Hold on, we're currently generating a fresh version of this report

Generated on Mar 5, 2024 via pnpm

cldr 5.1.0

Library for extracting data from CLDR (the Unicode Common Locale Data Repository)

internationalization

Package summary

15

issues

7

licenses

Package created

4 Nov 2012

Version published

9 Apr 2019

Maintainers

4

Total deps

26

Direct deps

10

License

BSD-3-Clause

Issues

15

2 critical severity issues

xmldom@0.1.31

xmldom allows multiple root nodes in a DOM

Recommendation: None

via: xmldom@0.1.31

unicoderegexp@0.4.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: unicoderegexp@0.4.1

6 high severity issues

chainsaw@0.0.9

Package uses an invalid SPDX license ("MIT/X11")

Recommendation: Validate that the package complies with your license policy

via: seq@0.3.5

hashish@0.0.4

Package uses an invalid SPDX license ("MIT/X11")

Recommendation: Validate that the package complies with your license policy

via: seq@0.3.5

seq@0.3.5

Package uses an invalid SPDX license ("MIT/X11")

Recommendation: Validate that the package complies with your license policy

via: seq@0.3.5

traverse@0.3.9

Package uses an invalid SPDX license ("MIT/X11")

Recommendation: Validate that the package complies with your license policy

via: seq@0.3.5

memoizeasync@1.1.0

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: memoizeasync@1.1.0

xmldom@0.1.31

Deprecated package

via: xmldom@0.1.31

2 moderate severity issues

xmldom@0.1.31

Misinterpretation of malicious XML input

Recommendation: Upgrade to version 0.5.0 or later

via: xmldom@0.1.31

xmldom@0.1.31

Misinterpretation of malicious XML input

Recommendation: None

via: xmldom@0.1.31

5 low severity issues

chainsaw@0.0.9

Package uses a license that is not OSI approved ("MIT/X11")

Recommendation: Read and validate the license terms

via: seq@0.3.5

hashish@0.0.4

Package uses a license that is not OSI approved ("MIT/X11")

Recommendation: Read and validate the license terms

via: seq@0.3.5

seq@0.3.5

Package uses a license that is not OSI approved ("MIT/X11")

Recommendation: Read and validate the license terms

via: seq@0.3.5

traverse@0.3.9

Package uses a license that is not OSI approved ("MIT/X11")

Recommendation: Read and validate the license terms

via: seq@0.3.5

memoizeasync@1.1.0

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: memoizeasync@1.1.0

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

12 Packages, Including:

deep-is@0.1.4

fast-levenshtein@2.0.6

levn@0.3.0

lodash@4.17.21

lru-cache@2.5.0

optionator@0.8.3

pegjs@0.10.0

prelude-ls@1.1.2

traverse@0.6.8

type-check@0.3.2

word-wrap@1.2.5

xpath@0.0.27

MIT/X11

Invalid

Not OSI Approved

4 Packages, Including:

chainsaw@0.0.9

hashish@0.0.4

seq@0.3.5

traverse@0.3.9

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

4 Packages, Including:

escodegen@1.14.3

esprima@4.0.1

estraverse@4.3.0

esutils@2.0.3

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

3 Packages, Including:

cldr@5.1.0

passerror@1.1.1

source-map@0.6.1

BSD

Invalid

Not OSI Approved

1 Packages, Including:

memoizeasync@1.1.0

N/A

N/A

1 Packages, Including:

unicoderegexp@0.4.1

(LGPL-2.0 or MIT)

Permissive

1 Packages, Including:

xmldom@0.1.31

Direct Dependencies

10

All Dependencies CSV

ⓘ This is a list of cldr 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
escodegen	1.14.3	19.63 kB	BSD-2-Clause	prod
esprima	4.0.1	50.86 kB	BSD-2-Clause	prod
lodash	4.17.21	311.49 kB	MIT	prod
memoizeasync	1.1.0	10.67 kB	BSD	prod	1 1
passerror	1.1.1	2.48 kB	BSD-3-Clause	prod
pegjs	0.10.0	69.61 kB	MIT	prod
seq	0.3.5	10.68 kB	MIT/X11	prod	4 4
unicoderegexp	0.4.1	10.1 kB	UNKNOWN	prod	1
xmldom	0.1.31	19.5 kB	(LGPL-2.0 or MIT)	prod	1 1 2
xpath	0.0.27	36.61 kB	MIT	prod

Recent Versions