Generated on May 4, 2024 via pnpm

Npm

Home

analytics-node 2.0.2

The hassle-free way to integrate analytics into any node application.

analytics

segment.io

segmentio

client

driver

Package summary

issues

licenses

Package created

10 Jan 2013

Version published

3 Mar 2016

Maintainers

Total deps

Direct deps

License

MIT

Issues

5 critical severity issues

critical

netmask@1.0.6

Improper parsing of octal bytes in netmask

Recommendation: Upgrade to version 1.1.0 or later

via: superagent-proxy@1.0.3

lodash@2.4.2

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.12 or later

via: lodash@2.4.2

component-type@1.0.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: component-type@1.0.0

formidable@1.0.17

Package has no specified license

Recommendation: Check the package code and files for license information

via: superagent-proxy@1.0.3 & others

superagent-retry@0.5.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: superagent-retry@0.5.1

Collapse

Expand

12 high severity issues

high

qs@2.3.3

Prototype Pollution Protection Bypass in qs

Recommendation: Upgrade to version 6.0.4 or later

via: superagent-proxy@1.0.3 & others

pac-resolver@3.0.0

Code Injection in pac-resolver

Recommendation: Upgrade to version 5.0.0 or later

via: superagent-proxy@1.0.3

degenerator@1.0.4

Code Injection in pac-resolver

Recommendation: Upgrade to version 3.0.1 or later

via: superagent-proxy@1.0.3

mime@1.3.4

mime Regular Expression Denial of Service when MIME lookup performed on untrusted user input

Recommendation: Upgrade to version 1.4.1 or later

via: superagent-proxy@1.0.3 & others

lodash@2.4.2

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.11 or later

via: lodash@2.4.2

qs@2.3.3

qs vulnerable to Prototype Pollution

Recommendation: Upgrade to version 6.2.4 or later

via: superagent-proxy@1.0.3 & others

lodash@2.4.2

Command Injection in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: lodash@2.4.2

qs@2.3.3

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: superagent-proxy@1.0.3 & others

reduce-component@1.0.1

Package uses an invalid SPDX license ("Apache, Version 2.0")

Recommendation: Validate that the package complies with your license policy

via: superagent-proxy@1.0.3 & others

formidable@1.0.17

Deprecated package

via: superagent-proxy@1.0.3 & others

socks@1.1.10

Deprecated package

via: superagent-proxy@1.0.3

superagent@1.8.5

Deprecated package

via: superagent-proxy@1.0.3 & others

Collapse

Expand

8 moderate severity issues

moderate

lodash@2.4.2

Regular Expression Denial of Service (ReDoS) in lodash

Recommendation: Upgrade to version 4.17.11 or later

via: lodash@2.4.2

extend@3.0.0

Prototype Pollution in extend

Recommendation: Upgrade to version 3.0.2 or later

via: superagent-proxy@1.0.3 & others

cookiejar@2.0.6

cookiejar Regular Expression Denial of Service via Cookie.parse function

Recommendation: Upgrade to version 2.1.4 or later

via: superagent-proxy@1.0.3 & others

netmask@1.0.6

netmask npm package mishandles octal input data

Recommendation: Upgrade to version 2.0.1 or later

via: superagent-proxy@1.0.3

superagent@1.8.5

superagent vulnerable to zip bomb attacks

Recommendation: Upgrade to version 3.7.0 or later

via: superagent-proxy@1.0.3 & others

lodash@2.4.2

Regular Expression Denial of Service (ReDoS) in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: lodash@2.4.2

lodash@2.4.2

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.5 or later

via: lodash@2.4.2

join-component@1.0.0

Package has no specified source code repository

via: join-component@1.0.0

Collapse

Expand

2 low severity issues

low

qs@2.3.3

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: superagent-proxy@1.0.3 & others

reduce-component@1.0.1

Package uses a license that is not OSI approved ("Apache, Version 2.0")

Recommendation: Read and validate the license terms

via: superagent-proxy@1.0.3 & others

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

74 Packages, Including:

agent-base@4.3.0

analytics-node@2.0.2

ast-types@0.14.2

async@1.5.2

bytes@3.1.2

clone@0.1.19

co@4.6.0

combined-stream@1.0.8

component-emitter@1.2.1

cookiejar@2.0.6

core-util-is@1.0.3

crypto-token@1.0.1

data-uri-to-buffer@1.2.0

debug@2.6.9

debug@3.1.0

debug@3.2.7

deep-is@0.1.4

degenerator@1.0.4

delayed-stream@1.0.0

depd@2.0.0

es6-promise@4.2.8

es6-promisify@5.0.0

extend@3.0.0

extend@3.0.2

fast-levenshtein@2.0.6

file-uri-to-path@1.0.0

form-data@1.0.0-rc3

ftp@0.3.10

get-uri@2.0.4

http-errors@2.0.0

http-proxy-agent@2.1.0

https-proxy-agent@2.2.4

iconv-lite@0.4.24

ip@1.1.9

isarray@0.0.1

isarray@1.0.0

join-component@1.0.0

levn@0.3.0

lodash@2.4.2

methods@1.1.2

mime-db@1.52.0

mime-types@2.1.35

mime@1.3.4

ms@2.0.0

ms@2.1.3

netmask@1.0.6

optionator@0.8.3

pac-proxy-agent@2.0.2

pac-resolver@3.0.0

prelude-ls@1.1.2

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

5 Packages, Including:

escodegen@1.14.3

esprima@3.1.3

esprima@4.0.1

estraverse@4.3.0

esutils@2.0.3

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

5 Packages, Including:

inherits@2.0.4

lru-cache@4.1.5

pseudomap@1.0.2

setprototypeof@1.2.0

yallist@2.1.2

N/A

3 Packages, Including:

component-type@1.0.0

formidable@1.0.17

superagent-retry@0.5.1

BSD

Invalid

Not OSI Approved

1 Packages, Including:

qs@2.3.3

Apache, Version 2.0

Invalid

Not OSI Approved

1 Packages, Including:

reduce-component@1.0.1

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

1 Packages, Including:

source-map@0.6.1

BSD Zero Clause License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

include-copyright

include-license

include-original

Cannot

hold-liable

Must

1 Packages, Including:

tslib@2.6.2

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of analytics-node 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
clone	0.1.19	5.31 kB	MIT	prod
component-type	1.0.0	27.09 kB	UNKNOWN	prod	1
crypto-token	1.0.1	2.18 kB	MIT	prod
debug	2.6.9	16.13 kB	MIT	prod
join-component	1.0.0	1.17 kB	MIT	prod	1
lodash	2.4.2	192.11 kB	MIT	prod	1 2 3
superagent-proxy	1.0.3	4.13 kB	MIT	prod	2 10 4 2
superagent-retry	0.5.1	2.62 kB	UNKNOWN	prod	2 7 3 2
superagent	1.8.5	153.77 kB	MIT	prod peer	1 7 3 2