Generated on May 1, 2024 via pnpm

Npm

Home

app-notify 2.3.0

Send SMS and email notifications from within your node.js app

notifications

notify

application

sms

node

Package summary

issues

licenses

Package created

14 Dec 2014

Version published

21 Dec 2022

Maintainers

Total deps

Direct deps

License

ISC

Issues

4 moderate severity issues

moderate

jsonwebtoken@8.5.1

jsonwebtoken unrestricted key type could lead to legacy keys usage

Recommendation: Upgrade to version 9.0.0 or later

via: twilio@3.84.1

jsonwebtoken@8.5.1

jsonwebtoken's insecure implementation of key retrieval function could lead to Forgeable Public/Private Tokens from RSA to HMAC

Recommendation: Upgrade to version 9.0.0 or later

via: twilio@3.84.1

jsonwebtoken@8.5.1

jsonwebtoken vulnerable to signature validation bypass due to insecure default algorithm in jwt.verify()

Recommendation: Upgrade to version 9.0.0 or later

via: twilio@3.84.1

axios@0.26.1

Axios Cross-Site Request Forgery Vulnerability

Recommendation: Upgrade to version 0.28.0 or later

via: twilio@3.84.1

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

45 Packages, Including:

agent-base@6.0.2

asap@2.0.6

async@3.2.5

axios@0.26.1

call-bind@1.0.7

dayjs@1.11.11

debug@4.3.4

define-data-property@1.1.4

es-define-property@1.0.0

es-errors@1.3.0

follow-redirects@1.15.6

function-bind@1.1.2

get-intrinsic@1.2.4

gopd@1.0.1

has-property-descriptors@1.0.2

has-proto@1.0.3

has-symbols@1.0.3

hasown@2.0.2

https-proxy-agent@5.0.1

jsonwebtoken@8.5.1

jwa@1.4.1

jws@3.2.2

lodash.includes@4.3.0

lodash.isboolean@3.0.3

lodash.isinteger@4.0.4

lodash.isnumber@3.0.3

lodash.isplainobject@4.0.6

lodash.isstring@4.0.1

lodash.once@4.1.1

lodash@4.17.21

ms@2.1.2

ms@2.1.3

object-inspect@1.13.1

pop-iterate@1.0.1

q@1.5.1

q@2.0.3

querystringify@2.2.0

requires-port@1.0.0

rootpath@0.1.2

safe-buffer@5.2.1

set-function-length@1.2.2

side-channel@1.0.6

twilio@3.84.1

url-parse@1.5.10

xmlbuilder@13.0.2

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

3 Packages, Including:

buffer-equal-constant-time@1.0.1

qs@6.12.1

scmp@2.1.0

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

2 Packages, Including:

app-notify@2.3.0

semver@5.7.2

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

2 Packages, Including:

ecdsa-sig-formatter@1.0.11

weak-map@1.0.8

MIT No Attribution

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

Cannot

Must

1 Packages, Including:

nodemailer@6.9.13

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of app-notify 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
async	3.2.5	146.47 kB	MIT	prod
lodash	4.17.21	311.49 kB	MIT	prod
nodemailer	6.9.13	491.4 kB	MIT-0	prod
q	1.5.1	35.95 kB	MIT	prod
twilio	3.84.1	948.42 kB	MIT	prod	4

Tree

Treemap

All Versions

app-notify 2.3.0