Home
Docs
GitHub
Pricing
Blog
Log In

Run Sandworm Audit for your App

Get started
Hold on, we're currently generating a fresh version of this report
Generated on Apr 19, 2024 via pnpm

aws-iot-device-sdk 1.0.7

AWS IoT JavaScript SDK for Embedded Devices
Package summary
Share
7
issues
2
critical severity
vulnerability
1
license
1
3
high severity
vulnerability
2
meta
1
1
moderate severity
vulnerability
1
1
low severity
vulnerability
1
5
licenses
39
MIT
4
ISC
1
Apache-2.0
2
other licenses
N/A
1
BSD-2-Clause
1
Package created
8 Oct 2015
Version published
3 Nov 2015
Maintainers
19
Total deps
46
Direct deps
2
License
Apache-2.0

Issues

7

2 critical severity issues

critical
Recommendation: Upgrade to version 1.2.6 or later
via: minimist@1.2.0 & others
Recommendation: Check the package code and files for license information
via: mqtt@1.4.3
Collapse
Expand

3 high severity issues

high
Recommendation: Upgrade to version 1.1.1 or later
via: mqtt@1.4.3
Recommendation: Upgrade to version 1.1.5 or later
via: mqtt@1.4.3
via: aws-iot-device-sdk@1.0.7
Collapse
Expand

1 moderate severity issue

moderate
Recommendation: Upgrade to version 1.2.3 or later
via: minimist@1.2.0 & others
Collapse
Expand

1 low severity issue

low
Recommendation: Upgrade to version 1.0.1 or later
via: mqtt@1.4.3
Collapse
Expand

Licenses

MIT License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
Cannot
hold-liable
Must
include-copyright
include-license
39 Packages, Including:
bindings@1.2.1
bl@1.2.3
buffer-from@1.1.2
bufferutil@1.2.1
commist@1.1.0
concat-stream@1.6.2
core-util-is@1.0.3
duplexify@3.7.1
duplexify@4.1.3
end-of-stream@1.4.4
help-me@0.1.0
isarray@0.0.1
isarray@1.0.0
leven@2.1.0
minimist@1.2.0
mqtt-connection@2.1.1
mqtt-packet@3.5.1
mqtt@1.4.3
nan@2.19.0
nan@2.4.0
process-nextick-args@2.0.1
pump@1.0.3
readable-stream@1.0.34
readable-stream@2.3.8
readable-stream@3.6.2
safe-buffer@5.1.2
safe-buffer@5.2.1
stream-shift@1.0.3
string_decoder@0.10.31
string_decoder@1.1.1
string_decoder@1.3.0
through2@0.6.5
through2@2.0.5
typedarray@0.0.6
ultron@1.0.2
utf-8-validate@1.2.2
util-deprecate@1.0.2
ws@0.8.1
xtend@4.0.2

ISC License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
Cannot
hold-liable
Must
include-copyright
include-license
4 Packages, Including:
inherits@2.0.4
once@1.4.0
reduplexer@1.1.0
wrappy@1.0.2

Apache License 2.0

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
use-patent-claims
place-warranty
Cannot
hold-liable
use-trademark
Must
include-copyright
include-license
state-changes
include-notice
1 Packages, Including:
aws-iot-device-sdk@1.0.7

N/A

N/A
1 Packages, Including:
options@0.0.6

BSD 2-Clause "Simplified" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
hold-liable
Must
include-copyright
include-license
1 Packages, Including:
websocket-stream@2.3.0
Disclaimer

This deed highlights only some of the key features and terms of the actual license. It is not a license and has no legal value. You should carefully review all of the terms and conditions of the actual license before using the licensed material.

Sandworm is not a law firm and does not provide legal services. Distributing, displaying, or linking to this deed or the license that it summarizes does not create a lawyer-client or any other relationship.

Direct Dependencies

2
All Dependencies CSV
β“˜ This is a list of aws-iot-device-sdk 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.
NameVersionSizeLicenseTypeVulnerabilities
minimist1.2.07.54 kBMIT
prod
1
1
mqtt1.4.3115.66 kBMIT
prod
2
2
1
1

Visualizations