Hold on, we're currently generating a fresh version of this report

Generated on May 21, 2024 via pnpm

ascoltatori 0.19.0

The pub/sub library for node backed by Redis, MongoDB, AMQP (RabbitMQ), ZeroMQ, MQTT (Mosquitto) or just plain node!

Package summary

30

issues

8

licenses

Package created

7 Nov 2012

Version published

29 Jan 2015

Maintainers

1

Total deps

78

Direct deps

12

License

MIT

Issues

30

6 critical severity issues

bson@0.2.22

Deserialization of Untrusted Data in bson

Recommendation: Upgrade to version 1.1.4 or later

via: mongodb@1.4.40

bindings@1.1.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: zmq@2.10.0

mqtt@1.0.11

Package has no specified license

Recommendation: Check the package code and files for license information

via: mqtt@1.0.11

options@0.0.6

Package has no specified license

Recommendation: Check the package code and files for license information

via: mqtt@1.0.11

redis@0.12.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: redis@0.12.1

zmq@2.10.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: zmq@2.10.0

17 high severity issues

mongodb@1.4.40

Denial of Service in mongodb

Recommendation: Upgrade to version 3.1.13 or later

via: mongodb@1.4.40

ws@0.7.2

DoS due to excessively large websocket message in ws

Recommendation: Upgrade to version 1.1.1 or later

via: mqtt@1.0.11

ws@0.7.2

Denial of Service in ws

Recommendation: Upgrade to version 1.1.5 or later

via: mqtt@1.0.11

kerberos@0.0.11

DLL Injection in kerberos

Recommendation: Upgrade to version 1.0.0 or later

via: mongodb@1.4.40

bson@0.2.22

Package uses an invalid SPDX license ("Apache License, Version 2.0")

Recommendation: Validate that the package complies with your license policy

via: mongodb@1.4.40

mongodb@1.4.40

Package uses an invalid SPDX license ("Apache License, Version 2.0")

Recommendation: Validate that the package complies with your license policy

via: mongodb@1.4.40

graceful-fs@2.0.3

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: qlobber-fsq@0.1.1

hiredis@0.1.17

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: hiredis@0.1.17

kerberos@0.0.11

Package uses an invalid SPDX license ("Apache 2.0")

Recommendation: Validate that the package complies with your license policy

via: mongodb@1.4.40

bson@0.2.22

Deprecated package

via: mongodb@1.4.40

bson@0.2.22

Package uses install script: "(node-gyp rebuild 2> builderror.log) || (exit 0)"

via: mongodb@1.4.40

fs-ext@0.3.2

Package uses install script: "node-gyp configure build"

via: qlobber-fsq@0.1.1

graceful-fs@2.0.3

Deprecated package

via: qlobber-fsq@0.1.1

kerberos@0.0.11

Package uses install script: "(node-gyp rebuild 2> builderror.log) || (exit 0)"

via: mongodb@1.4.40

mongodb@1.4.40

Deprecated package

via: mongodb@1.4.40

node-uuid@1.4.8

Deprecated package

via: node-uuid@1.4.8

ws@0.6.5

Package uses install script: "(node-gyp rebuild 2> builderror.log) || (exit 0)"

via: mqtt@1.0.11

1 moderate severity issue

bson@0.2.22

Deserialization of Untrusted Data in bson

Recommendation: Upgrade to version 1.1.4 or later

via: mongodb@1.4.40

6 low severity issues

ws@0.7.2

Remote Memory Disclosure in ws

Recommendation: Upgrade to version 1.0.1 or later

via: mqtt@1.0.11

bson@0.2.22

Package uses a license that is not OSI approved ("Apache License, Version 2.0")

Recommendation: Read and validate the license terms

via: mongodb@1.4.40

mongodb@1.4.40

Package uses a license that is not OSI approved ("Apache License, Version 2.0")

Recommendation: Read and validate the license terms

via: mongodb@1.4.40

graceful-fs@2.0.3

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: qlobber-fsq@0.1.1

hiredis@0.1.17

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: hiredis@0.1.17

kerberos@0.0.11

Package uses a license that is not OSI approved ("Apache 2.0")

Recommendation: Read and validate the license terms

via: mongodb@1.4.40

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

61 Packages, Including:

abort-controller@3.0.0

amqp@0.2.7

ascoltatori@0.19.0

async@0.2.10

async@0.9.2

base64-js@1.5.1

bindings@1.2.1

bindings@1.5.0

bl@1.2.3

buffer-from@1.1.2

buffer@6.0.3

bufferutil@1.1.0

commist@1.1.0

concat-stream@1.6.2

core-util-is@1.0.3

debug@2.6.9

duplexify@3.7.1

duplexify@4.1.3

end-of-stream@1.4.4

event-target-shim@5.0.1

eventemitter2@0.4.14

events@3.3.0

file-uri-to-path@1.0.0

fs-ext@0.3.2

help-me@0.1.0

isarray@0.0.1

isarray@1.0.0

leven@2.1.0

lodash@4.17.21

minimist@1.2.8

mqtt-connection@2.1.1

mqtt-packet@3.5.1

ms@2.0.0

nan@1.1.2

nan@1.4.3

nan@1.5.3

nan@1.8.4

node-uuid@1.4.8

process-nextick-args@2.0.1

process@0.11.10

pump@1.0.3

qlobber-fsq@0.1.1

qlobber@0.3.9

readable-stream@1.0.34

readable-stream@2.3.8

readable-stream@3.6.2

readable-stream@4.5.2

safe-buffer@5.1.2

safe-buffer@5.2.1

stream-shift@1.0.3

N/A

N/A

5 Packages, Including:

bindings@1.1.1

mqtt@1.0.11

options@0.0.6

redis@0.12.1

zmq@2.10.0

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

5 Packages, Including:

buffertools@2.0.1

inherits@2.0.4

once@1.4.0

reduplexer@1.1.0

wrappy@1.0.2

Apache License, Version 2.0

Invalid

Not OSI Approved

2 Packages, Including:

bson@0.2.22

mongodb@1.4.40

BSD

Invalid

Not OSI Approved

2 Packages, Including:

graceful-fs@2.0.3

hiredis@0.1.17

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

1 Packages, Including:

ieee754@1.2.1

Apache 2.0

Invalid

Not OSI Approved

1 Packages, Including:

kerberos@0.0.11

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

1 Packages, Including:

websocket-stream@1.5.2

Direct Dependencies

12

All Dependencies CSV

ⓘ This is a list of ascoltatori 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
amqp	0.2.7	103.28 kB	MIT	prod optional
async	0.9.2	20.46 kB	MIT	prod
debug	2.6.9	16.13 kB	MIT	prod
eventemitter2	0.4.14	6.79 kB	MIT	prod optional
hiredis	0.1.17	46.85 kB	BSD	prod optional	1 1
mongodb	1.4.40	152.77 kB	Apache License, Version 2.0	prod optional	1 9 1 3
mqtt	1.0.11	111.64 kB	UNKNOWN	prod optional	2 3 1
node-uuid	1.4.8	13.8 kB	MIT	prod	1
qlobber-fsq	0.1.1	1.09 MB	MIT	prod optional	3 1
qlobber	0.3.9	27.54 kB	MIT	prod optional
redis	0.12.1	23.72 kB	UNKNOWN	prod optional	1
zmq	2.10.0	377.66 kB	UNKNOWN	prod optional	2

Recent Versions