Generated on May 4, 2024 via pnpm

Npm

Home

@web-native-js/pm2 4.4.1

Production process manager for Node.JS applications with a built-in load balancer.

Package summary

issues

licenses

Package created

4 Sep 2020

Version published

4 Sep 2020

Maintainers

Total deps

210

Direct deps

License

AGPL-3.0

Issues

3 critical severity issues

critical

netmask@1.0.6

Improper parsing of octal bytes in netmask

Recommendation: Upgrade to version 1.1.0 or later

via: @pm2/io@4.3.5

cli-tableau@2.0.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: cli-tableau@2.0.1

escape-regexp@0.0.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: pm2-axon@3.3.0

Collapse

Expand

12 high severity issues

high

systeminformation@4.34.23

Command Injection Vulnerability in systeminformation

Recommendation: Upgrade to version 5.6.4 or later

via: systeminformation@4.34.23

pac-resolver@4.2.0

Code Injection in pac-resolver

Recommendation: Upgrade to version 5.0.0 or later

via: @pm2/agent@1.0.8 & others

degenerator@2.2.0

Code Injection in pac-resolver

Recommendation: Upgrade to version 3.0.1 or later

via: @pm2/agent@1.0.8 & others

@pm2/agent@1.0.8

Package uses a problematic Network Protective license ("AGPL-3.0")

Recommendation: Validate that the package complies with your license policy

via: @pm2/agent@1.0.8

@web-native-js/pm2@4.4.1

Package uses a problematic Network Protective license ("AGPL-3.0")

Recommendation: Validate that the package complies with your license policy

via: @web-native-js/pm2@4.4.1

@pm2/io@4.3.5

Package uses an invalid SPDX license ("Apache-2")

Recommendation: Validate that the package complies with your license policy

via: @pm2/io@4.3.5

@pm2/js-api@0.6.7

Package uses an invalid SPDX license ("Apache-2")

Recommendation: Validate that the package complies with your license policy

via: @pm2/js-api@0.6.7

charm@0.1.2

Package uses an invalid SPDX license ("MIT/X11")

Recommendation: Validate that the package complies with your license policy

via: pm2-multimeter@0.1.2

pm2-multimeter@0.1.2

Package uses an invalid SPDX license ("MIT/X11")

Recommendation: Validate that the package complies with your license policy

via: pm2-multimeter@0.1.2

tv4@1.3.0

Package uses a custom license expression: `(Public Domain OR MIT)`

Recommendation: Validate that the license expression complies with your license policy

via: pm2-deploy@1.0.2

debug@4.1.1

Deprecated package

via: @pm2/io@4.3.5 & others

uuid@3.4.0

Deprecated package

via: @pm2/io@4.3.5

Collapse

Expand

10 moderate severity issues

moderate

systeminformation@4.34.23

Command Injection Vulnerability

Recommendation: Upgrade to version 5.3.1 or later

via: systeminformation@4.34.23

ws@7.2.5

ReDoS in Sec-Websocket-Protocol header

Recommendation: Upgrade to version 7.4.6 or later

via: @pm2/agent@1.0.8

netmask@1.0.6

netmask npm package mishandles octal input data

Recommendation: Upgrade to version 2.0.1 or later

via: @pm2/io@4.3.5

semver@7.2.3

semver vulnerable to Regular Expression Denial of Service

Recommendation: Upgrade to version 7.5.2 or later

via: @pm2/agent@1.0.8

semver@6.3.0

semver vulnerable to Regular Expression Denial of Service

Recommendation: Upgrade to version 6.3.1 or later

via: @pm2/io@4.3.5

axios@0.21.4

Axios Cross-Site Request Forgery Vulnerability

Recommendation: Upgrade to version 0.28.0 or later

via: @pm2/js-api@0.6.7

ip@1.1.5

NPM IP package incorrectly identifies some private IP addresses as public

Recommendation: Upgrade to version 1.1.9 or later

via: @pm2/io@4.3.5

@pm2/agent@1.0.8

Package has no specified source code repository

via: @pm2/agent@1.0.8

@pm2/pm2-version-check@1.0.4

Package has no specified source code repository

via: @pm2/pm2-version-check@1.0.4

escape-regexp@0.0.1

Package has no specified source code repository

via: pm2-axon@3.3.0

Collapse

Expand

7 low severity issues

low

debug@4.1.1

Regular Expression Denial of Service in debug

Recommendation: Upgrade to version 4.3.1 or later

via: @pm2/io@4.3.5 & others

@pm2/agent@1.0.8

Package uses a deprecated license ("AGPL-3.0")

