Home
Docs
GitHub
Pricing
Blog
Log In

Run Sandworm Audit for your App

Get started
Hold on, we're currently generating a fresh version of this report
Generated on Feb 20, 2024 via pnpm

connect-mongo 4.5.0

MongoDB session store for Express and Connect
Package summary
Share
1
issue
1
moderate severity
vulnerability
1
5
licenses
31
MIT
4
Apache-2.0
2
ISC
2
other licenses
BSD-3-Clause
1
BSD-2-Clause
1
Package created
8 Mar 2011
Version published
17 Aug 2021
Maintainers
2
Total deps
39
Direct deps
4
License
MIT

Issues

1

1 moderate severity issue

moderate
Recommendation: Upgrade to version 4.17.0 or later
via: mongodb@4.1.0
Collapse
Expand

Licenses

MIT License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
Cannot
hold-liable
Must
include-copyright
include-license
31 Packages, Including:
@types/node@20.11.19
@types/webidl-conversions@7.0.3
@types/whatwg-url@8.2.2
asn1.js@5.4.1
base64-js@1.5.1
bn.js@4.12.0
buffer@5.7.1
connect-mongo@4.5.0
cookie-signature@1.0.7
cookie@0.6.0
debug@2.6.9
debug@4.3.4
depd@2.0.0
express-session@1.18.0
kruptein@3.0.6
lodash@4.17.21
memory-pager@1.5.0
ms@2.0.0
ms@2.1.2
on-headers@1.0.2
parseurl@1.3.3
punycode@2.3.1
random-bytes@1.0.0
safe-buffer@5.2.1
safer-buffer@2.1.2
saslprep@1.0.3
sparse-bitfield@3.0.3
tr46@2.1.0
uid-safe@2.1.5
undici-types@5.26.5
whatwg-url@8.7.0

Apache License 2.0

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
use-patent-claims
place-warranty
Cannot
hold-liable
use-trademark
Must
include-copyright
include-license
state-changes
include-notice
4 Packages, Including:
bson@4.7.2
denque@1.5.1
mongodb-connection-string-url@1.1.2
mongodb@4.1.0

ISC License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
Cannot
hold-liable
Must
include-copyright
include-license
2 Packages, Including:
inherits@2.0.4
minimalistic-assert@1.0.1

BSD 3-Clause "New" or "Revised" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
use-trademark
hold-liable
Must
include-copyright
include-license
1 Packages, Including:
ieee754@1.2.1

BSD 2-Clause "Simplified" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
hold-liable
Must
include-copyright
include-license
1 Packages, Including:
webidl-conversions@6.1.0
Disclaimer

This deed highlights only some of the key features and terms of the actual license. It is not a license and has no legal value. You should carefully review all of the terms and conditions of the actual license before using the licensed material.

Sandworm is not a law firm and does not provide legal services. Distributing, displaying, or linking to this deed or the license that it summarizes does not create a lawyer-client or any other relationship.

Direct Dependencies

4
All Dependencies CSV
β“˜ This is a list of connect-mongo 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.
NameVersionSizeLicenseTypeVulnerabilities
debug4.3.412.94 kBMIT
prod
express-session1.18.022.25 kBMIT
prod peer
kruptein3.0.68.57 kBMIT
prod
mongodb4.1.0599.95 kBApache-2.0
prod
1

Visualizations