Home
Docs
GitHub
Pricing
Blog
Log In
DOCS
GITHUB
PRICING
BLOG
Log In

Run Sandworm Audit for your App

Get started
Generated on May 30, 2024 via pnpm
Repo
Npm
Home

@strapi/strapi 4.17.0

An open source headless CMS solution to create and manage your own API. It provides a powerful dashboard and features to make your life easier. Databases supported: MySQL, MariaDB, PostgreSQL, SQLite
strapi
cms
cmf
content management system
content management framework
admin panel
dashboard
api
auth
framework
http
json
koa
koajs
helmet
mvc
oauth
oauth2
orm
rest
restful
security
jam
jamstack
javascript
headless
MySQL
MariaDB
PostgreSQL
SQLite
graphqL
infrastructure
backend
open source
self hosted
lerna
lernajs
react
reactjs
Package summary
Share
79
issues
2
critical severity
license
2
40
high severity
vulnerability
3
license
24
meta
13
12
moderate severity
vulnerability
4
meta
8
25
low severity
license
25
18
licenses
1064
MIT
60
ISC
31
Apache-2.0
91
other licenses
BSD-2-Clause
25
BSD-3-Clause
23
SEE LICENSE IN LICENSE
21
(MIT OR CC0-1.0)
5
+ 11 more
Package created
30 Jul 2021
Version published
10 Jan 2024
Maintainers
9
Total deps
1246
Direct deps
62
License
SEE LICENSE IN LICENSE

Issues

79

2 critical severity issues

critical
only@0.0.2
Package has no specified license
Recommendation: Check the package code and files for license information
via: @strapi/admin@4.17.0 & others
pause@0.0.1
Package has no specified license
Recommendation: Check the package code and files for license information
via: @strapi/admin@4.17.0
Collapse
Expand