via: @pm2/agent@1.0.8

@web-native-js/pm2@4.4.1

Package uses a deprecated license ("AGPL-3.0")

via: @web-native-js/pm2@4.4.1

@pm2/io@4.3.5

Package uses a license that is not OSI approved ("Apache-2")

Recommendation: Read and validate the license terms

via: @pm2/io@4.3.5

@pm2/js-api@0.6.7

Package uses a license that is not OSI approved ("Apache-2")

Recommendation: Read and validate the license terms

via: @pm2/js-api@0.6.7

charm@0.1.2

Package uses a license that is not OSI approved ("MIT/X11")

Recommendation: Read and validate the license terms

via: pm2-multimeter@0.1.2

pm2-multimeter@0.1.2

Package uses a license that is not OSI approved ("MIT/X11")

Recommendation: Read and validate the license terms

via: pm2-multimeter@0.1.2

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

157 Packages, Including:

@pm2/pm2-version-check@1.0.4

@tootallnate/once@1.1.2

agent-base@4.2.1

agent-base@4.3.0

agent-base@6.0.2

amp-message@0.1.2

amp@0.3.1

ansi-colors@3.2.4

ansi-styles@4.3.0

argparse@1.0.10

ast-types@0.13.4

ast-types@0.14.2

async-limiter@1.0.1

async@1.5.2

async@2.6.4

async@3.2.5

axios@0.21.4

balanced-match@1.0.2

binary-extensions@2.3.0

blessed@0.1.81

brace-expansion@1.1.11

braces@3.0.2

buffer-from@1.1.2

bytes@3.1.2

chalk@3.0.0

chokidar@3.6.0

co@4.6.0

color-convert@2.0.1

color-name@1.1.4

commander@2.15.1

concat-map@0.0.1

core-util-is@1.0.3

cron@1.8.2

data-uri-to-buffer@1.2.0

data-uri-to-buffer@3.0.1

dayjs@1.8.36

debug@2.6.9

debug@3.1.0

debug@3.2.7

debug@4.1.1

debug@4.3.4

deep-is@0.1.4

degenerator@1.0.4

degenerator@2.2.0

depd@2.0.0

enquirer@2.3.5

es6-promise@4.2.8

es6-promisify@5.0.0

escape-string-regexp@4.0.0

eventemitter2@0.4.14

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

25 Packages, Including:

@pm2/agent-node@1.1.10

anymatch@3.1.3

fs.realpath@1.0.0

glob-parent@5.1.2

glob@7.2.3

graceful-fs@4.2.11

inflight@1.0.6

inherits@2.0.4

log-driver@1.2.7

lru-cache@5.1.1

lru-cache@6.0.0

minimatch@3.1.2

mute-stream@0.0.8

once@1.4.0

read@1.0.7

sax@1.3.0

semver@5.7.2

semver@6.3.0

semver@7.2.3

semver@7.6.0

setprototypeof@1.2.0

signal-exit@3.0.7

wrappy@1.0.2

yallist@3.1.1

yallist@4.0.0

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

9 Packages, Including:

async-listener@0.6.10

continuation-local-storage@3.2.1

emitter-listener@1.1.2

escodegen@1.14.3

esprima@3.1.3

esprima@4.0.1

estraverse@4.3.0

esutils@2.0.3

shimmer@1.2.1

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

5 Packages, Including:

@opencensus/core@0.0.8

@opencensus/core@0.0.9

@opencensus/propagation-b3@0.0.8

tslib@1.9.3

vizion@0.2.13

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

4 Packages, Including:

source-map@0.6.1

sprintf-js@1.0.3

sprintf-js@1.1.2

sprintf-js@1.1.3

GNU Affero General Public License v3.0

Network Protective

OSI Approved

Deprecated

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

sublicense

hold-liable

Must

include-copyright

include-license

