Generated on Apr 1, 2024 via pnpm

Npm

Home

cassanova 0.6.4

An object modeler for Cassandra CQL.

cassandra

cql

cql3

data model

Package summary

issues

licenses

Package created

1 Aug 2014

Version published

1 May 2015

Maintainers

Total deps

Direct deps

License

UNKNOWN

Issues

2 critical severity issues

critical

lodash@2.4.1

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.12 or later

via: lodash@2.4.1

node-uuid@1.4.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: cassandra-driver@1.0.2

Collapse

Expand

5 high severity issues

high

node-uuid@1.4.1

Insecure Entropy Source - Math.random() in node-uuid

Recommendation: Upgrade to version 1.4.4 or later

via: cassandra-driver@1.0.2

lodash@2.4.1

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.11 or later

via: lodash@2.4.1

lodash@2.4.1

Command Injection in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: lodash@2.4.1

cassandra-driver@1.0.2

Package uses an invalid SPDX license ("Apache License, Version 2.0")

Recommendation: Validate that the package complies with your license policy

via: cassandra-driver@1.0.2

node-uuid@1.4.1

Deprecated package

via: cassandra-driver@1.0.2

Collapse

Expand

2 moderate severity issues

moderate

lodash@2.4.1

Regular Expression Denial of Service (ReDoS) in lodash

Recommendation: Upgrade to version 4.17.11 or later

via: lodash@2.4.1

lodash@2.4.1

Regular Expression Denial of Service (ReDoS) in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: lodash@2.4.1

Collapse

Expand

2 low severity issues

low

lodash@2.4.1

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.5 or later

via: lodash@2.4.1

cassandra-driver@1.0.2

Package uses a license that is not OSI approved ("Apache License, Version 2.0")

Recommendation: Read and validate the license terms

via: cassandra-driver@1.0.2

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

4 Packages, Including:

async@0.9.2

cassanova@0.6.4

colors@1.0.3

lodash@2.4.1

Apache License, Version 2.0

Invalid

Not OSI Approved

1 Packages, Including:

cassandra-driver@1.0.2

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

1 Packages, Including:

long@5.2.3

N/A

1 Packages, Including:

node-uuid@1.4.1

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of cassanova 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
async	0.9.2	20.46 kB	MIT	prod
cassandra-driver	1.0.2	45.56 kB	Apache License, Version 2.0	prod	1 3 1
colors	1.0.3	87.07 kB	MIT	prod
lodash	2.4.1	191.28 kB	MIT	prod	1 2 2 1

Tree

Treemap

All Versions

cassanova 0.6.4