Home
Docs
GitHub
Pricing
Blog
Log In

Run Sandworm Audit for your App

Get started
Hold on, we're currently generating a fresh version of this report
Generated on Apr 17, 2024 via pnpm

bootstrap-loader 4.0.4

Boostrap for Webpack
Package summary
Share
16
issues
2
critical severity
license
2
6
high severity
license
2
meta
4
5
moderate severity
vulnerability
1
meta
4
3
low severity
license
3
10
licenses
239
MIT
71
ISC
11
BSD-2-Clause
22
other licenses
BSD-3-Clause
9
Apache-2.0
5
(MIT OR CC0-1.0)
3
N/A
2
+ 3 more
Package created
11 Nov 2015
Version published
7 Mar 2023
Maintainers
5
Total deps
343
Direct deps
16
License
MIT

Issues

16

2 critical severity issues

critical
Recommendation: Check the package code and files for license information
via: node-sass@9.0.0 & others
Recommendation: Check the package code and files for license information
via: escape-regexp@0.0.1
Collapse
Expand

6 high severity issues

high
Recommendation: Read and validate the license terms
via: css-loader@7.1.1 & others
Recommendation: Read and validate the license terms
via: node-sass@9.0.0 & others
via: node-sass@9.0.0 & others
via: node-sass@9.0.0 & others
via: node-sass@9.0.0 & others
via: node-sass@9.0.0 & others
Collapse
Expand

5 moderate severity issues

moderate
Recommendation: Upgrade to version 5.7.2 or later
via: semver@5.5.0
via: node-sass@9.0.0 & others
via: escape-regexp@0.0.1
via: node-sass@9.0.0 & others
via: node-sass@9.0.0 & others
Collapse
Expand

3 low severity issues

low
Recommendation: Read and validate the license terms
via: css-loader@7.1.1 & others
Recommendation: Read and validate the license terms
via: node-sass@9.0.0 & others
Recommendation: Read and validate the license terms
via: node-sass@9.0.0 & others
Collapse
Expand

Licenses

MIT License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
Cannot
hold-liable
Must
include-copyright
include-license
239 Packages, Including:
@babel/code-frame@7.24.2
@babel/helper-validator-identifier@7.22.20
@babel/highlight@7.24.2
@gar/promisify@1.1.3
@jridgewell/gen-mapping@0.3.5
@jridgewell/resolve-uri@3.1.2
@jridgewell/set-array@1.2.1
@jridgewell/source-map@0.3.6
@jridgewell/sourcemap-codec@1.4.15
@jridgewell/trace-mapping@0.3.25
@npmcli/move-file@1.1.2
@npmcli/move-file@2.0.1
@tootallnate/once@1.1.2
@tootallnate/once@2.0.0
@types/eslint-scope@3.7.7
@types/eslint@8.56.9
@types/estree@1.0.5
@types/json-schema@7.0.15
@types/minimist@1.2.5
@types/node@20.12.7
@types/normalize-package-data@2.4.4
@webassemblyjs/ast@1.12.1
@webassemblyjs/floating-point-hex-parser@1.11.6
@webassemblyjs/helper-api-error@1.11.6
@webassemblyjs/helper-buffer@1.12.1
@webassemblyjs/helper-numbers@1.11.6
@webassemblyjs/helper-wasm-bytecode@1.11.6
@webassemblyjs/helper-wasm-section@1.12.1
@webassemblyjs/ieee754@1.11.6
@webassemblyjs/utf8@1.11.6
@webassemblyjs/wasm-edit@1.12.1
@webassemblyjs/wasm-gen@1.12.1
@webassemblyjs/wasm-opt@1.12.1
@webassemblyjs/wasm-parser@1.12.1
@webassemblyjs/wast-printer@1.12.1
acorn-import-assertions@1.9.0
acorn@8.11.3
adjust-sourcemap-loader@4.0.0
agent-base@6.0.2
agentkeepalive@4.5.0
aggregate-error@3.1.0
ajv-formats@2.1.1
ajv-keywords@3.5.2
ajv-keywords@5.1.0
ajv@6.12.6
ajv@8.12.0
ansi-regex@5.0.1
ansi-styles@3.2.1
ansi-styles@4.3.0
argparse@1.0.10