state-changes

disclose-source

include-install-instructions

2 Packages, Including:

@pm2/agent@1.0.8

@web-native-js/pm2@4.4.1

Apache-2

Invalid

Not OSI Approved

2 Packages, Including:

@pm2/io@4.3.5

@pm2/js-api@0.6.7

MIT/X11

Invalid

Not OSI Approved

2 Packages, Including:

charm@0.1.2

pm2-multimeter@0.1.2

N/A

2 Packages, Including:

cli-tableau@2.0.1

escape-regexp@0.0.1

BSD Zero Clause License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

include-copyright

include-license

include-original

Cannot

hold-liable

Must

1 Packages, Including:

tslib@2.6.2

(Public Domain OR MIT)

Expression

1 Packages, Including:

tv4@1.3.0

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of @web-native-js/pm2 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
@pm2/agent	1.0.8	45.46 kB	AGPL-3.0	prod	3 3 1
@pm2/io	4.3.5	135.36 kB	Apache-2	prod	1 5 3 2
@pm2/js-api	0.6.7	160.86 kB	Apache-2	prod	1 1 1
@pm2/pm2-version-check	1.0.4	979 B	MIT	prod	1
async	3.2.5	146.47 kB	MIT	prod
blessed	0.1.81	255.48 kB	MIT	prod
chalk	3.0.0	10.67 kB	MIT	prod
chokidar	3.6.0	25.83 kB	MIT	prod
cli-tableau	2.0.1	6.22 kB	UNKNOWN	prod	1
commander	2.15.1	17.46 kB	MIT	prod
cron	1.8.2	17.53 kB	MIT	prod
dayjs	1.8.36	109.01 kB	MIT	prod
debug	4.1.1	21.26 kB	MIT	prod	1 1
enquirer	2.3.5	46.68 kB	MIT	prod
eventemitter2	5.0.1	9.91 kB	MIT	prod
fclone	1.0.11	4.53 kB	MIT	prod
mkdirp	1.0.4	6.51 kB	MIT	prod
needle	2.4.0	41.98 kB	MIT	prod
pidusage	2.0.18	10.19 kB	MIT	prod
pm2-axon-rpc	0.5.1	3.59 kB	MIT	prod
pm2-axon	3.3.0	13.08 kB	MIT	prod	1 1
pm2-deploy	1.0.2	6.06 kB	MIT	prod	1
pm2-multimeter	0.1.2	3.87 kB	MIT/X11	prod	2 2
promptly	2.2.0	5.66 kB	MIT	prod
ps-list	6.3.0	25.35 kB	MIT	prod
semver	7.6.0	26.57 kB	ISC	prod
source-map-support	0.5.16	25.5 kB	MIT	prod
sprintf-js	1.1.2	11.01 kB	BSD-3-Clause	prod
systeminformation	4.34.23	99.98 kB	MIT	prod optional	1 1
vizion	0.2.13	7.25 kB	Apache-2.0	prod
yamljs	0.3.0	150.28 kB	MIT	prod

Tree

Treemap

All Versions

4.4.1

@web-native-js/pm2 4.4.1

Issues

3 critical severity issues

12 high severity issues

10 moderate severity issues

7 low severity issues

Licenses

MIT License

ISC License

BSD 2-Clause "Simplified" License

Apache License 2.0

BSD 3-Clause "New" or "Revised" License

GNU Affero General Public License v3.0

Apache-2

MIT/X11

N/A

BSD Zero Clause License

(Public Domain OR MIT)

Direct Dependencies

Visualizations

All Versions

Scan your app for security vulnerabilities and license issues

Log into your account

Create your account

@web-native-js/pm2 4.4.1

Issues

3 critical severity issues

12 high severity issues

10 moderate severity issues

7 low severity issues

Licenses

MIT License

ISC License

BSD 2-Clause "Simplified" License

Apache License 2.0

BSD 3-Clause "New" or "Revised" License

GNU Affero General Public License v3.0

Apache-2

MIT/X11

N/A

BSD Zero Clause License

(Public Domain OR MIT)

Direct Dependencies

Visualizations

All Versions

Scan your app for security vulnerabilities and license issues