Generated on May 16, 2024 via pnpm

Npm

Home

antlr4-editor 1.0.66

An full editor front-end library that can support various editor platforms, all using Antlr4

ANTLR4

editor

code-editor

Package summary

issues

licenses

Package created

13 Aug 2018

Version published

9 Sep 2018

Maintainers

Total deps

152

Direct deps

License

ISC

Issues

2 critical severity issues

critical

ejs@2.7.4

ejs template injection vulnerability

Recommendation: Upgrade to version 3.1.7 or later

via: antlr4-tool@1.1.1 & others

speedometer@0.1.4

Package has no specified license

Recommendation: Check the package code and files for license information

via: electron@2.0.18

Collapse

Expand

12 high severity issues

high

electron@2.0.18

Context isolation bypass via leaked cross-context objects in Electron

Recommendation: Upgrade to version 7.2.4 or later

via: electron@2.0.18

electron@2.0.18

Context isolation bypass via contextBridge in Electron

Recommendation: Upgrade to version 7.2.4 or later

via: electron@2.0.18

electron@2.0.18

Electron affected by libvpx's heap buffer overflow in vp8 encoding

Recommendation: Upgrade to version 22.3.25 or later

via: electron@2.0.18

mkdir-recursive@0.4.0

Package uses a problematic Strongly Protective license ("GPL-3.0")

Recommendation: Validate that the package complies with your license policy

via: antlr4-tool@1.1.1 & others

nugget@2.2.0

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: electron@2.0.18

rc@1.2.8

Package uses a custom license expression: `(BSD-2-Clause OR MIT OR Apache-2.0)`

Recommendation: Validate that the license expression complies with your license policy

via: electron@2.0.18

ejs@2.7.4

Package uses postinstall script: "node ./postinstall.js"

via: antlr4-tool@1.1.1 & others

electron-download@3.3.0

Deprecated package

via: electron@2.0.18

electron@2.0.18

Package uses postinstall script: "node install.js"

via: electron@2.0.18

har-validator@5.1.5

Deprecated package

via: electron@2.0.18

request@2.88.2

Deprecated package

via: electron@2.0.18

uuid@3.4.0

Deprecated package

via: electron@2.0.18

Collapse

Expand

11 moderate severity issues

moderate

electron@2.0.18

Arbitrary file read via window-open IPC in Electron

Recommendation: Upgrade to version 7.2.4 or later

via: electron@2.0.18

electron@2.0.18

AutoUpdater module fails to validate certain nested components of the bundle

Recommendation: Upgrade to version 15.5.0 or later

via: electron@2.0.18

electron@2.0.18

Exfiltration of hashed SMB credentials on Windows via file:// redirect

Recommendation: Upgrade to version 18.3.7 or later

via: electron@2.0.18

electron@2.0.18

Electron's sandboxed renderers can obtain thumbnails of arbitrary files through the nativeImage API

Recommendation: Upgrade to version 11.5.0 or later

via: electron@2.0.18

electron@2.0.18

IPC messages delivered to the wrong frame in Electron

Recommendation: Upgrade to version 9.4.0 or later

via: electron@2.0.18

electron@2.0.18

Electron vulnerable to out-of-package code execution when launched with arbitrary cwd

Recommendation: Upgrade to version 22.3.19 or later

via: electron@2.0.18

electron@2.0.18

Electron context isolation bypass via nested unserializable return value

Recommendation: Upgrade to version 22.3.6 or later

via: electron@2.0.18

electron@2.0.18

ASAR Integrity bypass via filetype confusion in electron

Recommendation: Upgrade to version 22.3.24 or later

via: electron@2.0.18

tough-cookie@2.5.0

tough-cookie Prototype Pollution vulnerability

Recommendation: Upgrade to version 4.1.3 or later

via: electron@2.0.18

request@2.88.2

Server-Side Request Forgery in Request

Recommendation: None

via: electron@2.0.18

ejs@2.7.4

ejs lacks certain pollution protection

Recommendation: Upgrade to version 3.1.10 or later

via: antlr4-tool@1.1.1 & others

Collapse

Expand

5 low severity issues

low

electron@2.0.18

Context isolation bypass via Promise in Electron

Recommendation: Upgrade to version 6.1.11 or later

via: electron@2.0.18

electron@2.0.18

Compromised child renderer processes could obtain IPC access without nodeIntegrationInSubFrames being enabled

Recommendation: Upgrade to version 15.5.5 or later

via: electron@2.0.18

electron@2.0.18

Renderers can obtain access to random bluetooth device without permission in Electron