40 high severity issues

high
@koa/cors@3.4.3
Overly permissive origin policy
Recommendation: Upgrade to version 5.0.0 or later
via: @koa/cors@3.4.3 & others
vite@4.4.9
Vite dev server option `server.fs.deny` can be bypassed when hosted on case-insensitive filesystem
Recommendation: Upgrade to version 4.5.2 or later
via: @strapi/pack-up@4.17.0
webpack-dev-middleware@6.1.1
Path traversal in webpack-dev-middleware
Recommendation: Upgrade to version 6.1.2 or later
via: @strapi/admin@4.17.0
@strapi/admin@4.17.0
Package uses an invalid SPDX license ("SEE LICENSE IN LICENSE")
Recommendation: Validate that the package complies with your license policy
via: @strapi/admin@4.17.0
@strapi/content-releases@4.17.0
Package uses an invalid SPDX license ("SEE LICENSE IN LICENSE")
Recommendation: Validate that the package complies with your license policy
via: @strapi/content-releases@4.17.0
@strapi/data-transfer@4.17.0
Package uses an invalid SPDX license ("SEE LICENSE IN LICENSE")
Recommendation: Validate that the package complies with your license policy
via: @strapi/admin@4.17.0 & others
@strapi/database@4.17.0
Package uses an invalid SPDX license ("SEE LICENSE IN LICENSE")
Recommendation: Validate that the package complies with your license policy
via: @strapi/admin@4.17.0 & others
@strapi/generate-new@4.17.0
Package uses an invalid SPDX license ("SEE LICENSE IN LICENSE")
Recommendation: Validate that the package complies with your license policy
via: @strapi/generate-new@4.17.0
@strapi/generators@4.17.0
Package uses an invalid SPDX license ("SEE LICENSE IN LICENSE")
Recommendation: Validate that the package complies with your license policy
via: @strapi/generators@4.17.0 & others
@strapi/helper-plugin@4.17.0
Package uses an invalid SPDX license ("SEE LICENSE IN LICENSE")
Recommendation: Validate that the package complies with your license policy
via: @strapi/admin@4.17.0 & others
@strapi/logger@4.17.0
Package uses an invalid SPDX license ("SEE LICENSE IN LICENSE")
Recommendation: Validate that the package complies with your license policy
via: @strapi/admin@4.17.0 & others
@strapi/pack-up@4.17.0
Package uses an invalid SPDX license ("SEE LICENSE IN LICENSE")
Recommendation: Validate that the package complies with your license policy
via: @strapi/pack-up@4.17.0
@strapi/permissions@4.17.0
Package uses an invalid SPDX license ("SEE LICENSE IN LICENSE")
Recommendation: Validate that the package complies with your license policy
via: @strapi/admin@4.17.0 & others
@strapi/plugin-content-manager@4.17.0
Package uses an invalid SPDX license ("SEE LICENSE IN LICENSE")
Recommendation: Validate that the package complies with your license policy
via: @strapi/plugin-content-manager@4.17.0
@strapi/plugin-content-type-builder@4.17.0
Package uses an invalid SPDX license ("SEE LICENSE IN LICENSE")
Recommendation: Validate that the package complies with your license policy
via: @strapi/plugin-content-type-builder@4.17.0
@strapi/plugin-email@4.17.0
Package uses an invalid SPDX license ("SEE LICENSE IN LICENSE")
Recommendation: Validate that the package complies with your license policy
via: @strapi/plugin-email@4.17.0
@strapi/plugin-upload@4.17.0
Package uses an invalid SPDX license ("SEE LICENSE IN LICENSE")
Recommendation: Validate that the package complies with your license policy
via: @strapi/plugin-upload@4.17.0
@strapi/provider-audit-logs-local@4.17.0
Package uses an invalid SPDX license ("SEE LICENSE IN LICENSE")
Recommendation: Validate that the package complies with your license policy
via: @strapi/admin@4.17.0
@strapi/provider-email-sendmail@4.17.0
Package uses an invalid SPDX license ("SEE LICENSE IN LICENSE")
Recommendation: Validate that the package complies with your license policy
via: @strapi/plugin-email@4.17.0
@strapi/provider-upload-local@4.17.0
Package uses an invalid SPDX license ("SEE LICENSE IN LICENSE")
Recommendation: Validate that the package complies with your license policy
via: @strapi/plugin-upload@4.17.0
@strapi/strapi@4.17.0
Package uses an invalid SPDX license ("SEE LICENSE IN LICENSE")
Recommendation: Validate that the package complies with your license policy
via: @strapi/strapi@4.17.0
@strapi/types@4.17.0
Package uses an invalid SPDX license ("SEE LICENSE IN LICENSE")
Recommendation: Validate that the package complies with your license policy
via: @strapi/admin@4.17.0 & others
@strapi/typescript-utils@4.17.0
Package uses an invalid SPDX license ("SEE LICENSE IN LICENSE")
Recommendation: Validate that the package complies with your license policy
via: @strapi/admin@4.17.0 & others
@strapi/utils@4.17.0
Package uses an invalid SPDX license ("SEE LICENSE IN LICENSE")
Recommendation: Validate that the package complies with your license policy
via: @strapi/admin@4.17.0 & others
caniuse-lite@1.0.30001625
Package uses an atypical license ("CC-BY-4.0")
Recommendation: Read and validate the license terms
via: @strapi/admin@4.17.0 & others
rc@1.2.8
Package uses a custom license expression: `(BSD-2-Clause OR MIT OR Apache-2.0)`
Recommendation: Validate that the license expression complies with your license policy
via: @strapi/pack-up@4.17.0 & others
spdx-exceptions@2.5.0
Package uses an atypical license ("CC-BY-3.0")
Recommendation: Read and validate the license terms
via: @strapi/admin@4.17.0
@strapi/strapi@4.17.0
Package uses postinstall script: "node ./scripts/postinstall.js"
via: @strapi/strapi@4.17.0
buildmail@3.10.0
Deprecated package
via: @strapi/plugin-email@4.17.0
core-js-pure@3.37.1
Package uses postinstall script: "node -e "try{require('./postinstall')}catch(e){}""
via: @strapi/admin@4.17.0 & others
esbuild@0.16.17
Package uses postinstall script: "node install.js"
via: @strapi/admin@4.17.0 & others
esbuild@0.18.20
Package uses postinstall script: "node install.js"
via: @strapi/pack-up@4.17.0
esbuild@0.19.2
Package uses postinstall script: "node install.js"
via: @strapi/admin@4.17.0 & others
formidable@1.2.6
Deprecated package
via: koa-body@4.2.0
mailcomposer@3.12.0
Deprecated package
via: @strapi/plugin-email@4.17.0
resolve-url@0.2.1
Deprecated package
via: @strapi/generators@4.17.0 & others
sharp@0.32.6
Package uses install script: "(node install/libvips && node install/dll-copy && prebuild-install) || (node install/can-compile && node-gyp rebuild && node install/dll-copy)"
via: @strapi/plugin-upload@4.17.0
source-map-resolve@0.5.3
Deprecated package
via: @strapi/generators@4.17.0 & others
source-map-url@0.4.1
Deprecated package
via: @strapi/generators@4.17.0 & others
urix@0.1.0
Deprecated package
via: @strapi/generators@4.17.0 & others
Collapse
Expand

