Hold on, we're currently generating a fresh version of this report

Generated on Mar 31, 2024 via pnpm

excel4node 1.3.1

Library to create Formatted Excel Files.

Package summary

24

issues

9

licenses

Package created

2 Jul 2014

Version published

25 Nov 2017

Maintainers

3

Total deps

92

Direct deps

6

License

UNKNOWN

Issues

24

4 critical severity issues

nodemailer@2.7.2

Command injection in nodemailer

Recommendation: Upgrade to version 6.4.16 or later

via: sloth-logger@1.0.3

lodash@4.17.4

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.12 or later

via: lodash@4.17.4 & others

underscore@1.7.0

Arbitrary Code Execution in underscore

Recommendation: Upgrade to version 1.12.1 or later

via: sloth-logger@1.0.3

ansi_up@1.3.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: sloth-logger@1.0.3

11 high severity issues

jszip@3.1.5

JSZip contains Path Traversal via loadAsync

Recommendation: Upgrade to version 3.8.0 or later

via: jszip@3.1.5

lodash@4.17.4

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.11 or later

via: lodash@4.17.4 & others

trim-newlines@1.0.0

Uncontrolled Resource Consumption in trim-newlines

Recommendation: Upgrade to version 3.0.1 or later

via: sloth-logger@1.0.3

lodash@4.17.4

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.19 or later

via: lodash@4.17.4 & others

lodash@4.17.4

Command Injection in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: lodash@4.17.4 & others

spdx-exceptions@2.5.0

Package uses an atypical license ("CC-BY-3.0")

Recommendation: Read and validate the license terms

via: sloth-logger@1.0.3

buildmail@4.0.1

Deprecated package

via: sloth-logger@1.0.3

core-js@2.3.0

Deprecated package

via: jszip@3.1.5

mailcomposer@4.0.1

Deprecated package

via: sloth-logger@1.0.3

nodemailer@2.7.2

Deprecated package

via: sloth-logger@1.0.3

socks@1.1.9

Deprecated package

via: sloth-logger@1.0.3

6 moderate severity issues

lodash@4.17.4

Regular Expression Denial of Service (ReDoS) in lodash

Recommendation: Upgrade to version 4.17.11 or later

via: lodash@4.17.4 & others

nodemailer@2.7.2

Header injection in nodemailer

Recommendation: Upgrade to version 6.6.1 or later

via: sloth-logger@1.0.3

ansi_up@1.3.0

ansi_up cross-site scripting vulnerability

Recommendation: Upgrade to version 5.0.0 or later

via: sloth-logger@1.0.3

jszip@3.1.5

jszip Vulnerable to Prototype Pollution

Recommendation: Upgrade to version 3.7.0 or later

via: jszip@3.1.5

lodash@4.17.4

Regular Expression Denial of Service (ReDoS) in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: lodash@4.17.4 & others

nodemailer@2.7.2

nodemailer ReDoS when trying to send a specially crafted email

Recommendation: Upgrade to version 6.9.9 or later

via: sloth-logger@1.0.3

3 low severity issues

lodash@4.17.4

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.5 or later

via: lodash@4.17.4 & others

spdx-exceptions@2.5.0

Package uses a license that is not OSI approved ("CC-BY-3.0")

Recommendation: Read and validate the license terms

via: sloth-logger@1.0.3

spdx-license-ids@3.0.17

Package uses a license that is not OSI approved ("CC0-1.0")

Recommendation: Read and validate the license terms

via: sloth-logger@1.0.3

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

79 Packages, Including:

addressparser@1.0.1

array-find-index@1.0.2

buildmail@4.0.1

camelcase-keys@2.1.0

camelcase@2.1.1

colors@1.4.0

core-js@2.3.0

core-util-is@1.0.3

currently-unhandled@0.4.1

dateformat@1.0.12

decamelize@1.2.0

error-ex@1.3.2

es6-promise@3.0.2

excel4node@1.3.1

find-up@1.1.2

function-bind@1.1.2

get-stdin@4.0.1

hasown@2.0.2

httpntlm@1.6.1

httpreq@1.1.1

iconv-lite@0.4.15

image-size@0.6.1

immediate@3.0.6

indent-string@2.1.0

ip@1.1.9

is-arrayish@0.2.1

is-core-module@2.13.1

is-finite@1.1.0

is-utf8@0.2.1

isarray@1.0.0

libbase64@0.1.0

libmime@3.0.0

libqp@1.1.0

lie@3.1.1

load-json-file@1.1.0

lodash@4.17.4

loud-rejection@1.6.0

mailcomposer@4.0.1

map-obj@1.0.1

meow@3.7.0

mime@2.0.3

minimist@1.2.8

nodemailer-direct-transport@3.3.2

nodemailer-fetch@1.6.0

nodemailer-shared@1.1.0

nodemailer-smtp-pool@2.8.2

nodemailer-smtp-transport@2.7.2

nodemailer-wellknown@0.1.10

nodemailer@2.7.2

object-assign@4.1.1

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

5 Packages, Including:

graceful-fs@4.2.11

hosted-git-info@2.8.9

inherits@2.0.4

semver@5.7.2

signal-exit@3.0.7

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

2 Packages, Including:

spdx-correct@3.2.0

validate-npm-package-license@3.0.4

N/A

N/A

1 Packages, Including:

ansi_up@1.3.0

(MIT OR GPL-3.0)

Permissive

1 Packages, Including:

jszip@3.1.5

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

1 Packages, Including:

normalize-package-data@2.5.0

(MIT AND Zlib)

Permissive

1 Packages, Including:

pako@1.0.11

Creative Commons Attribution 3.0 Unported

Uncategorized

Not OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

Cannot

Must

1 Packages, Including:

spdx-exceptions@2.5.0

Creative Commons Zero v1.0 Universal

Public Domain

Not OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

Cannot

Must

1 Packages, Including:

spdx-license-ids@3.0.17

Direct Dependencies

6

All Dependencies CSV

ⓘ This is a list of excel4node 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
image-size	0.6.1	7.93 kB	MIT	prod
jszip	3.1.5	169.96 kB	(MIT OR GPL-3.0)	prod	2 1
lodash	4.17.4	303.39 kB	MIT	prod	1 3 2 1
mime	2.0.3	18.51 kB	MIT	prod
sloth-logger	1.0.3	125.87 kB	MIT	prod	4 9 5 3
xmlbuilder	9.0.4	18.57 kB	MIT	prod

Recent Versions