Generated on Apr 19, 2024 via pnpm

Npm

Home

convict 4.0.1

Featureful configuration management library for Node.js (nested structure, schema validation, etc.)

configuration

config

key value store

schema

nested

validation

Package summary

issues

licenses

Package created

22 Jan 2012

Version published

29 Sep 2017

Maintainers

Total deps

Direct deps

License

Apache-2.0

Issues

2 critical severity issues

critical

convict@4.0.1

Prototype Pollution in convict

Recommendation: Upgrade to version 6.2.3 or later

via: convict@4.0.1

convict@4.0.1

Prototype Pollution in convict

Recommendation: Upgrade to version 6.2.3 or later

via: convict@4.0.1

Collapse

Expand

8 high severity issues

high

convict@4.0.1

Prototype Pollution in convict

Recommendation: Upgrade to version 6.2.3 or later

via: convict@4.0.1

convict@4.0.1

convict vulnerable to Prototype Pollution

Recommendation: Upgrade to version 6.2.4 or later

via: convict@4.0.1

convict@4.0.1

Prototype Pollution in convict

Recommendation: Upgrade to version 6.2.3 or later

via: convict@4.0.1

convict@4.0.1

convict vulnerable to Prototype Pollution

Recommendation: Upgrade to version 6.2.4 or later

via: convict@4.0.1

moment@2.18.1

Regular Expression Denial of Service in moment

Recommendation: Upgrade to version 2.19.3 or later

via: moment@2.18.1

moment@2.18.1

Moment.js vulnerable to Inefficient Regular Expression Complexity

Recommendation: Upgrade to version 2.29.4 or later

via: moment@2.18.1

moment@2.18.1

Path Traversal: 'dir/../../filename' in moment.locale

Recommendation: Upgrade to version 2.29.2 or later

via: moment@2.18.1

json5@0.5.1

Prototype Pollution in JSON5 via Parse Method

Recommendation: Upgrade to version 1.0.2 or later

via: json5@0.5.1

Collapse

Expand

2 moderate severity issues

moderate

yargs-parser@7.0.0

yargs-parser Vulnerable to Prototype Pollution

Recommendation: Upgrade to version 13.1.2 or later

via: yargs-parser@7.0.0

validator@7.2.0

Inefficient Regular Expression Complexity in validator.js

Recommendation: Upgrade to version 13.7.0 or later

via: validator@7.2.0

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

9 Packages, Including:

camelcase@4.1.0

depd@1.1.1

json5@0.5.1

lodash.clonedeep@4.5.0

moment@2.18.1

redeyed@1.0.1

through@2.3.8

validator@7.2.0

varify@0.2.0

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

1 Packages, Including:

convict@4.0.1

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

1 Packages, Including:

esprima@3.0.0

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

1 Packages, Including:

yargs-parser@7.0.0

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of convict 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
depd	1.1.1	8.81 kB	MIT	prod
json5	0.5.1	13.21 kB	MIT	prod	1
lodash.clonedeep	4.5.0	11.36 kB	MIT	prod
moment	2.18.1	485.82 kB	MIT	prod	3
validator	7.2.0	38.63 kB	MIT	prod	1
varify	0.2.0	2.93 kB	MIT	prod optional
yargs-parser	7.0.0	11.32 kB	ISC	prod	1