Hold on, we're currently generating a fresh version of this report

Generated on May 16, 2024 via pnpm

excel4node 1.0.6

Library to create Formatted Excel Files.

Package summary

23

issues

9

licenses

Package created

2 Jul 2014

Version published

7 Jun 2016

Maintainers

3

Total deps

81

Direct deps

7

License

UNKNOWN

Issues

23

4 critical severity issues

nodemailer@2.7.2

Command injection in nodemailer

Recommendation: Upgrade to version 6.4.16 or later

via: sloth-logger@1.0.3

underscore@1.7.0

Arbitrary Code Execution in underscore

Recommendation: Upgrade to version 1.12.1 or later

via: sloth-logger@1.0.3

lodash@4.11.1

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.12 or later

via: lodash@4.11.1 & others

ansi_up@1.3.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: sloth-logger@1.0.3

10 high severity issues

jszip@2.6.0

JSZip contains Path Traversal via loadAsync

Recommendation: Upgrade to version 3.8.0 or later

via: jszip@2.6.0

lodash@4.11.1

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.11 or later

via: lodash@4.11.1 & others

trim-newlines@1.0.0

Uncontrolled Resource Consumption in trim-newlines

Recommendation: Upgrade to version 3.0.1 or later

via: sloth-logger@1.0.3

lodash@4.11.1

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.19 or later

via: lodash@4.11.1 & others

lodash@4.11.1

Command Injection in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: lodash@4.11.1 & others

spdx-exceptions@2.5.0

Package uses an atypical license ("CC-BY-3.0")

Recommendation: Read and validate the license terms

via: sloth-logger@1.0.3

buildmail@4.0.1

Deprecated package

via: sloth-logger@1.0.3

mailcomposer@4.0.1

Deprecated package

via: sloth-logger@1.0.3

nodemailer@2.7.2

Deprecated package

via: sloth-logger@1.0.3

socks@1.1.9

Deprecated package

via: sloth-logger@1.0.3

7 moderate severity issues

lodash@4.11.1

Regular Expression Denial of Service (ReDoS) in lodash

Recommendation: Upgrade to version 4.17.11 or later

via: lodash@4.11.1 & others

nodemailer@2.7.2

Header injection in nodemailer

Recommendation: Upgrade to version 6.6.1 or later

via: sloth-logger@1.0.3

ansi_up@1.3.0

ansi_up cross-site scripting vulnerability

Recommendation: Upgrade to version 5.0.0 or later

via: sloth-logger@1.0.3

jszip@2.6.0

jszip Vulnerable to Prototype Pollution

Recommendation: Upgrade to version 2.7.0 or later

via: jszip@2.6.0

lodash@4.11.1

Regular Expression Denial of Service (ReDoS) in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: lodash@4.11.1 & others

nodemailer@2.7.2

nodemailer ReDoS when trying to send a specially crafted email

Recommendation: Upgrade to version 6.9.9 or later

via: sloth-logger@1.0.3

lodash@4.11.1

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.5 or later

via: lodash@4.11.1 & others

2 low severity issues

spdx-exceptions@2.5.0

Package uses a license that is not OSI approved ("CC-BY-3.0")

Recommendation: Read and validate the license terms

via: sloth-logger@1.0.3

spdx-license-ids@3.0.17

Package uses a license that is not OSI approved ("CC0-1.0")

Recommendation: Read and validate the license terms

via: sloth-logger@1.0.3

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

69 Packages, Including:

addressparser@1.0.1

array-find-index@1.0.2

buildmail@4.0.1

camelcase-keys@2.1.0

camelcase@2.1.1

colors@1.4.0

currently-unhandled@0.4.1

dateformat@1.0.12

decamelize@1.2.0

error-ex@1.3.2

excel4node@1.0.6

find-up@1.1.2

function-bind@1.1.2

get-stdin@4.0.1

hasown@2.0.2

httpntlm@1.6.1

httpreq@1.1.1

iconv-lite@0.4.15

image-size@0.5.0

indent-string@2.1.0

ip@1.1.9

is-arrayish@0.2.1

is-core-module@2.13.1

is-finite@1.1.0

is-utf8@0.2.1

libbase64@0.1.0

libmime@3.0.0

libqp@1.1.0

load-json-file@1.1.0

lodash@4.11.1

loud-rejection@1.6.0

mailcomposer@4.0.1

map-obj@1.0.1

meow@3.7.0

mime@1.6.0

minimist@1.2.8

nodemailer-direct-transport@3.3.2

nodemailer-fetch@1.6.0

nodemailer-shared@1.1.0

nodemailer-smtp-pool@2.8.2

nodemailer-smtp-transport@2.7.2

nodemailer-wellknown@0.1.10

nodemailer@2.7.2

object-assign@4.1.1

parse-json@2.2.0

path-exists@2.1.0

path-parse@1.0.7

path-type@1.1.0

pify@2.3.0

pinkie-promise@2.0.1

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

4 Packages, Including:

graceful-fs@4.2.11

hosted-git-info@2.8.9

semver@5.7.2

signal-exit@3.0.7

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

2 Packages, Including:

spdx-correct@3.2.0

validate-npm-package-license@3.0.4

N/A

N/A

1 Packages, Including:

ansi_up@1.3.0

(MIT OR GPL-3.0)

Permissive

1 Packages, Including:

jszip@2.6.0

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

1 Packages, Including:

normalize-package-data@2.5.0

(MIT AND Zlib)

Permissive

1 Packages, Including:

pako@1.0.11

Creative Commons Attribution 3.0 Unported

Uncategorized

Not OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

Cannot

Must

1 Packages, Including:

spdx-exceptions@2.5.0

Creative Commons Zero v1.0 Universal

Public Domain

Not OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

Cannot

Must

1 Packages, Including:

spdx-license-ids@3.0.17

Direct Dependencies

7

All Dependencies CSV

ⓘ This is a list of excel4node 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
colors	1.4.0	11 kB	MIT	prod
image-size	0.5.0	6.35 kB	MIT	prod
jszip	2.6.0	138.12 kB	(MIT OR GPL-3.0)	prod	1 1
lodash	4.11.1	282.79 kB	MIT	prod	1 3 3
mime	1.6.0	15.32 kB	MIT	prod
sloth-logger	1.0.3	125.87 kB	MIT	prod	4 9 6 2
xmlbuilder	8.2.2	18.33 kB	MIT	prod

Recent Versions