@codemirror/state@6.4.1
@codemirror/theme-one-dark@6.1.2
@codemirror/view@6.26.3
@colors/colors@1.5.0
@colors/colors@1.6.0
@dabh/diagnostics@2.0.3
@discoveryjs/json-ext@0.5.7
@emotion/babel-plugin@11.11.0
@emotion/cache@11.11.0
@emotion/hash@0.9.1
@emotion/is-prop-valid@0.8.8
@emotion/memoize@0.7.4
@emotion/memoize@0.8.1
@emotion/react@11.11.4
@emotion/serialize@1.1.4

ISC License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
Cannot
hold-liable
Must
include-copyright
include-license
56 Packages, Including:
ansi-align@3.0.1
anymatch@3.1.3
boolbase@1.0.0
chownr@1.1.4
chownr@2.0.0
cli-width@3.0.0
cliui@7.0.4
common-path-prefix@3.0.0
css-color-keywords@1.0.0
electron-to-chromium@1.4.738
fastq@1.17.1
fs-minipass@2.1.0
fs.realpath@1.0.0
get-caller-file@2.0.5
glob-parent@5.1.2
glob@7.2.3
glob@8.1.0
graceful-fs@4.2.11
icss-utils@5.1.0
inflight@1.0.6
inherits@2.0.3
inherits@2.0.4
ini@1.3.8
isexe@2.0.0
lru-cache@5.1.1
lru-cache@6.0.0
minimalistic-assert@1.0.1
minimatch@3.1.2
minimatch@5.1.6
minipass@3.3.6
minipass@4.2.8
mute-stream@0.0.8
nano-time@1.0.0
noms@0.0.0
once@1.4.0
picocolors@1.0.0
postcss-modules-extract-imports@3.1.0
postcss-modules-scope@3.2.0
postcss-modules-values@4.0.0
rimraf@2.7.1
rimraf@3.0.2
semver@6.3.1
semver@7.5.4
setprototypeof@1.1.0
setprototypeof@1.2.0
signal-exit@3.0.7
tar@6.1.13
which@1.3.1
which@2.0.2
wrappy@1.0.2

BSD 3-Clause "New" or "Revised" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
use-trademark
hold-liable
Must
include-copyright
include-license
25 Packages, Including:
@sentry/core@6.19.7
@sentry/hub@6.19.7
@sentry/minimal@6.19.7
@sentry/node@6.19.7
@sentry/types@6.19.7
@sentry/utils@6.19.7
@xtuc/ieee754@1.2.0
buffer-equal-constant-time@1.0.1
flat@5.0.2
highlight.js@10.7.3
hoist-non-react-statics@3.3.2
ieee754@1.2.1
intl-messageformat@10.3.4
qs@6.11.0
qs@6.11.1
react-intl@6.4.1
react-transition-group@4.4.5
serialize-javascript@6.0.2
source-map-js@1.2.0
source-map@0.5.7
source-map@0.6.1
source-map@0.7.4
sprintf-js@1.0.3
stream-chain@2.2.5
stream-json@1.8.0

Apache License 2.0

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
use-patent-claims
place-warranty
Cannot
hold-liable
use-trademark
Must
include-copyright
include-license
state-changes
include-notice
24 Packages, Including:
@ampproject/remapping@2.3.0
@internationalized/date@3.5.2
@internationalized/number@3.5.1
@swc/helpers@0.5.10
@ucast/core@1.10.2
@ucast/js@3.0.4
@ucast/mongo2js@1.3.4
@ucast/mongo@2.4.3
@webassemblyjs/leb128@1.11.6
@xtuc/long@4.2.2
ansi-html-community@0.0.8
detect-libc@2.0.3
ecdsa-sig-formatter@1.0.11
faye-websocket@0.11.4
formik@2.4.0
human-signals@2.1.0
rxjs@6.6.7
rxjs@7.8.1
sharp@0.32.0
tunnel-agent@0.6.0
typescript@5.2.2
unload@2.2.0
websocket-driver@0.7.4
websocket-extensions@0.1.4

