Generated on Feb 27, 2024 via pnpm

Npm

Home

bookshelf 0.11.0

A lightweight ORM for PostgreSQL, MySQL, and SQLite3

orm

mysql

postgresql

sqlite

datamapper

active record

Package summary

issues

licenses

Package created

26 Apr 2013

Version published

15 Nov 2017

Maintainers

Total deps

Direct deps

License

MIT

Issues

2 critical severity issues

critical

knex@0.13.0

SQL Injection in knex

Recommendation: Upgrade to version 0.19.5 or later

via: knex@0.13.0

minimist@1.1.3

Prototype Pollution in minimist

Recommendation: Upgrade to version 1.2.6 or later

via: knex@0.13.0

Collapse

Expand

6 high severity issues

high

knex@0.13.0

Knex.js has a limited SQL injection vulnerability

Recommendation: Upgrade to version 2.4.0 or later

via: knex@0.13.0

glob-parent@2.0.0

glob-parent vulnerable to Regular Expression Denial of Service in enclosure regex

Recommendation: Upgrade to version 5.1.2 or later

via: knex@0.13.0

bookshelf@0.11.0

Package uses postinstall script: "node ./scripts/build.js lib "npm run build""

via: bookshelf@0.11.0

core-js@2.6.12

Deprecated package

via: babel-runtime@6.26.0 & others

core-js@2.6.12

Package uses postinstall script: "node -e "try{require('./postinstall')}catch(e){}""

via: babel-runtime@6.26.0 & others

uuid@3.4.0

Deprecated package

via: knex@0.13.0

Collapse

Expand

1 moderate severity issue

moderate

minimist@1.1.3

Prototype Pollution in minimist

Recommendation: Upgrade to version 1.2.3 or later

via: knex@0.13.0

Collapse

Expand

2 low severity issues

low

braces@1.8.5

Regular Expression Denial of Service in braces

Recommendation: Upgrade to version 2.3.1 or later

via: knex@0.13.0

braces@1.8.5

Regular Expression Denial of Service (ReDoS) in braces

Recommendation: Upgrade to version 2.3.1 or later

via: knex@0.13.0

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

91 Packages, Including:

ansi-regex@2.1.1

ansi-styles@2.2.1

arr-diff@2.0.0

arr-flatten@1.1.0

array-unique@0.2.1

babel-runtime@6.26.0

bluebird@3.7.2

bookshelf@0.11.0

braces@1.8.5

chalk@1.1.3

commander@2.20.3

core-js@2.6.12

core-util-is@1.0.3

create-error@0.3.1

debug@2.6.9

detect-file@0.1.0

escape-string-regexp@1.0.5

expand-brackets@0.1.5

expand-range@1.8.2

expand-tilde@1.2.2

extend@3.0.2

extglob@0.3.2

filename-regex@2.0.1

fill-range@2.2.4

findup-sync@0.4.3

flagged-respawn@0.3.2

for-in@1.0.2

for-own@0.1.5

fs-exists-sync@0.1.0

function-bind@1.1.2

generic-pool@2.5.4

glob-base@0.3.0

global-modules@0.2.3

global-prefix@0.1.5

has-ansi@2.0.0

hasown@2.0.1

homedir-polyfill@1.0.3

inflection@1.13.4

interpret@0.6.6

is-buffer@1.1.6

is-core-module@2.13.1

is-dotfile@1.0.3

is-equal-shallow@0.1.3

is-extendable@0.1.1

is-extglob@1.0.0

is-glob@2.0.1

is-number@2.1.0

is-number@4.0.0

is-posix-bracket@0.1.1

is-primitive@2.0.0

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

6 Packages, Including:

glob-parent@2.0.0

inherits@2.0.4

ini@1.3.8

isexe@2.0.0

remove-trailing-separator@1.1.0

which@1.3.1

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of bookshelf 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
babel-runtime	6.26.0	13.06 kB	MIT	prod	2
bluebird	3.7.2	136.03 kB	MIT	prod
chalk	1.1.3	5.11 kB	MIT	prod
create-error	0.3.1	3.81 kB	MIT	prod
inflection	1.13.4	11.51 kB	MIT	prod
inherits	2.0.4	1.98 kB	ISC	prod
knex	0.13.0	168.4 kB	MIT	prod peer	2 5 1 2
lodash	4.17.21	311.49 kB	MIT	prod