Home
Docs
GitHub
Pricing
Blog
Log In

Run Sandworm Audit for your App

Get started
Hold on, we're currently generating a fresh version of this report
Generated on Feb 28, 2024 via pnpm

dynogels 3.2.2

DynamoDB data mapper
Package summary
Share
18
issues
2
critical severity
vulnerability
1
license
1
11
high severity
vulnerability
5
license
1
meta
5
3
moderate severity
vulnerability
3
2
low severity
vulnerability
1
license
1
7
licenses
19
MIT
8
ISC
2
BSD-3-Clause
4
other licenses
Apache-2.0
1
N/A
1
BSD-2-Clause
1
BSD
1
Package created
26 Jun 2016
Version published
26 Jun 2016
Maintainers
3
Total deps
33
Direct deps
6
License
MIT

Issues

18

2 critical severity issues

critical
Recommendation: Upgrade to version 4.17.12 or later
via: aws-sdk@2.2.48
Recommendation: Check the package code and files for license information
via: bunyan@1.5.1
Collapse
Expand

11 high severity issues

high
Recommendation: Upgrade to version 2.814.0 or later
via: aws-sdk@2.2.48
Recommendation: Upgrade to version 4.2.1 or later
via: joi@5.1.0
Recommendation: Upgrade to version 4.17.11 or later
via: aws-sdk@2.2.48
Recommendation: None
via: joi@5.1.0
Recommendation: Upgrade to version 4.17.21 or later
via: aws-sdk@2.2.48
Recommendation: Validate that the package complies with your license policy
via: joi@5.1.0
via: bunyan@1.5.1
via: joi@5.1.0
via: joi@5.1.0
via: node-uuid@1.4.8
via: joi@5.1.0
Collapse
Expand

3 moderate severity issues

moderate
Recommendation: Upgrade to version 4.17.11 or later
via: aws-sdk@2.2.48
Recommendation: Upgrade to version 0.5.0 or later
via: aws-sdk@2.2.48
Recommendation: Upgrade to version 4.17.21 or later
via: aws-sdk@2.2.48
Collapse
Expand

2 low severity issues

low
Recommendation: Upgrade to version 4.17.5 or later
via: aws-sdk@2.2.48
Recommendation: Read and validate the license terms
via: joi@5.1.0
Collapse
Expand

Licenses

MIT License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
Cannot
hold-liable
Must
include-copyright
include-license
19 Packages, Including:
async@1.5.2
balanced-match@1.0.2
brace-expansion@1.1.11
bunyan@1.5.1
concat-map@0.0.1
dynogels@3.2.2
lodash@3.5.0
lodash@4.17.21
minimist@1.2.8
mkdirp@0.5.6
moment@2.30.1
mv@2.1.1
nan@2.18.0
ncp@2.0.0
node-uuid@1.4.8
path-is-absolute@1.0.1
safe-json-stringify@1.2.0
xml2js@0.4.15
xmlbuilder@2.6.2

ISC License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
Cannot
hold-liable
Must
include-copyright
include-license
8 Packages, Including:
glob@6.0.4
inflight@1.0.6
inherits@2.0.4
minimatch@3.1.2
once@1.4.0
rimraf@2.4.5
sax@1.1.5
wrappy@1.0.2

BSD 3-Clause "New" or "Revised" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
use-trademark
hold-liable
Must
include-copyright
include-license
2 Packages, Including:
hoek@2.16.3
topo@1.1.0

Apache License 2.0

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
use-patent-claims
place-warranty
Cannot
hold-liable
use-trademark
Must
include-copyright
include-license
state-changes
include-notice
1 Packages, Including:
aws-sdk@2.2.48

N/A

N/A
1 Packages, Including:
dtrace-provider@0.6.0

BSD 2-Clause "Simplified" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
hold-liable
Must
include-copyright
include-license
1 Packages, Including:
isemail@1.2.0

BSD

Invalid
Not OSI Approved
1 Packages, Including:
joi@5.1.0
Disclaimer

This deed highlights only some of the key features and terms of the actual license. It is not a license and has no legal value. You should carefully review all of the terms and conditions of the actual license before using the licensed material.

Sandworm is not a law firm and does not provide legal services. Distributing, displaying, or linking to this deed or the license that it summarizes does not create a lawyer-client or any other relationship.

Direct Dependencies

6
All Dependencies CSV
β“˜ This is a list of dynogels 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.
NameVersionSizeLicenseTypeVulnerabilities
async1.5.238.01 kBMIT
prod
aws-sdk2.2.48579.37 kBApache-2.0
prod
1
3
3
1
bunyan1.5.1253.64 kBMIT
prod
1
1
joi5.1.0197.3 kBBSD
prod
6
1
lodash4.17.21311.49 kBMIT
prod
node-uuid1.4.813.8 kBMIT
prod
1

Visualizations