Home
Docs
GitHub
Pricing
Blog
Log In

Run Sandworm Audit for your App

Get started
Hold on, we're currently generating a fresh version of this report
Generated on Jul 15, 2024 via pnpm

@sveltejs/kit 2.2.2

The fastest way to build Svelte apps
Package summary
Share
5
issues
4
high severity
vulnerability
2
meta
2
1
low severity
license
1
5
licenses
84
MIT
3
Apache-2.0
2
ISC
2
other licenses
CC0-1.0
1
BSD-3-Clause
1
Package created
14 Oct 2020
Version published
10 Jan 2024
Maintainers
4
Total deps
91
Direct deps
15
License
MIT

Issues

5

4 high severity issues

high
Recommendation: Upgrade to version 2.4.3 or later
via: @sveltejs/kit@2.2.2
Recommendation: Upgrade to version 2.4.3 or later
via: @sveltejs/kit@2.2.2
via: @sveltejs/kit@2.2.2
via: @sveltejs/vite-plugin-svelte@3.1.1 & others
Collapse
Expand

1 low severity issue

low
Recommendation: Read and validate the license terms
via: @sveltejs/vite-plugin-svelte@3.1.1 & others
Collapse
Expand

Licenses

MIT License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
Cannot
hold-liable
Must
include-copyright
include-license
84 Packages, Including:
@esbuild/aix-ppc64@0.21.5
@esbuild/android-arm64@0.21.5
@esbuild/android-arm@0.21.5
@esbuild/android-x64@0.21.5
@esbuild/darwin-arm64@0.21.5
@esbuild/darwin-x64@0.21.5
@esbuild/freebsd-arm64@0.21.5
@esbuild/freebsd-x64@0.21.5
@esbuild/linux-arm64@0.21.5
@esbuild/linux-arm@0.21.5
@esbuild/linux-ia32@0.21.5
@esbuild/linux-loong64@0.21.5
@esbuild/linux-mips64el@0.21.5
@esbuild/linux-ppc64@0.21.5
@esbuild/linux-riscv64@0.21.5
@esbuild/linux-s390x@0.21.5
@esbuild/linux-x64@0.21.5
@esbuild/netbsd-x64@0.21.5
@esbuild/openbsd-x64@0.21.5
@esbuild/sunos-x64@0.21.5
@esbuild/win32-arm64@0.21.5
@esbuild/win32-ia32@0.21.5
@esbuild/win32-x64@0.21.5
@jridgewell/gen-mapping@0.3.5
@jridgewell/resolve-uri@3.1.2
@jridgewell/set-array@1.2.1
@jridgewell/sourcemap-codec@1.5.0
@jridgewell/trace-mapping@0.3.25
@polka/url@1.0.0-next.25
@rollup/rollup-android-arm-eabi@4.18.1
@rollup/rollup-android-arm64@4.18.1
@rollup/rollup-darwin-arm64@4.18.1
@rollup/rollup-darwin-x64@4.18.1
@rollup/rollup-linux-arm-gnueabihf@4.18.1
@rollup/rollup-linux-arm-musleabihf@4.18.1
@rollup/rollup-linux-arm64-gnu@4.18.1
@rollup/rollup-linux-arm64-musl@4.18.1
@rollup/rollup-linux-powerpc64le-gnu@4.18.1
@rollup/rollup-linux-riscv64-gnu@4.18.1
@rollup/rollup-linux-s390x-gnu@4.18.1
@rollup/rollup-linux-x64-gnu@4.18.1
@rollup/rollup-linux-x64-musl@4.18.1
@rollup/rollup-win32-arm64-msvc@4.18.1
@rollup/rollup-win32-ia32-msvc@4.18.1
@rollup/rollup-win32-x64-msvc@4.18.1
@sveltejs/kit@2.2.2
@sveltejs/vite-plugin-svelte-inspector@2.1.0
@sveltejs/vite-plugin-svelte@3.1.1
@types/cookie@0.6.0
@types/estree@1.0.5

Apache License 2.0

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
use-patent-claims
place-warranty
Cannot
hold-liable
use-trademark
Must
include-copyright
include-license
state-changes
include-notice
3 Packages, Including:
@ampproject/remapping@2.3.0
aria-query@5.3.0
axobject-query@4.0.0

ISC License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
Cannot
hold-liable
Must
include-copyright
include-license
2 Packages, Including:
picocolors@1.0.1
svelte-hmr@0.16.0

Creative Commons Zero v1.0 Universal

Public Domain
Not OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
Cannot
Must
1 Packages, Including:
mdn-data@2.0.30

BSD 3-Clause "New" or "Revised" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
use-trademark
hold-liable
Must
include-copyright
include-license
1 Packages, Including:
source-map-js@1.2.0
Disclaimer

This deed highlights only some of the key features and terms of the actual license. It is not a license and has no legal value. You should carefully review all of the terms and conditions of the actual license before using the licensed material.

Sandworm is not a law firm and does not provide legal services. Distributing, displaying, or linking to this deed or the license that it summarizes does not create a lawyer-client or any other relationship.

Direct Dependencies

15
All Dependencies CSV
β“˜ This is a list of @sveltejs/kit 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.
NameVersionSizeLicenseTypeVulnerabilities
@sveltejs/vite-plugin-svelte3.1.1123.15 kBMIT
prod peer
1
1
@types/cookie0.6.03.45 kBMIT
prod
cookie0.6.07.97 kBMIT
prod
devalue4.3.325.03 kBMIT
prod
esm-env1.0.01.33 kBMIT
prod
import-meta-resolve4.1.075.54 kBMIT
prod
kleur4.1.56.01 kBMIT
prod
magic-string0.30.10441.39 kBMIT
prod
mrmime2.0.06.15 kBMIT
prod
sade1.8.110.2 kBMIT
prod
set-cookie-parser2.6.05.71 kBMIT
prod
sirv2.0.46.06 kBMIT
prod
svelte4.2.182.51 MBMIT
prod peer
1
tiny-glob0.2.93.99 kBMIT
prod
vite5.3.33.11 MBMIT
prod peer
1

Visualizations