Hold on, we're currently generating a fresh version of this report

Generated on Feb 28, 2024 via pnpm

dashbot 10.2.2

Analytics for your bot

facebook messenger

microsoft bot framework

Package summary

9

issues

2

licenses

Package created

6 May 2016

Version published

3 Jan 2019

Maintainers

6

Total deps

14

Direct deps

7

License

ISC

Issues

9

1 critical severity issue

lodash@4.17.10

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.12 or later

via: lodash@4.17.10 & others

5 high severity issues

lodash@4.17.10

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.11 or later

via: lodash@4.17.10 & others

node-fetch@1.7.3

node-fetch forwards secure headers to untrusted sites

Recommendation: Upgrade to version 2.6.7 or later

via: isomorphic-fetch@2.2.1

lodash@4.17.10

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.19 or later

via: lodash@4.17.10 & others

lodash@4.17.10

Command Injection in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: lodash@4.17.10 & others

uuid@3.0.1

Deprecated package

via: uuid@3.0.1

2 moderate severity issues

lodash@4.17.10

Regular Expression Denial of Service (ReDoS) in lodash

Recommendation: Upgrade to version 4.17.11 or later

via: lodash@4.17.10 & others

lodash@4.17.10

Regular Expression Denial of Service (ReDoS) in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: lodash@4.17.10 & others

1 low severity issue

node-fetch@1.7.3

The `size` option isn't honored after following a redirect in node-fetch

Recommendation: Upgrade to version 2.6.1 or later

via: isomorphic-fetch@2.2.1

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

13 Packages, Including:

encoding@0.1.13

es6-promise@4.1.0

iconv-lite@0.6.3

is-stream@1.1.0

isomorphic-fetch@2.2.1

lodash@4.17.10

meld@1.3.2

node-fetch@1.7.3

redact-pii@1.3.1

safer-buffer@2.1.2

traverse@0.6.6

uuid@3.0.1

whatwg-fetch@3.6.20

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

1 Packages, Including:

dashbot@10.2.2

Direct Dependencies

7

All Dependencies CSV

ⓘ This is a list of dashbot 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
es6-promise	4.1.0	73.15 kB	MIT	prod
isomorphic-fetch	2.2.1	3.23 kB	MIT	prod	1 1
lodash	4.17.10	298.5 kB	MIT	prod	1 3 2
meld	1.3.2	9.07 kB	MIT	prod
redact-pii	1.3.1	43.59 kB	MIT	prod	1 3 2
traverse	0.6.6	10.94 kB	MIT	prod
uuid	3.0.1	7.03 kB	MIT	prod	1

Recent Versions