Recommendation: Upgrade to version 13.6.6 or later

via: electron@2.0.18

mkdir-recursive@0.4.0

Package uses a deprecated license ("GPL-3.0")

via: antlr4-tool@1.1.1 & others

nugget@2.2.0

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: electron@2.0.18

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

108 Packages, Including:

@types/antlr4@4.11.6

@types/node@8.10.66

ajv@6.12.6

ansi-regex@2.1.1

ansi-styles@3.2.1

asn1@0.2.6

assert-plus@1.0.0

asynckit@0.4.0

aws4@1.12.0

balanced-match@1.0.2

bl@1.2.3

brace-expansion@1.1.11

buffer-alloc-unsafe@1.1.0

buffer-alloc@1.2.0

buffer-crc32@0.2.13

buffer-fill@1.0.0

buffer-from@1.1.2

chalk@2.4.2

chdir@0.0.0

code-point-at@1.1.0

codemirror@5.65.16

color-convert@1.9.3

color-name@1.1.3

combined-stream@1.0.8

commander@2.20.3

concat-map@0.0.1

concat-stream@1.6.2

core-util-is@1.0.2

core-util-is@1.0.3

dashdash@1.14.1

debug@2.6.9

deep-extend@0.6.0

delayed-stream@1.0.0

ecc-jsbn@0.1.2

electron@2.0.18

end-of-stream@1.4.4

es6-promise@4.2.8

escape-string-regexp@1.0.5

extend@3.0.2

extsprintf@1.3.0

fast-deep-equal@3.1.3

fast-json-stable-stringify@2.1.0

fd-slicer@1.1.0

find-package-json@1.2.0

form-data@2.3.3

fs-constants@1.0.0

fs-extra@0.30.0

getpass@0.1.7

har-validator@5.1.5

has-flag@3.0.0

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

19 Packages, Including:

antlr4-editor@1.0.66

antlr4-helper@1.0.56

antlr4-tool@1.1.1

chownr@1.1.4

expressive-template@1.0.0

fs.realpath@1.0.0

glob@7.2.3

graceful-fs@4.2.11

har-schema@2.0.0

inflight@1.0.6

inherits@2.0.4

ini@1.3.8

json-stringify-safe@5.0.1

minimatch@3.1.2

once@1.4.0

rimraf@2.7.1

semver@5.7.2

text-manipulation@1.0.13

wrappy@1.0.2

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

9 Packages, Including:

aws-sign2@0.7.0

caseless@0.12.0

ejs@2.7.4

forever-agent@0.6.1

oauth-sign@0.9.0

request@2.88.2

rxjs@6.6.7

sumchecker@1.3.1

tunnel-agent@0.6.0

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

5 Packages, Including:

antlr4@4.13.1

bcrypt-pbkdf@1.0.2

electron-download@3.3.0

qs@6.5.3

tough-cookie@2.5.0

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

3 Packages, Including:

extract-zip@1.7.0

progress-stream@1.2.0

uri-js@4.4.1

The Unlicense

Public Domain

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

private-use

modify

Cannot

include-copyright

hold-liable

Must

2 Packages, Including:

directory-exists@2.0.1

tweetnacl@0.14.5

(AFL-2.1 OR BSD-3-Clause)

Permissive

1 Packages, Including:

json-schema@0.4.0

GNU General Public License v3.0 only

Strongly Protective

OSI Approved

Deprecated

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

use-patent-claims

Cannot

sublicense

hold-liable

Must

include-original

state-changes

disclose-source

include-license

include-copyright

include-install-instructions

1 Packages, Including:

mkdir-recursive@0.4.0

BSD

Invalid

Not OSI Approved

1 Packages, Including:

nugget@2.2.0

(BSD-2-Clause OR MIT OR Apache-2.0)

Expression

1 Packages, Including:

rc@1.2.8

N/A

1 Packages, Including:

speedometer@0.1.4

BSD Zero Clause License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

include-copyright

include-license

include-original

Cannot

hold-liable

Must

1 Packages, Including:

tslib@1.14.1

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of antlr4-editor 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
antlr4-helper	1.0.56	64.42 kB	ISC	prod
antlr4-tool	1.1.1	3.86 MB	ISC	prod	1 2 1 1
chalk	2.4.2	9.63 kB	MIT	prod
codemirror	5.65.16	738.64 kB	MIT	prod
commander	2.20.3	18.26 kB	MIT	prod
ejs	2.7.4	37.03 kB	Apache-2.0	prod	1 1 1
electron	2.0.18	68.71 kB	MIT	prod	1 10 10 4
expressive-template	1.0.0	10.2 kB	ISC	prod	1 2 1 1
lodash	4.17.21	311.49 kB	MIT	prod
mkdir-recursive	0.4.0	14.46 kB	GPL-3.0	prod	1 1
rxjs	6.6.7	736.44 kB	Apache-2.0	prod