12 moderate severity issues

moderate
vite@4.4.9
Vite XSS vulnerability in `server.transformIndexHtml` via URL payload
Recommendation: Upgrade to version 4.4.12 or later
via: @strapi/pack-up@4.17.0
sanitize-html@2.11.0
sanitize-html Information Exposure vulnerability
Recommendation: Upgrade to version 2.12.1 or later
via: @strapi/admin@4.17.0
vite@4.4.9
Vite's `server.fs.deny` did not deny requests for patterns with directories.
Recommendation: Upgrade to version 4.5.3 or later
via: @strapi/pack-up@4.17.0
tar@6.1.13
Denial of service while parsing a tar file due to lack of folders count validation
Recommendation: Upgrade to version 6.2.1 or later
via: @strapi/admin@4.17.0 & others
@strapi/data-transfer@4.17.0
Package has no specified source code repository
via: @strapi/admin@4.17.0 & others
@strapi/design-system@1.14.1
Package has no specified source code repository
via: @strapi/admin@4.17.0 & others
@strapi/icons@1.14.1
Package has no specified source code repository
via: @strapi/admin@4.17.0 & others
@strapi/plugin-upload@4.17.0
Package has no specified source code repository
via: @strapi/plugin-upload@4.17.0
@strapi/ui-primitives@1.18.0
Package has no specified source code repository
via: @strapi/admin@4.17.0 & others
esbuild-register@3.5.0
Package has no specified source code repository
via: @strapi/admin@4.17.0 & others
pause@0.0.1
Package has no specified source code repository
via: @strapi/admin@4.17.0
react-style-singleton@2.2.1
Package has no specified source code repository
via: @strapi/admin@4.17.0 & others
Collapse
Expand

