Generated on Jun 16, 2024 via pnpm

changelog 1.4.2

Command line tool (and Node module) that generates a changelog in color output, markdown, or json for modules in npmjs.org's registry as well as any public github.com repo.

changelog

change log

commit messages

Package summary

issues

licenses

Package created

1 Aug 2011

Version published

14 Feb 2018

Maintainers

Total deps

Direct deps

License

UNKNOWN

Issues

2 critical severity issues

critical

cryptiles@3.2.1

Insufficient Entropy in cryptiles

Recommendation: Upgrade to version 4.1.2 or later

via: request@2.83.0

lodash@4.17.5

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.12 or later

via: lodash@4.17.5

Collapse

Expand

19 high severity issues

high

lodash@4.17.5

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.11 or later

via: lodash@4.17.5

hawk@6.0.2

Uncontrolled Resource Consumption in Hawk

Recommendation: Upgrade to version 9.0.1 or later

via: request@2.83.0

moment@2.20.1

Moment.js vulnerable to Inefficient Regular Expression Complexity

Recommendation: Upgrade to version 2.29.4 or later

via: moment@2.20.1

moment@2.20.1

Path Traversal: 'dir/../../filename' in moment.locale

Recommendation: Upgrade to version 2.29.2 or later

via: moment@2.20.1

lodash@4.17.5

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.19 or later

via: lodash@4.17.5

hoek@4.3.1

hoek subject to prototype pollution via the clone function.

Recommendation: None

via: request@2.83.0

lodash@4.17.5

Command Injection in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: lodash@4.17.5

boom@5.3.3

Package uses an invalid SPDX license ("SEE LICENSE IN LICENSE.md")

Recommendation: Validate that the package complies with your license policy

via: request@2.83.0

cryptiles@3.2.1

Package uses an invalid SPDX license ("SEE LICENSE IN LICENSE.md")

Recommendation: Validate that the package complies with your license policy

via: request@2.83.0

hoek@4.3.1

Package uses an invalid SPDX license ("SEE LICENSE IN LICENSE.md")

Recommendation: Validate that the package complies with your license policy

via: request@2.83.0

boom@4.3.1

Deprecated package

via: request@2.83.0

boom@5.3.3

Deprecated package

via: request@2.83.0

cryptiles@3.2.1

Deprecated package

via: request@2.83.0

har-validator@5.0.3

Deprecated package

via: request@2.83.0

hawk@6.0.2

Deprecated package

via: request@2.83.0

hoek@4.3.1

Deprecated package

via: request@2.83.0

request@2.83.0

Deprecated package

via: request@2.83.0

sntp@2.1.0

Deprecated package

via: request@2.83.0

uuid@3.4.0

Deprecated package

via: request@2.83.0

Collapse

Expand

6 moderate severity issues

moderate

lodash@4.17.5

Regular Expression Denial of Service (ReDoS) in lodash

Recommendation: Upgrade to version 4.17.11 or later

via: lodash@4.17.5

ajv@5.5.2

Prototype Pollution in Ajv

Recommendation: Upgrade to version 6.12.3 or later

via: request@2.83.0

lodash@4.17.5

Regular Expression Denial of Service (ReDoS) in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: lodash@4.17.5

semver@5.5.0

semver vulnerable to Regular Expression Denial of Service

Recommendation: Upgrade to version 5.7.2 or later

via: semver@5.5.0

tough-cookie@2.3.4

tough-cookie Prototype Pollution vulnerability

Recommendation: Upgrade to version 4.1.3 or later

via: request@2.83.0

request@2.83.0

Server-Side Request Forgery in Request

Recommendation: None

via: request@2.83.0

Collapse

Expand

3 low severity issues

low

boom@5.3.3

Package uses a license that is not OSI approved ("SEE LICENSE IN LICENSE.md")

Recommendation: Read and validate the license terms

via: request@2.83.0

cryptiles@3.2.1

Package uses a license that is not OSI approved ("SEE LICENSE IN LICENSE.md")

Recommendation: Read and validate the license terms

via: request@2.83.0

hoek@4.3.1

Package uses a license that is not OSI approved ("SEE LICENSE IN LICENSE.md")

Recommendation: Read and validate the license terms

via: request@2.83.0

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

53 Packages, Including:

ajv@5.5.2

ansi-styles@3.2.1

asn1@0.2.6

assert-plus@1.0.0

asynckit@0.4.0

aws4@1.13.0

balanced-match@1.0.2

brace-expansion@1.1.11

chalk@2.3.0

changelog@1.4.2

cli@1.0.1

co@4.6.0

color-convert@1.9.3

color-name@1.1.3

combined-stream@1.0.8

concat-map@0.0.1

core-util-is@1.0.2

dashdash@1.14.1

delayed-stream@1.0.0

ecc-jsbn@0.1.2

escape-string-regexp@1.0.5

exit@0.1.2

extend@3.0.2

extsprintf@1.3.0

fast-deep-equal@1.1.0

fast-json-stable-stringify@2.1.0

form-data@2.3.3

getpass@0.1.7

github-url-from-git@1.5.0

has-color@0.1.7

has-flag@2.0.0

http-signature@1.2.0

is-typedarray@1.0.0

isstream@0.1.2

jsbn@0.1.1

json-schema-traverse@0.3.1

jsprim@1.4.2

lodash@4.17.5

mime-db@1.52.0

mime-types@2.1.35

moment@2.20.1

path-is-absolute@1.0.1

performance-now@2.1.0

punycode@1.4.1

q@1.5.1

safe-buffer@5.2.1

safer-buffer@2.1.2

sshpk@1.18.0

stringstream@0.0.6

supports-color@4.5.0

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

11 Packages, Including:

fs.realpath@1.0.0

glob@7.2.3

har-schema@2.0.0

har-validator@5.0.3

inflight@1.0.6

inherits@2.0.4

json-stringify-safe@5.0.1

minimatch@3.1.2

once@1.4.0

semver@5.5.0

wrappy@1.0.2

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

6 Packages, Including:

aws-sign2@0.7.0

caseless@0.12.0

forever-agent@0.6.1

oauth-sign@0.8.2

request@2.83.0

tunnel-agent@0.6.0

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

6 Packages, Including:

bcrypt-pbkdf@1.0.2

boom@4.3.1

hawk@6.0.2

qs@6.5.3

sntp@2.1.0

tough-cookie@2.3.4

SEE LICENSE IN LICENSE.md

Invalid

Not OSI Approved

3 Packages, Including:

boom@5.3.3

cryptiles@3.2.1

hoek@4.3.1

(AFL-2.1 OR BSD-3-Clause)

Permissive

1 Packages, Including:

json-schema@0.4.0

The Unlicense

Public Domain

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

private-use

modify

Cannot

include-copyright

hold-liable

Must

1 Packages, Including:

tweetnacl@0.14.5

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of changelog 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
chalk	2.3.0	9.06 kB	MIT	prod
cli	1.0.1	14.23 kB	MIT	prod
github-url-from-git	1.5.0	2.71 kB	MIT	prod
has-color	0.1.7	986 B	MIT	prod
lodash	4.17.5	298.37 kB	MIT	prod	1 3 2
moment	2.20.1	500.28 kB	MIT	prod	2
q	1.5.1	35.95 kB	MIT	prod
request	2.83.0	55.75 kB	Apache-2.0	prod	1 14 3 3
semver	5.5.0	15.83 kB	ISC	prod	1
wordwrap	1.0.0	14.17 kB	MIT	prod