Home
Docs
GitHub
Pricing
Blog
Log In

Run Sandworm Audit for your App

Get started
Hold on, we're currently generating a fresh version of this report
Generated on Apr 27, 2024 via pnpm
Package summary
Share
11
issues
1
critical severity
license
1
6
high severity
vulnerability
1
license
1
meta
4
3
moderate severity
vulnerability
3
1
low severity
license
1
11
licenses
108
MIT
7
Apache-2.0
6
ISC
11
other licenses
BSD-3-Clause
3
BSD-2-Clause
2
(AFL-2.1 OR BSD-3-Clause)
1
Public Domain
1
+ 4 more
Package created
8 Apr 2016
Version published
24 Aug 2020
Maintainers
3
Total deps
132
Direct deps
22
License
MIT

Issues

11

1 critical severity issue

critical
Recommendation: Check the package code and files for license information
via: ripemd160-min@0.0.5
Collapse
Expand

6 high severity issues

high
Recommendation: Upgrade to version 2.0.0 or later
via: schema-inspector@1.7.0
Recommendation: Validate that the package complies with your license policy
via: ajv@4.11.8
via: request@2.88.2
via: request@2.88.2
via: bitcoinjs-lib@5.2.0
via: request@2.88.2 & others
Collapse
Expand

3 moderate severity issues

moderate
Recommendation: Upgrade to version 6.12.3 or later
via: ajv@4.11.8
Recommendation: Upgrade to version 4.1.3 or later
via: request@2.88.2
Recommendation: None
via: request@2.88.2
Collapse
Expand

1 low severity issue

low
Recommendation: Read and validate the license terms
via: ajv@4.11.8
Collapse
Expand

Licenses

MIT License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
Cannot
hold-liable
Must
include-copyright
include-license
108 Packages, Including:
@noble/hashes@1.4.0
@types/bn.js@4.11.6
@types/cheerio@0.22.35
@types/elliptic@6.4.18
@types/node@10.12.18
@types/node@12.20.55
@types/randombytes@2.0.3
ajv@4.11.8
ajv@6.12.6
asn1.js@5.4.1
asn1@0.2.6
assert-plus@1.0.0
async@2.6.4
asynckit@0.4.0
aws4@1.12.0
base-x@3.0.9
base64url@3.0.1
bech32@1.1.4
bindings@1.5.0
bip174@2.1.1
bip32@2.0.6
bip66@1.1.5
bitcoin-ops@1.4.1
bitcoinjs-lib@5.2.0
blockstack@21.1.1
bn.js@4.12.0
brorand@1.1.0
bs58@4.0.1
bs58check@2.1.2
call-bind@1.0.7
cipher-base@1.0.4
co@4.6.0
combined-stream@1.0.8
core-util-is@1.0.2
create-hash@1.2.0
create-hmac@1.1.7
cross-fetch@3.1.8
dashdash@1.14.1
decode-uri-component@0.2.2
define-data-property@1.1.4
delayed-stream@1.0.0
ecc-jsbn@0.1.2
elliptic@6.5.5
es-define-property@1.0.0
es-errors@1.3.0
extend@3.0.2
extsprintf@1.3.0
fast-deep-equal@3.1.3
fast-json-stable-stringify@2.1.0
file-uri-to-path@1.0.0

Apache License 2.0

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
use-patent-claims
place-warranty
Cannot
hold-liable
use-trademark
Must
include-copyright
include-license
state-changes
include-notice
7 Packages, Including:
aws-sign2@0.7.0
caseless@0.12.0
ecdsa-sig-formatter@1.0.11
forever-agent@0.6.1
oauth-sign@0.9.0
request@2.88.2
tunnel-agent@0.6.0

ISC License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
Cannot
hold-liable
Must
include-copyright
include-license
6 Packages, Including:
bip39@3.1.0
har-schema@2.0.0
inherits@2.0.4
json-stringify-safe@5.0.1
minimalistic-assert@1.0.1
zone-file@1.0.0

BSD 3-Clause "New" or "Revised" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
use-trademark
hold-liable
Must
include-copyright
include-license
3 Packages, Including:
bcrypt-pbkdf@1.0.2
qs@6.5.3
tough-cookie@2.5.0

BSD 2-Clause "Simplified" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
hold-liable
Must
include-copyright
include-license
2 Packages, Including:
uri-js@4.4.1
webidl-conversions@3.0.1

(AFL-2.1 OR BSD-3-Clause)

Permissive
1 Packages, Including:
json-schema@0.4.0

Public Domain

Invalid
Not OSI Approved
1 Packages, Including:
jsonify@0.0.1

N/A

N/A
1 Packages, Including:
ripemd160-min@0.0.5

(MIT AND BSD-3-Clause)

Permissive
1 Packages, Including:
sha.js@2.4.11

BSD Zero Clause License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
include-copyright
include-license
include-original
Cannot
hold-liable
Must
1 Packages, Including:
tslib@1.14.1

The Unlicense

Public Domain
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
private-use
modify
Cannot
include-copyright
hold-liable
Must
1 Packages, Including:
tweetnacl@0.14.5
Disclaimer

This deed highlights only some of the key features and terms of the actual license. It is not a license and has no legal value. You should carefully review all of the terms and conditions of the actual license before using the licensed material.

Sandworm is not a law firm and does not provide legal services. Distributing, displaying, or linking to this deed or the license that it summarizes does not create a lawyer-client or any other relationship.

Direct Dependencies

22
All Dependencies CSV
β“˜ This is a list of blockstack 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.
NameVersionSizeLicenseTypeVulnerabilities
@types/bn.js4.11.63.56 kBMIT
prod
@types/cheerio0.22.353.68 kBMIT
prod
@types/elliptic6.4.183.39 kBMIT
prod
@types/node12.20.55105.28 kBMIT
prod
@types/randombytes2.0.31.56 kBMIT
prod
ajv4.11.8495.24 kBMIT
prod
1
1
1
bip393.1.079.87 kBISC
prod
bitcoinjs-lib5.2.051.96 kBMIT
prod
1
bn.js4.12.020.72 kBMIT
prod
cross-fetch3.1.818.78 kBMIT
prod
elliptic6.5.5115.74 kBMIT
prod
form-data2.5.19.87 kBMIT
prod
jsontokens3.0.077.81 kBMIT
prod
query-string6.14.18.07 kBMIT
prod
randombytes2.1.02.6 kBMIT
prod
request2.88.257.83 kBApache-2.0
prod
3
2
ripemd160-min0.0.56.18 kBUNKNOWN
prod
1
schema-inspector1.7.093.85 kBMIT
prod
1
sha.js2.4.119.74 kB(MIT AND BSD-3-Clause)
prod
tslib1.14.17.43 kB0BSD
prod
uuid3.4.011.87 kBMIT
prod
1
zone-file1.0.010.9 kBISC
prod

Visualizations