25 low severity issues

low
@strapi/admin@4.17.0
Package uses a license that is not OSI approved ("SEE LICENSE IN LICENSE")
Recommendation: Read and validate the license terms
via: @strapi/admin@4.17.0
@strapi/content-releases@4.17.0
Package uses a license that is not OSI approved ("SEE LICENSE IN LICENSE")
Recommendation: Read and validate the license terms
via: @strapi/content-releases@4.17.0
@strapi/data-transfer@4.17.0
Package uses a license that is not OSI approved ("SEE LICENSE IN LICENSE")
Recommendation: Read and validate the license terms
via: @strapi/admin@4.17.0 & others
@strapi/database@4.17.0
Package uses a license that is not OSI approved ("SEE LICENSE IN LICENSE")
Recommendation: Read and validate the license terms
via: @strapi/admin@4.17.0 & others
@strapi/generate-new@4.17.0
Package uses a license that is not OSI approved ("SEE LICENSE IN LICENSE")
Recommendation: Read and validate the license terms
via: @strapi/generate-new@4.17.0
@strapi/generators@4.17.0
Package uses a license that is not OSI approved ("SEE LICENSE IN LICENSE")
Recommendation: Read and validate the license terms
via: @strapi/generators@4.17.0 & others
@strapi/helper-plugin@4.17.0
Package uses a license that is not OSI approved ("SEE LICENSE IN LICENSE")
Recommendation: Read and validate the license terms
via: @strapi/admin@4.17.0 & others
@strapi/logger@4.17.0
Package uses a license that is not OSI approved ("SEE LICENSE IN LICENSE")
Recommendation: Read and validate the license terms
via: @strapi/admin@4.17.0 & others
@strapi/pack-up@4.17.0
Package uses a license that is not OSI approved ("SEE LICENSE IN LICENSE")
Recommendation: Read and validate the license terms
via: @strapi/pack-up@4.17.0
@strapi/permissions@4.17.0
Package uses a license that is not OSI approved ("SEE LICENSE IN LICENSE")
Recommendation: Read and validate the license terms
via: @strapi/admin@4.17.0 & others
@strapi/plugin-content-manager@4.17.0
Package uses a license that is not OSI approved ("SEE LICENSE IN LICENSE")
Recommendation: Read and validate the license terms
via: @strapi/plugin-content-manager@4.17.0
@strapi/plugin-content-type-builder@4.17.0
Package uses a license that is not OSI approved ("SEE LICENSE IN LICENSE")
Recommendation: Read and validate the license terms
via: @strapi/plugin-content-type-builder@4.17.0
@strapi/plugin-email@4.17.0
Package uses a license that is not OSI approved ("SEE LICENSE IN LICENSE")
Recommendation: Read and validate the license terms
via: @strapi/plugin-email@4.17.0
@strapi/plugin-upload@4.17.0
Package uses a license that is not OSI approved ("SEE LICENSE IN LICENSE")
Recommendation: Read and validate the license terms
via: @strapi/plugin-upload@4.17.0
@strapi/provider-audit-logs-local@4.17.0
Package uses a license that is not OSI approved ("SEE LICENSE IN LICENSE")
Recommendation: Read and validate the license terms
via: @strapi/admin@4.17.0
@strapi/provider-email-sendmail@4.17.0
Package uses a license that is not OSI approved ("SEE LICENSE IN LICENSE")
Recommendation: Read and validate the license terms
via: @strapi/plugin-email@4.17.0
@strapi/provider-upload-local@4.17.0
Package uses a license that is not OSI approved ("SEE LICENSE IN LICENSE")
Recommendation: Read and validate the license terms
via: @strapi/plugin-upload@4.17.0
@strapi/strapi@4.17.0
Package uses a license that is not OSI approved ("SEE LICENSE IN LICENSE")
Recommendation: Read and validate the license terms
via: @strapi/strapi@4.17.0
@strapi/types@4.17.0
Package uses a license that is not OSI approved ("SEE LICENSE IN LICENSE")
Recommendation: Read and validate the license terms
via: @strapi/admin@4.17.0 & others
@strapi/typescript-utils@4.17.0
Package uses a license that is not OSI approved ("SEE LICENSE IN LICENSE")
Recommendation: Read and validate the license terms
via: @strapi/admin@4.17.0 & others
@strapi/utils@4.17.0
Package uses a license that is not OSI approved ("SEE LICENSE IN LICENSE")
Recommendation: Read and validate the license terms
via: @strapi/admin@4.17.0 & others
fractional-indexing@3.2.0
Package uses a license that is not OSI approved ("CC0-1.0")
Recommendation: Read and validate the license terms
via: @strapi/admin@4.17.0
spdx-license-ids@3.0.18
Package uses a license that is not OSI approved ("CC0-1.0")
Recommendation: Read and validate the license terms
via: @strapi/admin@4.17.0
caniuse-lite@1.0.30001625
Package uses a license that is not OSI approved ("CC-BY-4.0")
Recommendation: Read and validate the license terms
via: @strapi/admin@4.17.0 & others
spdx-exceptions@2.5.0
Package uses a license that is not OSI approved ("CC-BY-3.0")
Recommendation: Read and validate the license terms
via: @strapi/admin@4.17.0
Collapse
Expand

