Home
Docs
GitHub
Pricing
Blog
Log In

Run Sandworm Audit for your App

Get started
Hold on, we're currently generating a fresh version of this report
Generated on Apr 10, 2024 via pnpm
Package summary
Share
37
issues
2
critical severity
license
2
20
high severity
vulnerability
5
license
2
meta
13
11
moderate severity
vulnerability
9
meta
2
4
low severity
vulnerability
2
license
2
12
licenses
334
MIT
38
ISC
23
Apache-2.0
29
other licenses
BSD-3-Clause
18
BSD-2-Clause
3
N/A
2
GPL-3.0
1
+ 5 more
Package created
13 May 2017
Version published
15 May 2017
Maintainers
1
Total deps
424
Direct deps
4
License
GPL-3.0

Issues

37

2 critical severity issues

critical
Recommendation: Check the package code and files for license information
via: callsite@1.0.0
Recommendation: Check the package code and files for license information
via: @google-cloud/logging@1.2.0
Collapse
Expand

20 high severity issues

high
Recommendation: Upgrade to version 0.21.2 or later
via: @google-cloud/logging@1.2.0
Recommendation: Upgrade to version 5.1.2 or later
via: @google-cloud/logging@1.2.0
Recommendation: Upgrade to version 1.3.0 or later
via: @google-cloud/logging@1.2.0
Recommendation: Upgrade to version 1.3.0 or later
via: @google-cloud/logging@1.2.0
Recommendation: Upgrade to version 1.14.7 or later
via: @google-cloud/logging@1.2.0
Recommendation: Validate that the package complies with your license policy
via: asynclog@0.0.5
Recommendation: Validate that the package complies with your license policy
via: @google-cloud/logging@1.2.0
via: @google-cloud/logging@1.2.0
via: @google-cloud/logging@1.2.0
via: @google-cloud/logging@1.2.0
via: @google-cloud/logging@1.2.0
via: @google-cloud/logging@1.2.0
via: @google-cloud/logging@1.2.0 & others
via: @google-cloud/logging@1.2.0
via: @google-cloud/logging@1.2.0 & others
via: @google-cloud/logging@1.2.0
via: @google-cloud/logging@1.2.0
via: @google-cloud/logging@1.2.0
via: @google-cloud/logging@1.2.0
via: @google-cloud/logging@1.2.0 & others
Collapse
Expand

11 moderate severity issues

moderate
Recommendation: Upgrade to version 1.3.0 or later
via: @google-cloud/logging@1.2.0
Recommendation: Upgrade to version 0.21.1 or later
via: @google-cloud/logging@1.2.0
Recommendation: Upgrade to version 1.14.8 or later
via: @google-cloud/logging@1.2.0
Recommendation: Upgrade to version 1.0.0 or later
via: @google-cloud/logging@1.2.0
Recommendation: Upgrade to version 1.15.4 or later
via: @google-cloud/logging@1.2.0
Recommendation: Upgrade to version 0.28.0 or later
via: @google-cloud/logging@1.2.0
Recommendation: Upgrade to version 4.1.3 or later
via: @google-cloud/logging@1.2.0 & others
Recommendation: None
via: @google-cloud/logging@1.2.0 & others
Recommendation: Upgrade to version 1.15.6 or later
via: @google-cloud/logging@1.2.0
via: callsite@1.0.0
via: @google-cloud/logging@1.2.0
Collapse
Expand

4 low severity issues

low
Recommendation: Upgrade to version 1.0.0 or later
via: @google-cloud/logging@1.2.0
Recommendation: Upgrade to version 1.0.0 or later
via: @google-cloud/logging@1.2.0
via: asynclog@0.0.5
Recommendation: Read and validate the license terms
via: @google-cloud/logging@1.2.0
Collapse
Expand

Licenses

MIT License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
Cannot
hold-liable
Must
include-copyright
include-license
334 Packages, Including:
@mrmlnc/readdir-enhanced@2.2.1
@nodelib/fs.stat@1.1.3
@types/bytebuffer@5.0.48
@types/long@3.0.32
@types/long@4.0.2
@types/node@20.12.7
abort-controller@3.0.0
acorn-es7-plugin@1.1.7
acorn@5.7.4
agent-base@4.3.0
agent-base@6.0.2
ajv@6.12.6
ansi-regex@2.1.1
ansi-regex@5.0.1
ansi-styles@2.2.1
arr-diff@4.0.0
arr-flatten@1.1.0
arr-union@3.1.0
array-buffer-byte-length@1.0.1
array-filter@1.0.0
array-union@1.0.2
array-uniq@1.0.3
array-unique@0.3.2
arraybuffer.prototype.slice@1.0.3
arrify@1.0.1
asn1@0.2.6
assert-plus@1.0.0
assign-symbols@1.0.0
async@2.6.4
asynckit@0.4.0
available-typed-arrays@1.0.7
aws4@1.12.0
axios@0.18.1
balanced-match@1.0.2
base@0.11.2
brace-expansion@1.1.11
braces@2.3.2
buffer-from@1.1.2
cache-base@1.0.1
call-bind@1.0.7
call-me-maybe@1.0.2
call-signature@0.0.2
camelcase@2.1.1
capture-stack-trace@1.0.2
chalk@1.1.3
class-utils@0.3.6
code-point-at@1.1.0
collection-visit@1.0.0
colour@0.7.1
combined-stream@1.0.8