ISC License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
Cannot
hold-liable
Must
include-copyright
include-license
71 Packages, Including:
@npmcli/fs@1.1.1
@npmcli/fs@2.1.2
abbrev@1.1.1
anymatch@3.1.3
aproba@2.0.0
are-we-there-yet@3.0.1
cacache@15.3.0
cacache@16.1.3
chownr@2.0.0
cliui@8.0.1
color-support@1.1.3
console-control-strings@1.1.0
electron-to-chromium@1.4.738
fs-minipass@2.1.0
fs.realpath@1.0.0
gauge@4.0.4
get-caller-file@2.0.5
glob-parent@5.1.2
glob@7.1.7
glob@7.2.3
glob@8.1.0
graceful-fs@4.2.11
has-unicode@2.0.1
hosted-git-info@2.8.9
hosted-git-info@4.1.0
icss-utils@5.1.0
infer-owner@1.0.4
inflight@1.0.6
inherits@2.0.4
isexe@2.0.0
lru-cache@6.0.0
lru-cache@7.18.3
make-fetch-happen@10.2.1
make-fetch-happen@9.1.0
minimatch@3.0.8
minimatch@3.1.2
minimatch@5.1.6
minipass-collect@1.0.2
minipass-flush@1.0.5
minipass-pipeline@1.2.4
minipass-sized@1.0.3
minipass@3.3.6
minipass@5.0.0
nopt@5.0.0
npmlog@6.0.2
once@1.4.0
picocolors@1.0.0
postcss-modules-extract-imports@3.1.0
postcss-modules-scope@3.2.0
postcss-modules-values@4.0.0

BSD 2-Clause "Simplified" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
hold-liable
Must
include-copyright
include-license
11 Packages, Including:
eslint-scope@5.1.1
esprima@4.0.1
esrecurse@4.3.0
estraverse@4.3.0
estraverse@5.3.0
glob-to-regexp@0.4.1
http-cache-semantics@4.1.1
normalize-package-data@2.5.0
normalize-package-data@3.0.3
terser@5.30.3
uri-js@4.4.1

BSD 3-Clause "New" or "Revised" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
use-trademark
hold-liable
Must
include-copyright
include-license
9 Packages, Including:
@xtuc/ieee754@1.2.0
js-base64@2.6.4
serialize-javascript@6.0.2
source-map-js@1.2.0
source-map@0.5.0
source-map@0.6.1
source-map@0.7.4
sprintf-js@1.0.3
sprintf-js@1.1.3

Apache License 2.0

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
use-patent-claims
place-warranty
Cannot
hold-liable
use-trademark
Must
include-copyright
include-license
state-changes
include-notice
5 Packages, Including:
@webassemblyjs/leb128@1.11.6
@xtuc/long@4.2.2
spdx-correct@3.2.0
true-case-path@2.2.1
validate-npm-package-license@3.0.4

(MIT OR CC0-1.0)

Public Domain
3 Packages, Including:
type-fest@0.18.1
type-fest@0.6.0
type-fest@0.8.1

N/A

N/A
2 Packages, Including:
async-foreach@0.1.3
escape-regexp@0.0.1

Creative Commons Attribution 4.0 International

Uncategorized
Not OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
Cannot
Must
1 Packages, Including:
caniuse-lite@1.0.30001610

Creative Commons Attribution 3.0 Unported

Uncategorized
Not OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
Cannot
Must
1 Packages, Including:
spdx-exceptions@2.5.0

Creative Commons Zero v1.0 Universal

Public Domain
Not OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
Cannot
Must
1 Packages, Including:
spdx-license-ids@3.0.17
Disclaimer

This deed highlights only some of the key features and terms of the actual license. It is not a license and has no legal value. You should carefully review all of the terms and conditions of the actual license before using the licensed material.

Sandworm is not a law firm and does not provide legal services. Distributing, displaying, or linking to this deed or the license that it summarizes does not create a lawyer-client or any other relationship.

Direct Dependencies

16
All Dependencies CSV
β“˜ This is a list of bootstrap-loader 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.
NameVersionSizeLicenseTypeVulnerabilities
chalk2.4.29.63 kBMIT
prod
css-loader7.1.1137.48 kBMIT
prod peer
1
1
escape-regexp0.0.1701 BUNKNOWN
prod
1
1
exports-loader0.7.02.71 kBMIT
prod
js-yaml3.13.172.31 kBMIT
prod
loader-utils1.4.28.18 kBMIT
prod
mini-css-extract-plugin2.9.0130.37 kBMIT
prod peer
1
1
node-sass9.0.0381.55 kBMIT
prod peer
1
5
3
2
resolve-url-loader5.0.027.93 kBMIT
prod peer
resolve1.10.030.18 kBMIT
prod
sass-loader14.2.158.86 kBMIT
prod peer
1
6
3
3
sass1.75.04.97 MBMIT
prod peer
semver5.5.015.83 kBISC
prod
1
strip-json-comments2.0.12.22 kBMIT
prod
url-loader4.1.17.85 kBMIT
prod peer
1
1
webpack5.91.04.71 MBMIT
prod peer
1
1

Visualizations