Licenses

MIT
1064
ISC
60
Apache-2.0
31
BSD-2-Clause
25
BSD-3-Clause
23
SEE LICENSE IN LICENSE
21
(MIT OR CC0-1.0)
5
Unlicense
3
0BSD
3
CC0-1.0
2
N/A
2
Python-2.0
1
(MIT OR Apache-2.0)
1
CC-BY-4.0
1
(MIT OR WTFPL)
1
(WTFPL OR MIT)
1
(BSD-2-Clause OR MIT OR Apa...
1
CC-BY-3.0
1

MIT License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
Cannot
hold-liable
Must
include-copyright
include-license
1064 Packages, Including:
@babel/code-frame@7.24.6
@babel/compat-data@7.24.6
@babel/core@7.24.6
@babel/generator@7.24.6
@babel/helper-annotate-as-pure@7.24.6
@babel/helper-compilation-targets@7.24.6
@babel/helper-environment-visitor@7.24.6
@babel/helper-function-name@7.24.6
@babel/helper-hoist-variables@7.24.6
@babel/helper-module-imports@7.24.6
@babel/helper-module-transforms@7.24.6
@babel/helper-plugin-utils@7.24.6
@babel/helper-simple-access@7.24.6
@babel/helper-split-export-declaration@7.24.6
@babel/helper-string-parser@7.24.6
@babel/helper-validator-identifier@7.24.6
@babel/helper-validator-option@7.24.6
@babel/helpers@7.24.6
@babel/highlight@7.24.6
@babel/parser@7.24.6
@babel/plugin-syntax-jsx@7.24.6
@babel/plugin-transform-react-jsx-self@7.24.6
@babel/plugin-transform-react-jsx-source@7.24.6
@babel/runtime-corejs3@7.24.6
@babel/runtime@7.24.6
@babel/template@7.24.6
@babel/traverse@7.24.6
@babel/types@7.24.6
@casl/ability@6.5.0
@codemirror/autocomplete@6.16.1
@codemirror/commands@6.5.0
@codemirror/lang-json@6.0.1
@codemirror/language@6.10.1
@codemirror/lint@6.8.0
@codemirror/search@6.5.6
@codemirror/state@6.4.1
@codemirror/theme-one-dark@6.1.2
@codemirror/view@6.26.3
@colors/colors@1.5.0
@colors/colors@1.6.0
@dabh/diagnostics@2.0.3
@discoveryjs/json-ext@0.5.7
@emotion/babel-plugin@11.11.0
@emotion/cache@11.11.0
@emotion/hash@0.9.1
@emotion/is-prop-valid@0.8.8
@emotion/memoize@0.7.4
@emotion/memoize@0.8.1
@emotion/react@11.11.4
@emotion/serialize@1.1.4

ISC License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
Cannot
hold-liable
Must
include-copyright
include-license
60 Packages, Including:
ansi-align@3.0.1
anymatch@3.1.3
boolbase@1.0.0
chownr@1.1.4
chownr@2.0.0
cli-width@3.0.0
cliui@7.0.4
common-path-prefix@3.0.0
css-color-keywords@1.0.0
electron-to-chromium@1.4.785
fastq@1.17.1
fs-minipass@2.1.0
fs.realpath@1.0.0
get-caller-file@2.0.5
glob-parent@5.1.2
glob@7.2.3
glob@8.1.0
graceful-fs@4.2.10
graceful-fs@4.2.11
hosted-git-info@2.8.9
icss-utils@5.1.0
inflight@1.0.6
inherits@2.0.3
inherits@2.0.4
ini@1.3.8
ini@4.1.1
isexe@2.0.0
lru-cache@5.1.1
lru-cache@6.0.0
minimatch@3.1.2
minimatch@5.1.6
minipass@3.3.6
minipass@4.2.8
mute-stream@0.0.8
nano-time@1.0.0
noms@0.0.0
once@1.4.0
picocolors@1.0.1
postcss-modules-extract-imports@3.1.0
postcss-modules-scope@3.2.0
postcss-modules-values@4.0.0
proto-list@1.2.4
rimraf@2.7.1
rimraf@3.0.2
semver@5.7.2
semver@6.3.1
semver@7.5.4
setprototypeof@1.1.0
setprototypeof@1.2.0
signal-exit@3.0.7