BSD 2-Clause "Simplified" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
hold-liable
Must
include-copyright
include-license
24 Packages, Including:
configstore@5.0.1
css-select@4.3.0
css-what@6.1.0
default-gateway@6.0.3
domelementtype@2.3.0
domhandler@4.3.1
domhandler@5.0.3
domutils@2.8.0
domutils@3.1.0
dotenv@14.2.0
entities@2.1.0
entities@2.2.0
entities@4.5.0
eslint-scope@5.1.1
esrecurse@4.3.0
estraverse@4.3.0
estraverse@5.3.0
glob-to-regexp@0.4.1
http-cache-semantics@4.1.1
nth-check@2.1.1
terser@5.30.3
uglify-js@3.17.4
uri-js@4.4.1
webidl-conversions@3.0.1

SEE LICENSE IN LICENSE

Invalid
Not OSI Approved
18 Packages, Including:
@strapi/admin@4.13.6
@strapi/data-transfer@4.13.6
@strapi/database@4.13.6
@strapi/generate-new@4.13.6
@strapi/generators@4.13.6
@strapi/helper-plugin@4.13.6
@strapi/logger@4.13.6
@strapi/permissions@4.13.6
@strapi/plugin-content-manager@4.13.6
@strapi/plugin-content-type-builder@4.13.6
@strapi/plugin-email@4.13.6
@strapi/plugin-upload@4.13.6
@strapi/provider-audit-logs-local@4.13.6
@strapi/provider-email-sendmail@4.13.6
@strapi/provider-upload-local@4.13.6
@strapi/strapi@4.13.6
@strapi/typescript-utils@4.13.6
@strapi/utils@4.13.6

The Unlicense

Public Domain
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
private-use
modify
Cannot
include-copyright
hold-liable
Must
3 Packages, Including:
big-integer@1.6.52
fs-monkey@1.0.5
memfs@3.5.3

BSD Zero Clause License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
include-copyright
include-license
include-original
Cannot
hold-liable
Must
3 Packages, Including:
pony-cause@2.1.11
tslib@1.14.1
tslib@2.6.2

(MIT OR CC0-1.0)

Public Domain
3 Packages, Including:
type-fest@0.20.2
type-fest@0.21.3
type-fest@2.19.0

N/A

N/A
2 Packages, Including:
only@0.0.2
pause@0.0.1

Python License 2.0

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
Cannot
use-trademark
hold-liable
Must
include-copyright
include-license
state-changes
1 Packages, Including:
argparse@2.0.1

(MIT OR Apache-2.0)

Permissive
1 Packages, Including:
atob@2.1.2

Creative Commons Attribution 4.0 International

Uncategorized
Not OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
Cannot
Must
1 Packages, Including:
caniuse-lite@1.0.30001610

(MIT OR WTFPL)

Permissive
1 Packages, Including:
expand-template@2.0.3

Creative Commons Zero v1.0 Universal

Public Domain
Not OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
Cannot
Must
1 Packages, Including:
fractional-indexing@3.2.0

(BSD-3-Clause OR GPL-2.0)

Permissive
1 Packages, Including:
node-forge@1.3.1

(BSD-2-Clause OR MIT OR Apache-2.0)

Expression
1 Packages, Including:
rc@1.2.8
Disclaimer

This deed highlights only some of the key features and terms of the actual license. It is not a license and has no legal value. You should carefully review all of the terms and conditions of the actual license before using the licensed material.

Sandworm is not a law firm and does not provide legal services. Distributing, displaying, or linking to this deed or the license that it summarizes does not create a lawyer-client or any other relationship.

