Home
Docs
GitHub
Pricing
Blog
Log In

Run Sandworm Audit for your App

Get started
Hold on, we're currently generating a fresh version of this report
Generated on Jan 28, 2024 via pnpm

connect-mongodb-session 3.1.1

MongoDB session store for connect/express built by MongoDB
Package summary
Share
4
issues
1
critical severity
license
1
2
high severity
vulnerability
1
license
1
1
low severity
license
1
7
licenses
75
Apache-2.0
22
MIT
2
0BSD
4
other licenses
Apache 2.0
1
N/A
1
BSD-3-Clause
1
BSD-2-Clause
1
Package created
22 Nov 2014
Version published
4 Oct 2021
Maintainers
1
Total deps
103
Direct deps
2
License
UNKNOWN

Issues

4

1 critical severity issue

critical
Recommendation: Check the package code and files for license information
via: connect-mongodb-session@3.1.1
Collapse
Expand

2 high severity issues

high
Recommendation: None
via: archetype@0.13.0
Recommendation: Validate that the package complies with your license policy
via: archetype@0.13.0
Collapse
Expand

1 low severity issue

low
Recommendation: Read and validate the license terms
via: archetype@0.13.0
Collapse
Expand

Licenses

Apache License 2.0

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
use-patent-claims
place-warranty
Cannot
hold-liable
use-trademark
Must
include-copyright
include-license
state-changes
include-notice
75 Packages, Including:
@aws-crypto/crc32@3.0.0
@aws-crypto/ie11-detection@3.0.0
@aws-crypto/sha256-browser@3.0.0
@aws-crypto/sha256-js@3.0.0
@aws-crypto/supports-web-crypto@3.0.0
@aws-crypto/util@3.0.0
@aws-sdk/client-cognito-identity@3.501.0
@aws-sdk/client-sso@3.496.0
@aws-sdk/client-sts@3.501.0
@aws-sdk/core@3.496.0
@aws-sdk/credential-provider-cognito-identity@3.501.0
@aws-sdk/credential-provider-env@3.496.0
@aws-sdk/credential-provider-http@3.496.0
@aws-sdk/credential-provider-ini@3.501.0
@aws-sdk/credential-provider-node@3.501.0
@aws-sdk/credential-provider-process@3.496.0
@aws-sdk/credential-provider-sso@3.501.0
@aws-sdk/credential-provider-web-identity@3.496.0
@aws-sdk/credential-providers@3.501.0
@aws-sdk/middleware-host-header@3.496.0
@aws-sdk/middleware-logger@3.496.0
@aws-sdk/middleware-recursion-detection@3.496.0
@aws-sdk/middleware-signing@3.496.0
@aws-sdk/middleware-user-agent@3.496.0
@aws-sdk/region-config-resolver@3.496.0
@aws-sdk/token-providers@3.501.0
@aws-sdk/types@3.496.0
@aws-sdk/util-endpoints@3.496.0
@aws-sdk/util-locate-window@3.495.0
@aws-sdk/util-user-agent-browser@3.496.0
@aws-sdk/util-user-agent-node@3.496.0
@aws-sdk/util-utf8-browser@3.259.0
@smithy/abort-controller@2.1.1
@smithy/config-resolver@2.1.1
@smithy/core@1.3.1
@smithy/credential-provider-imds@2.2.1
@smithy/eventstream-codec@2.1.1
@smithy/fetch-http-handler@2.4.1
@smithy/hash-node@2.1.1
@smithy/invalid-dependency@2.1.1
@smithy/is-array-buffer@2.1.1
@smithy/middleware-content-length@2.1.1
@smithy/middleware-endpoint@2.4.1
@smithy/middleware-retry@2.1.1
@smithy/middleware-serde@2.1.1
@smithy/middleware-stack@2.1.1
@smithy/node-config-provider@2.2.1
@smithy/node-http-handler@2.3.1
@smithy/property-provider@2.1.1
@smithy/protocol-http@3.1.1

MIT License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
Cannot
hold-liable
Must
include-copyright
include-license
22 Packages, Including:
@mongodb-js/saslprep@1.1.4
@types/node@20.11.8
@types/webidl-conversions@7.0.3
@types/whatwg-url@8.2.2
base64-js@1.5.1
bowser@2.11.0
buffer@5.7.1
fast-xml-parser@4.2.5
ip@2.0.0
lodash.clonedeep@4.5.0
lodash.set@4.3.2
memory-pager@1.5.0
mpath@0.8.4
punycode@2.3.1
smart-buffer@4.2.0
socks@2.7.1
sparse-bitfield@3.0.3
strnum@1.0.5
tr46@3.0.0
undici-types@5.26.5
uuid@8.3.2
whatwg-url@11.0.0

BSD Zero Clause License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
include-copyright
include-license
include-original
Cannot
hold-liable
Must
2 Packages, Including:
tslib@1.14.1
tslib@2.6.2

Apache 2.0

Invalid
Not OSI Approved
1 Packages, Including:
archetype@0.13.0

N/A

N/A
1 Packages, Including:
connect-mongodb-session@3.1.1

BSD 3-Clause "New" or "Revised" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
use-trademark
hold-liable
Must
include-copyright
include-license
1 Packages, Including:
ieee754@1.2.1

BSD 2-Clause "Simplified" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
hold-liable
Must
include-copyright
include-license
1 Packages, Including:
webidl-conversions@7.0.0
Disclaimer

This deed highlights only some of the key features and terms of the actual license. It is not a license and has no legal value. You should carefully review all of the terms and conditions of the actual license before using the licensed material.

Sandworm is not a law firm and does not provide legal services. Distributing, displaying, or linking to this deed or the license that it summarizes does not create a lawyer-client or any other relationship.

Direct Dependencies

2
All Dependencies CSV
β“˜ This is a list of connect-mongodb-session 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.
NameVersionSizeLicenseTypeVulnerabilities
archetype0.13.011.4 kBApache 2.0
prod
2
1
mongodb4.17.2559.23 kBApache-2.0
prod

Visualizations