Apache License 2.0

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
use-patent-claims
place-warranty
Cannot
hold-liable
use-trademark
Must
include-copyright
include-license
state-changes
include-notice
31 Packages, Including:
@ampproject/remapping@2.3.0
@internationalized/date@3.5.4
@internationalized/number@3.5.3
@juggle/resize-observer@3.4.0
@swc/helpers@0.5.11
@ucast/core@1.10.2
@ucast/js@3.0.4
@ucast/mongo2js@1.3.4
@ucast/mongo@2.4.3
@webassemblyjs/leb128@1.11.6
@xtuc/long@4.2.2
ansi-html-community@0.0.8
b4a@1.6.6
bare-events@2.3.1
bare-fs@2.3.0
bare-os@2.3.0
bare-path@2.1.3
bare-stream@1.0.0
detect-libc@2.0.3
ecdsa-sig-formatter@1.0.11
formik@2.4.0
human-signals@2.1.0
human-signals@4.3.1
rxjs@6.6.7
rxjs@7.8.1
sharp@0.32.6
spdx-correct@3.2.0
tunnel-agent@0.6.0
typescript@5.2.2
unload@2.2.0
validate-npm-package-license@3.0.4

BSD 2-Clause "Simplified" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
hold-liable
Must
include-copyright
include-license
25 Packages, Including:
configstore@5.0.1
css-select@4.3.0
css-what@6.1.0
domelementtype@2.3.0
domhandler@4.3.1
domhandler@5.0.3
domutils@2.8.0
domutils@3.1.0
dotenv@14.2.0
entities@2.1.0
entities@2.2.0
entities@4.5.0
eslint-scope@5.1.1
esrecurse@4.3.0
estraverse@4.3.0
estraverse@5.3.0
glob-to-regexp@0.4.1
http-cache-semantics@4.1.1
normalize-package-data@2.5.0
nth-check@2.1.1
progress-stream@2.0.0
terser@5.31.0
uglify-js@3.17.4
uri-js@4.4.1
webidl-conversions@3.0.1

BSD 3-Clause "New" or "Revised" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
use-trademark
hold-liable
Must
include-copyright
include-license
23 Packages, Including:
@sentry/core@6.19.7
@sentry/hub@6.19.7
@sentry/minimal@6.19.7
@sentry/node@6.19.7
@sentry/types@6.19.7
@sentry/utils@6.19.7
@xtuc/ieee754@1.2.0
buffer-equal-constant-time@1.0.1
highlight.js@10.7.3
hoist-non-react-statics@3.3.2
ieee754@1.2.1
intl-messageformat@10.3.4
qs@6.11.1
react-intl@6.4.1
react-transition-group@4.4.5
serialize-javascript@6.0.2
source-map-js@1.2.0
source-map@0.5.7
source-map@0.6.1
source-map@0.7.4
sprintf-js@1.0.3
stream-chain@2.2.5
stream-json@1.8.0

