Generated on May 8, 2024 via pnpm

Npm

Home

csrf-login 1.17.2

cli

command

Package summary

issues

licenses

Package created

12 Aug 2015

Version published

15 Feb 2017

Maintainers

Total deps

101

Direct deps

License

MIT

Issues

1 critical severity issue

critical

domutils@1.5.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: cheerio@0.22.0

Collapse

Expand

7 high severity issues

high

nconf@0.8.5

Prototype Pollution in nconf

Recommendation: Upgrade to version 0.11.4 or later

via: nconf@0.8.5

nth-check@1.0.2

Inefficient Regular Expression Complexity in nth-check

Recommendation: Upgrade to version 2.0.1 or later

via: cheerio@0.22.0

lodash.pick@4.4.0

Prototype Pollution in lodash

Recommendation: None

via: cheerio@0.22.0

css-select@1.2.0

Package uses an invalid SPDX license ("BSD-like")

Recommendation: Validate that the package complies with your license policy

via: cheerio@0.22.0

har-validator@5.1.5

Deprecated package

via: request@2.88.2

request@2.88.2

Deprecated package

via: request@2.88.2

uuid@3.4.0

Deprecated package

via: request@2.88.2

Collapse

Expand

3 moderate severity issues

moderate

tough-cookie@2.5.0

tough-cookie Prototype Pollution vulnerability

Recommendation: Upgrade to version 4.1.3 or later

via: request@2.88.2

request@2.88.2

Server-Side Request Forgery in Request

Recommendation: None

via: request@2.88.2

secure-keys@1.0.0

Package has no specified source code repository

via: nconf@0.8.5

Collapse

Expand

1 low severity issue

low

css-select@1.2.0

Package uses a license that is not OSI approved ("BSD-like")

Recommendation: Read and validate the license terms

via: cheerio@0.22.0

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

74 Packages, Including:

ajv@6.12.6

ansi-regex@2.1.1

asn1@0.2.6

assert-plus@1.0.0

async@1.5.2

asynckit@0.4.0

aws4@1.12.0

camelcase@2.1.1

check-more-types@2.24.0

cheerio@0.22.0

code-point-at@1.1.0

combined-stream@1.0.8

core-util-is@1.0.2

csrf-login@1.17.2

dashdash@1.14.1

debug@2.6.9

decamelize@1.2.0

delayed-stream@1.0.0

dom-serializer@0.1.1

ecc-jsbn@0.1.2

extend@3.0.2

extsprintf@1.3.0

fast-deep-equal@3.1.3

fast-json-stable-stringify@2.1.0

first-existing@1.2.0

form-data@2.3.3

getpass@0.1.7

har-validator@5.1.5

htmlparser2@3.10.1

http-signature@1.2.0

invert-kv@1.0.0

is-fullwidth-code-point@1.0.0

is-typedarray@1.0.0

isstream@0.1.2

jsbn@0.1.1

json-schema-traverse@0.4.1

jsprim@1.4.2

lazy-ass@1.6.0

lcid@1.0.0

lodash.assignin@4.2.0

lodash.bind@4.2.1

lodash.defaults@4.2.0

lodash.filter@4.6.0

lodash.flatten@4.4.0

lodash.foreach@4.5.0

lodash.map@4.6.0

lodash.merge@4.6.2

lodash.pick@4.4.0

lodash.reduce@4.6.0

lodash.reject@4.6.0

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

7 Packages, Including:

boolbase@1.0.0

cliui@3.2.0

har-schema@2.0.0

inherits@2.0.4

ini@1.3.8

json-stringify-safe@5.0.1

y18n@3.2.2

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

7 Packages, Including:

css-what@2.1.3

domelementtype@1.3.1

domhandler@2.4.2

domutils@1.7.0

entities@1.1.2

nth-check@1.0.2

uri-js@4.4.1

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

6 Packages, Including:

aws-sign2@0.7.0

caseless@0.12.0

forever-agent@0.6.1

oauth-sign@0.9.0

request@2.88.2

tunnel-agent@0.6.0

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

3 Packages, Including:

bcrypt-pbkdf@1.0.2

qs@6.5.3

tough-cookie@2.5.0

BSD-like

Invalid

Not OSI Approved

1 Packages, Including:

css-select@1.2.0

N/A

1 Packages, Including:

domutils@1.5.1

(AFL-2.1 OR BSD-3-Clause)

Permissive

1 Packages, Including:

json-schema@0.4.0

The Unlicense

Public Domain

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

private-use

modify

Cannot

include-copyright

hold-liable

Must

1 Packages, Including:

tweetnacl@0.14.5

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of csrf-login 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
check-more-types	2.24.0	16.89 kB	MIT	prod
cheerio	0.22.0	29.52 kB	MIT	prod	1 3 1
debug	2.6.9	16.13 kB	MIT	prod
first-existing	1.2.0	2.42 kB	MIT	prod
lazy-ass	1.6.0	6.82 kB	MIT	prod
nconf	0.8.5	30.39 kB	MIT	prod	1 1
request	2.88.2	57.83 kB	Apache-2.0	prod	3 2