Generated on May 15, 2024 via pnpm

Npm

Home

@t00nday/nestjs-pdf 2.0.2

PDF generator for nestjs framework.

pdf

nestjs

html-pdf

nestjs/pdf

@nestjs/pdf

Package summary

issues

licenses

Package created

12 Nov 2020

Version published

12 Nov 2020

Maintainers

Total deps

156

Direct deps

License

MIT

Issues

2 critical severity issues

critical

domutils@1.5.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: juice@6.0.0

progress@1.1.8

Package has no specified license

Recommendation: Check the package code and files for license information

via: html-pdf@2.2.0

Collapse

Expand

12 high severity issues

high

html-pdf@2.2.0

Arbitrary File Read in html-pdf

Recommendation: Upgrade to version 3.0.1 or later

via: html-pdf@2.2.0

axios@0.21.1

axios Inefficient Regular Expression Complexity vulnerability

Recommendation: Upgrade to version 0.21.2 or later

via: @nestjs/common@7.6.18

nth-check@1.0.2

Inefficient Regular Expression Complexity in nth-check

Recommendation: Upgrade to version 2.0.1 or later

via: juice@6.0.0

lodash.pick@4.4.0

Prototype Pollution in lodash

Recommendation: None

via: juice@6.0.0

css-select@1.2.0

Package uses an invalid SPDX license ("BSD-like")

Recommendation: Validate that the package complies with your license policy

via: juice@6.0.0

slick@1.12.2

Package uses an invalid SPDX license ("MIT (http://mootools.net/license.txt)")

Recommendation: Validate that the package complies with your license policy

via: juice@6.0.0

har-validator@5.1.5

Deprecated package

via: html-pdf@2.2.0 & others

html-pdf@2.2.0

Deprecated package

via: html-pdf@2.2.0

phantomjs-prebuilt@2.1.16

Deprecated package

via: html-pdf@2.2.0

phantomjs-prebuilt@2.1.16

Package uses install script: "node install.js"

via: html-pdf@2.2.0

request@2.88.2

Deprecated package

via: html-pdf@2.2.0 & others

uuid@3.4.0

Deprecated package

via: html-pdf@2.2.0 & others

Collapse

Expand

3 moderate severity issues

moderate

axios@0.21.1

Axios Cross-Site Request Forgery Vulnerability

Recommendation: Upgrade to version 0.28.0 or later

via: @nestjs/common@7.6.18

tough-cookie@2.5.0

tough-cookie Prototype Pollution vulnerability

Recommendation: Upgrade to version 4.1.3 or later

via: html-pdf@2.2.0 & others

request@2.88.2

Server-Side Request Forgery in Request

Recommendation: None

via: html-pdf@2.2.0 & others

Collapse

Expand

2 low severity issues

low

css-select@1.2.0

Package uses a license that is not OSI approved ("BSD-like")

Recommendation: Read and validate the license terms

via: juice@6.0.0

slick@1.12.2

Package uses a license that is not OSI approved ("MIT (http://mootools.net/license.txt)")

Recommendation: Read and validate the license terms

via: juice@6.0.0

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

113 Packages, Including:

@nestjs/common@7.6.18

@t00nday/nestjs-pdf@2.0.2

ajv@6.12.6

ansi-styles@3.2.1

asn1@0.2.6

assert-plus@1.0.0

async@3.2.5

asynckit@0.4.0

aws4@1.12.0

axios@0.21.1

bluebird@3.7.2

buffer-crc32@0.2.13

buffer-from@1.1.2

chalk@2.4.2

cheerio@0.22.0

color-convert@1.9.3

color-name@1.1.3

combined-stream@1.0.8

commander@2.20.3

concat-stream@1.6.2

consolidate@0.15.1

core-util-is@1.0.2

core-util-is@1.0.3

cross-spawn@6.0.5

dashdash@1.14.1

datauri@2.0.0

debug@2.6.9

deep-extend@0.6.0

delayed-stream@1.0.0

dom-serializer@0.1.1

dom-serializer@1.4.1

ecc-jsbn@0.1.2

es6-promise@4.2.8

escape-string-regexp@1.0.5

extend@3.0.2

extsprintf@1.3.0

fast-deep-equal@3.1.3

fast-json-stable-stringify@2.1.0

fd-slicer@1.1.0

follow-redirects@1.15.6

form-data@2.3.3

fs-extra@1.0.0

getpass@0.1.7

har-validator@5.1.5

has-flag@3.0.0

hasha@2.2.0

html-pdf@2.2.0

htmlparser2@3.10.1

htmlparser2@4.1.0

http-signature@1.2.0

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

13 Packages, Including:

css-what@2.1.3

domelementtype@1.3.1

domelementtype@2.3.0

domhandler@2.4.2

domhandler@3.3.0

domhandler@4.3.1

domutils@1.7.0

domutils@2.8.0

entities@1.1.2

entities@2.2.0

extract-zip@1.7.0

nth-check@1.0.2

uri-js@4.4.1

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

10 Packages, Including:

aws-sign2@0.7.0

caseless@0.12.0

forever-agent@0.6.1

kew@0.7.0

oauth-sign@0.9.0

phantomjs-prebuilt@2.1.16

reflect-metadata@0.1.14

request@2.88.2

rxjs@6.6.7

tunnel-agent@0.6.0

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

9 Packages, Including:

boolbase@1.0.0

graceful-fs@4.2.11

har-schema@2.0.0

inherits@2.0.4

isexe@2.0.0

iterare@1.2.1

json-stringify-safe@5.0.1

semver@5.7.2

which@1.3.1

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

3 Packages, Including:

bcrypt-pbkdf@1.0.2

qs@6.5.3

tough-cookie@2.5.0

N/A

2 Packages, Including:

domutils@1.5.1

progress@1.1.8

BSD Zero Clause License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

include-copyright

include-license

include-original

Cannot

hold-liable

Must

2 Packages, Including:

tslib@1.14.1

tslib@2.2.0

BSD-like

Invalid

Not OSI Approved

1 Packages, Including:

css-select@1.2.0

(AFL-2.1 OR BSD-3-Clause)

Permissive

1 Packages, Including:

json-schema@0.4.0

MIT (http://mootools.net/license.txt)

Invalid

Not OSI Approved

1 Packages, Including:

slick@1.12.2

The Unlicense

Public Domain

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

private-use

modify

Cannot

include-copyright

hold-liable

Must

1 Packages, Including:

tweetnacl@0.14.5

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of @t00nday/nestjs-pdf 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
@nestjs/common	7.6.18	64.58 kB	MIT	prod peer	1 1
consolidate	0.15.1	12.12 kB	MIT	prod
html-pdf	2.2.0	71.37 kB	MIT	prod	1 7 2
juice	6.0.0	17.41 kB	MIT	prod	1 7 2 2
lodash.merge	4.6.2	12.77 kB	MIT	prod
lodash.omit	4.5.0	9.79 kB	MIT	prod
reflect-metadata	0.1.14	44.22 kB	Apache-2.0	prod peer
rxjs	6.6.7	736.44 kB	Apache-2.0	prod peer