SEE LICENSE IN LICENSE

Invalid
Not OSI Approved
21 Packages, Including:
@strapi/admin@4.17.0
@strapi/content-releases@4.17.0
@strapi/data-transfer@4.17.0
@strapi/database@4.17.0
@strapi/generate-new@4.17.0
@strapi/generators@4.17.0
@strapi/helper-plugin@4.17.0
@strapi/logger@4.17.0
@strapi/pack-up@4.17.0
@strapi/permissions@4.17.0
@strapi/plugin-content-manager@4.17.0
@strapi/plugin-content-type-builder@4.17.0
@strapi/plugin-email@4.17.0
@strapi/plugin-upload@4.17.0
@strapi/provider-audit-logs-local@4.17.0
@strapi/provider-email-sendmail@4.17.0
@strapi/provider-upload-local@4.17.0
@strapi/strapi@4.17.0
@strapi/types@4.17.0
@strapi/typescript-utils@4.17.0
@strapi/utils@4.17.0

(MIT OR CC0-1.0)

Public Domain
5 Packages, Including:
type-fest@0.20.2
type-fest@0.21.3
type-fest@0.6.0
type-fest@0.8.1
type-fest@2.19.0

The Unlicense

Public Domain
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
private-use
modify
Cannot
include-copyright
hold-liable
Must
3 Packages, Including:
big-integer@1.6.52
fs-monkey@1.0.6
memfs@3.5.3

BSD Zero Clause License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
include-copyright
include-license
include-original
Cannot
hold-liable
Must
3 Packages, Including:
pony-cause@2.1.11
tslib@1.14.1
tslib@2.6.2

Creative Commons Zero v1.0 Universal

Public Domain
Not OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
Cannot
Must
2 Packages, Including:
fractional-indexing@3.2.0
spdx-license-ids@3.0.18

N/A

N/A
2 Packages, Including:
only@0.0.2
pause@0.0.1

Python License 2.0

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
Cannot
use-trademark
hold-liable
Must
include-copyright
include-license
state-changes
1 Packages, Including:
argparse@2.0.1

(MIT OR Apache-2.0)

Permissive
1 Packages, Including:
atob@2.1.2

Creative Commons Attribution 4.0 International

Uncategorized
Not OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
Cannot
Must
1 Packages, Including:
caniuse-lite@1.0.30001625

(MIT OR WTFPL)

Permissive
1 Packages, Including:
expand-template@2.0.3

(WTFPL OR MIT)

Permissive
1 Packages, Including:
opener@1.5.2

(BSD-2-Clause OR MIT OR Apache-2.0)

Expression
1 Packages, Including:
rc@1.2.8

Creative Commons Attribution 3.0 Unported

Uncategorized
Not OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
Cannot
Must
1 Packages, Including:
spdx-exceptions@2.5.0
Disclaimer

This deed highlights only some of the key features and terms of the actual license. It is not a license and has no legal value. You should carefully review all of the terms and conditions of the actual license before using the licensed material.

Sandworm is not a law firm and does not provide legal services. Distributing, displaying, or linking to this deed or the license that it summarizes does not create a lawyer-client or any other relationship.