Direct Dependencies

59
All Dependencies CSV
β“˜ This is a list of @strapi/strapi 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.
NameVersionSizeLicenseTypeVulnerabilities
@koa/cors3.4.35.68 kBMIT
prod
1
@koa/router10.1.110.76 kBMIT
prod
@strapi/admin4.13.63.05 MBSEE LICENSE IN LICENSE
prod
1
11
9
10
@strapi/data-transfer4.13.679.64 kBSEE LICENSE IN LICENSE
prod
2
2
2
@strapi/database4.13.654.01 kBSEE LICENSE IN LICENSE
prod
2
2
@strapi/generate-new4.13.630.71 kBSEE LICENSE IN LICENSE
prod
1
1
1
@strapi/generators4.13.621.91 kBSEE LICENSE IN LICENSE
prod
8
3
@strapi/logger4.13.65.38 kBSEE LICENSE IN LICENSE
prod
1
1
@strapi/permissions4.13.69.07 kBSEE LICENSE IN LICENSE
prod
2
2
@strapi/plugin-content-manager4.13.628.46 kBSEE LICENSE IN LICENSE
prod
2
2
@strapi/plugin-content-type-builder4.13.6148.38 kBSEE LICENSE IN LICENSE
prod
11
5
6
@strapi/plugin-email4.13.611.14 kBSEE LICENSE IN LICENSE
prod
6
4
4
@strapi/plugin-upload4.13.6127.2 kBSEE LICENSE IN LICENSE
prod
8
6
5
@strapi/typescript-utils4.13.616.27 kBSEE LICENSE IN LICENSE
prod
1
1
@strapi/utils4.13.663.43 kBSEE LICENSE IN LICENSE
prod
1
1
@vitejs/plugin-react4.0.47.51 kBMIT
prod
3
2
1
bcryptjs2.4.376.21 kBMIT
prod
boxen5.1.25.72 kBMIT
prod
browserslist-to-esbuild1.2.02.41 kBMIT
prod
1
1
chalk4.1.211.31 kBMIT
prod
chokidar3.5.325.67 kBMIT
prod
ci-info3.8.07.16 kBMIT
prod
cli-table30.6.214.31 kBMIT
prod
commander8.3.038.44 kBMIT
prod
configstore5.0.13.32 kBBSD-2-Clause
prod
debug4.3.412.94 kBMIT
prod
delegates1.0.02.78 kBMIT
prod
dotenv14.2.010.01 kBBSD-2-Clause
prod
execa5.1.114.15 kBMIT
prod
fs-extra10.0.032.9 kBMIT
prod
glob7.2.315.08 kBISC
prod
http-errors1.8.16.03 kBMIT
prod
https-proxy-agent5.0.18.21 kBMIT
prod
inquirer8.2.523.25 kBMIT
prod
is-docker2.2.11.65 kBMIT
prod
koa-body4.2.07.26 kBMIT
prod
1
koa-compose4.1.01.77 kBMIT
prod
koa-compress5.1.04.97 kBMIT
prod
koa-favicon2.1.01.5 kBMIT
prod
koa-helmet7.0.22.82 kBMIT
prod
koa-ip2.1.32.48 kBMIT
prod
koa-session6.4.011.56 kBMIT
prod
koa-static5.0.02.95 kBMIT
prod
koa2.13.426.67 kBMIT
prod
1
lodash4.17.21311.49 kBMIT
prod
mime-types2.1.355.46 kBMIT
prod
node-fetch2.7.043.6 kBMIT
prod
node-machine-id1.1.1212.76 kBMIT
prod
node-schedule2.1.011.03 kBMIT
prod
open8.4.012.71 kBMIT
prod
ora5.4.16.74 kBMIT
prod
package-json7.0.04.39 kBMIT
prod
1
qs6.11.150.74 kBBSD-3-Clause
prod
resolve-cwd3.0.01.91 kBMIT
prod
semver7.5.426.25 kBISC
prod
statuses2.0.14.57 kBMIT
prod
typescript5.2.26.9 MBApache-2.0
prod peer
vite4.4.9753.38 kBMIT
prod peer
2
2
yup0.32.952.76 kBMIT
prod

Visualizations