ISC License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
Cannot
hold-liable
Must
include-copyright
include-license
38 Packages, Including:
abbrev@1.1.1
aproba@2.0.0
are-we-there-yet@2.0.0
chownr@2.0.0
cliui@3.2.0
color-support@1.1.3
console-control-strings@1.1.0
fs-minipass@2.1.0
fs.realpath@1.0.0
gauge@3.0.2
glob-parent@3.1.0
glob@7.2.3
har-schema@2.0.0
has-unicode@2.0.1
inflight@1.0.6
inherits@2.0.4
json-stringify-safe@5.0.1
log-driver@1.2.7
lru-cache@4.1.5
lru-cache@6.0.0
minimatch@3.1.2
minipass@3.3.6
minipass@5.0.0
nopt@5.0.0
npmlog@5.0.1
once@1.4.0
pseudomap@1.0.2
rimraf@3.0.2
semver@6.3.1
semver@7.6.0
set-blocking@2.0.0
signal-exit@3.0.7
tar@6.2.1
wide-align@1.1.5
wrappy@1.0.2
y18n@3.2.2
yallist@2.1.2
yallist@4.0.0

Apache License 2.0

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
use-patent-claims
place-warranty
Cannot
hold-liable
use-trademark
Must
include-copyright
include-license
state-changes
include-notice
23 Packages, Including:
@google-cloud/common-grpc@0.6.1
@google-cloud/common@0.16.2
@google-cloud/common@0.17.0
@google-cloud/logging@1.2.0
ascli@1.0.1
aws-sign2@0.7.0
bytebuffer@5.0.1
caseless@0.12.0
detect-libc@2.0.3
diff-match-patch@1.0.5
ecdsa-sig-formatter@1.0.11
eventid@0.1.2
forever-agent@0.6.1
gaxios@1.8.4
google-auth-library@1.6.1
grpc@1.24.11
long@3.2.0
long@4.0.0
oauth-sign@0.9.0
protobufjs@5.0.3
request@2.88.2
retry-axios@0.3.2
tunnel-agent@0.6.0

BSD 3-Clause "New" or "Revised" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
use-trademark
hold-liable
Must
include-copyright
include-license
18 Packages, Including:
@mapbox/node-pre-gyp@1.0.11
@protobufjs/aspromise@1.1.2
@protobufjs/base64@1.1.2
@protobufjs/codegen@2.0.4
@protobufjs/eventemitter@1.1.0
@protobufjs/fetch@1.1.0
@protobufjs/float@1.0.2
@protobufjs/inquire@1.1.0
@protobufjs/path@1.1.2
@protobufjs/pool@1.1.0
@protobufjs/utf8@1.1.0
bcrypt-pbkdf@1.0.2
buffer-equal-constant-time@1.0.1
google-gax@0.16.1
protobufjs@6.11.4
qs@6.5.3
source-map@0.5.7
tough-cookie@2.5.0

BSD 2-Clause "Simplified" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
hold-liable
Must
include-copyright
include-license
3 Packages, Including:
estraverse@4.3.0
uri-js@4.4.1
webidl-conversions@3.0.1

N/A

N/A
2 Packages, Including:
callsite@1.0.0
indexof@0.0.1

GNU General Public License v3.0 only

Strongly Protective
OSI Approved
Deprecated
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
use-patent-claims
Cannot
sublicense
hold-liable
Must
include-original
state-changes
disclose-source
include-license
include-copyright
include-install-instructions
1 Packages, Including:
asynclog@0.0.5

(MIT OR Apache-2.0)

Permissive
1 Packages, Including:
atob@2.1.2

BSD

Invalid
Not OSI Approved
1 Packages, Including:
glob-to-regexp@0.3.0

(AFL-2.1 OR BSD-3-Clause)

Permissive
1 Packages, Including:
json-schema@0.4.0

(BSD-3-Clause OR GPL-2.0)

Permissive
1 Packages, Including:
node-forge@0.10.0

The Unlicense

Public Domain
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
private-use
modify
Cannot
include-copyright
hold-liable
Must
1 Packages, Including:
tweetnacl@0.14.5
Disclaimer

This deed highlights only some of the key features and terms of the actual license. It is not a license and has no legal value. You should carefully review all of the terms and conditions of the actual license before using the licensed material.

Sandworm is not a law firm and does not provide legal services. Distributing, displaying, or linking to this deed or the license that it summarizes does not create a lawyer-client or any other relationship.

Direct Dependencies

4
All Dependencies CSV
β“˜ This is a list of asynclog 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.
NameVersionSizeLicenseTypeVulnerabilities
@google-cloud/logging1.2.066.86 kBApache-2.0
prod
1
19
10
3
callsite1.0.01.04 kBUNKNOWN
prod
1
1
chalk1.1.35.11 kBMIT
prod
request2.88.257.83 kBApache-2.0
prod
3
2

Visualizations