Direct Dependencies

62
All Dependencies CSV
β“˜ This is a list of @strapi/strapi 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.
NameVersionSizeLicenseTypeVulnerabilities
@koa/cors3.4.35.68 kBMIT
prod
1
@koa/router10.1.110.76 kBMIT
prod
@strapi/admin4.17.03.27 MBSEE LICENSE IN LICENSE
prod
2
17
9
14
@strapi/content-releases4.17.096.51 kBSEE LICENSE IN LICENSE
prod
1
9
4
8
@strapi/data-transfer4.17.0248.52 kBSEE LICENSE IN LICENSE
prod
1
7
2
6
@strapi/database4.17.0252.77 kBSEE LICENSE IN LICENSE
prod
2
2
@strapi/generate-new4.17.055.34 kBSEE LICENSE IN LICENSE
prod
1
1
1
@strapi/generators4.17.034.78 kBSEE LICENSE IN LICENSE
prod
8
3
@strapi/logger4.17.05.74 kBSEE LICENSE IN LICENSE
prod
1
1
@strapi/pack-up4.17.0153.2 kBSEE LICENSE IN LICENSE
prod
7
3
2
@strapi/permissions4.17.013.63 kBSEE LICENSE IN LICENSE
prod
2
2
@strapi/plugin-content-manager4.17.0130.65 kBSEE LICENSE IN LICENSE
prod
1
7
6
@strapi/plugin-content-type-builder4.17.0549.38 kBSEE LICENSE IN LICENSE
prod
11
4
6
@strapi/plugin-email4.17.033.51 kBSEE LICENSE IN LICENSE
prod
1
7
4
5
@strapi/plugin-upload4.17.0490.92 kBSEE LICENSE IN LICENSE
prod
7
5
5
@strapi/types4.17.050.11 kBSEE LICENSE IN LICENSE
prod
1
6
5
@strapi/typescript-utils4.17.015.82 kBSEE LICENSE IN LICENSE
prod
1
1
@strapi/utils4.17.0149.66 kBSEE LICENSE IN LICENSE
prod
1
1
bcryptjs2.4.376.21 kBMIT
prod
boxen5.1.25.72 kBMIT
prod
chalk4.1.211.31 kBMIT
prod
ci-info3.8.07.16 kBMIT
prod
cli-table30.6.214.31 kBMIT
prod
commander8.3.038.44 kBMIT
prod
configstore5.0.13.32 kBBSD-2-Clause
prod
copyfiles2.4.15.39 kBMIT
prod
debug4.3.412.94 kBMIT
prod
delegates1.0.02.78 kBMIT
prod
dotenv14.2.010.01 kBBSD-2-Clause
prod
execa5.1.114.15 kBMIT
prod
fs-extra10.0.032.9 kBMIT
prod
get-latest-version5.1.03.3 kBMIT
prod
1
git-url-parse13.1.09.33 kBMIT
prod
glob7.2.315.08 kBISC
prod
http-errors1.8.16.03 kBMIT
prod
https-proxy-agent5.0.18.21 kBMIT
prod
inquirer8.2.523.25 kBMIT
prod
is-docker2.2.11.65 kBMIT
prod
koa-body4.2.07.26 kBMIT
prod
1
koa-compose4.1.01.77 kBMIT
prod
koa-compress5.1.04.97 kBMIT
prod
koa-favicon2.1.01.5 kBMIT
prod
koa-helmet7.0.22.82 kBMIT
prod
koa-ip2.1.32.48 kBMIT
prod
koa-session6.4.011.56 kBMIT
prod
koa-static5.0.02.95 kBMIT
prod
koa2.13.426.67 kBMIT
prod peer
1
lodash4.17.21311.49 kBMIT
prod
mime-types2.1.355.46 kBMIT
prod
node-fetch2.7.043.6 kBMIT
prod
node-machine-id1.1.1212.76 kBMIT
prod
node-schedule2.1.011.03 kBMIT
prod
open8.4.012.71 kBMIT
prod
ora5.4.16.74 kBMIT
prod
outdent0.8.09.68 kBMIT
prod
package-json7.0.04.39 kBMIT
prod
1
pkg-up3.1.01.97 kBMIT
prod
qs6.11.150.74 kBBSD-3-Clause
prod
semver7.5.426.25 kBISC
prod
statuses2.0.14.57 kBMIT
prod
typescript5.2.26.9 MBApache-2.0
prod peer
yup0.32.952.76 kBMIT
prod

Visualizations

Tree
Treemap

Recent Versions

Sandworm Dunes
Ready to start?

Scan your app for security vulnerabilities and license issues

Start Free With GitHub
Sandworm Open Source
Sandworm
Getting Started Issue Types Resolve Issues License Policies Sandworm Guard
Explore
Npm Package List Composer Package List Npm Categories List Npm Security Vulnerabilities Composer Security Vulnerabilities
Support
Sponsor Discuss Terms of Use Privacy Policy Security
More from Sandworm
Newsletter 𝕏 / Twitter 𝕏 / Twitter Security Alerts Knowledge Base Blog Contact