Generated on May 27, 2024 via pnpm

db-migrate 0.9.26

Database migration framework for node.js

Package summary

26

issues

8

licenses

Package created

19 Dec 2011

Version published

28 Sep 2016

Maintainers

2

Total deps

58

Direct deps

13

License

MIT

Issues

26

2 critical severity issues

bson@0.2.22

Deserialization of Untrusted Data in bson

Recommendation: Upgrade to version 1.1.4 or later

via: mongodb@1.4.40

minimist@0.0.10

Prototype Pollution in minimist

Recommendation: Upgrade to version 0.2.4 or later

via: optimist@0.6.1

14 high severity issues

mongodb@1.4.40

Denial of Service in mongodb

Recommendation: Upgrade to version 3.1.13 or later

via: mongodb@1.4.40

moment@2.9.0

Regular Expression Denial of Service in moment

Recommendation: Upgrade to version 2.19.3 or later

via: moment@2.9.0

kerberos@0.0.11

DLL Injection in kerberos

Recommendation: Upgrade to version 1.0.0 or later

via: mongodb@1.4.40

moment@2.9.0

Path Traversal: 'dir/../../filename' in moment.locale

Recommendation: Upgrade to version 2.29.2 or later

via: moment@2.9.0

bson@0.2.22

Package uses an invalid SPDX license ("Apache License, Version 2.0")

Recommendation: Validate that the package complies with your license policy

via: mongodb@1.4.40

mongodb@1.4.40

Package uses an invalid SPDX license ("Apache License, Version 2.0")

Recommendation: Validate that the package complies with your license policy

via: mongodb@1.4.40

dotenv@0.5.1

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: dotenv@0.5.1

kerberos@0.0.11

Package uses an invalid SPDX license ("Apache 2.0")

Recommendation: Validate that the package complies with your license policy

via: mongodb@1.4.40

optimist@0.6.1

Package uses an invalid SPDX license ("MIT/X11")

Recommendation: Validate that the package complies with your license policy

via: optimist@0.6.1

bson@0.2.22

Deprecated package

via: mongodb@1.4.40

bson@0.2.22

Package uses install script: "(node-gyp rebuild 2> builderror.log) || (exit 0)"

via: mongodb@1.4.40

kerberos@0.0.11

Package uses install script: "(node-gyp rebuild 2> builderror.log) || (exit 0)"

via: mongodb@1.4.40

mongodb@1.4.40

Deprecated package

via: mongodb@1.4.40

sqlite3@3.1.13

Package uses install script: "node-pre-gyp install --fallback-to-build"

via: sqlite3@3.1.13

5 moderate severity issues

moment@2.9.0

Regular Expression Denial of Service in moment

Recommendation: Upgrade to version 2.11.2 or later

via: moment@2.9.0

bson@0.2.22

Deserialization of Untrusted Data in bson

Recommendation: Upgrade to version 1.1.4 or later

via: mongodb@1.4.40

minimist@0.0.10

Prototype Pollution in minimist

Recommendation: Upgrade to version 0.2.1 or later

via: optimist@0.6.1

semver@4.3.6

semver vulnerable to Regular Expression Denial of Service

Recommendation: Upgrade to version 5.7.2 or later

via: pg@4.5.7 & others

when@2.0.1

Package has no specified source code repository

via: final-fs@1.6.1

5 low severity issues

bson@0.2.22

Package uses a license that is not OSI approved ("Apache License, Version 2.0")

Recommendation: Read and validate the license terms

via: mongodb@1.4.40

mongodb@1.4.40

Package uses a license that is not OSI approved ("Apache License, Version 2.0")

Recommendation: Read and validate the license terms

via: mongodb@1.4.40

dotenv@0.5.1

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: dotenv@0.5.1

kerberos@0.0.11

Package uses a license that is not OSI approved ("Apache 2.0")

Recommendation: Read and validate the license terms

via: mongodb@1.4.40

optimist@0.6.1

Package uses a license that is not OSI approved ("MIT/X11")

Recommendation: Read and validate the license terms

via: optimist@0.6.1

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

47 Packages, Including:

abort-controller@3.0.0

async@0.9.2

base64-js@1.5.1

bignumber.js@9.0.0

buffer-writer@1.0.1

buffer@6.0.3

core-util-is@1.0.3

db-migrate@0.9.26

event-target-shim@5.0.1

events@3.3.0

final-fs@1.6.1

generic-pool@2.4.2

isarray@1.0.0

js-string-escape@1.0.1

minimist@0.0.10

minimist@1.2.8

mkdirp@0.5.6

moment@2.9.0

mysql@2.18.1

nan@1.8.4

nan@2.7.0

node-fs@0.1.7

packet-reader@0.2.0

parse-database-url@0.2.2

pg-connection-string@0.1.3

pg-types@1.13.0

pg@4.5.7

pkginfo@0.3.1

postgres-array@1.0.3

postgres-bytea@1.0.0

postgres-date@1.0.7

postgres-interval@1.2.0

process-nextick-args@2.0.1

process@0.11.10

readable-stream@2.3.7

readable-stream@4.5.2

safe-buffer@5.1.2

safe-buffer@5.2.1

split@0.3.3

sqlstring@2.3.1

string_decoder@1.1.1

string_decoder@1.3.0

through@2.3.8

util-deprecate@1.0.2

when@2.0.1

wordwrap@0.0.3

xtend@4.0.2

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

3 Packages, Including:

inherits@2.0.4

pg-int8@1.0.1

semver@4.3.6

Apache License, Version 2.0

Invalid

Not OSI Approved

2 Packages, Including:

bson@0.2.22

mongodb@1.4.40

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

2 Packages, Including:

ieee754@1.2.1

sqlite3@3.1.13

BSD

Invalid

Not OSI Approved

1 Packages, Including:

dotenv@0.5.1

Apache 2.0

Invalid

Not OSI Approved

1 Packages, Including:

kerberos@0.0.11

MIT/X11

Invalid

Not OSI Approved

1 Packages, Including:

optimist@0.6.1

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

1 Packages, Including:

pgpass@0.0.3

Direct Dependencies

13

All Dependencies CSV

ⓘ This is a list of db-migrate 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
async	0.9.2	20.46 kB	MIT	prod
dotenv	0.5.1	10.22 kB	BSD	prod	1 1
final-fs	1.6.1	8.89 kB	MIT	prod	1
mkdirp	0.5.6	2.95 kB	MIT	prod
moment	2.9.0	263.95 kB	MIT	prod	2 1
mongodb	1.4.40	152.77 kB	Apache License, Version 2.0	prod	1 9 1 3
mysql	2.18.1	118.9 kB	MIT	prod
optimist	0.6.1	12.06 kB	MIT/X11	prod	1 1 1 1
parse-database-url	0.2.2	3.41 kB	MIT	prod
pg	4.5.7	60.61 kB	MIT	prod	1
pkginfo	0.3.1	7.78 kB	MIT	prod
semver	4.3.6	44.41 kB	ISC	prod	1
sqlite3	3.1.13	3.97 MB	BSD-3-Clause	prod	1