Home
Docs
GitHub
Pricing
Blog
Log In

Run Sandworm Audit for your App

Get started
Hold on, we're currently generating a fresh version of this report
Generated on May 9, 2024 via pnpm

express-pdf 1.2.2

Express serving pdf file
Package summary
Share
10
issues
1
critical severity
license
1
7
high severity
vulnerability
1
meta
6
2
moderate severity
vulnerability
2
8
licenses
120
MIT
8
Apache-2.0
7
ISC
9
other licenses
BSD-3-Clause
4
BSD-2-Clause
2
(AFL-2.1 OR BSD-3-Clause)
1
N/A
1
+ 1 more
Package created
21 Apr 2016
Version published
23 Apr 2016
Maintainers
1
Total deps
144
Direct deps
4
License
MIT

Issues

10

1 critical severity issue

critical
Recommendation: Check the package code and files for license information
via: html-pdf@2.2.0
Collapse
Expand

7 high severity issues

high
Recommendation: Upgrade to version 3.0.1 or later
via: html-pdf@2.2.0
via: html-pdf@2.2.0
via: html-pdf@2.2.0
via: html-pdf@2.2.0
via: html-pdf@2.2.0
via: html-pdf@2.2.0
via: html-pdf@2.2.0
Collapse
Expand

2 moderate severity issues

moderate
Recommendation: Upgrade to version 4.1.3 or later
via: html-pdf@2.2.0
Recommendation: None
via: html-pdf@2.2.0
Collapse
Expand

Licenses

MIT License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
Cannot
hold-liable
Must
include-copyright
include-license
120 Packages, Including:
accepts@1.3.8
ajv@6.12.6
array-flatten@1.1.1
asn1@0.2.6
assert-plus@1.0.0
asynckit@0.4.0
aws4@1.12.0
body-parser@1.20.2
buffer-crc32@0.2.13
buffer-from@1.1.2
bytes@3.1.2
call-bind@1.0.7
combined-stream@1.0.8
concat-stream@1.6.2
content-disposition@0.5.4
content-type@1.0.5
cookie-signature@1.0.6
cookie@0.6.0
core-util-is@1.0.2
core-util-is@1.0.3
dashdash@1.14.1
debug@2.6.9
define-data-property@1.1.4
delayed-stream@1.0.0
depd@2.0.0
destroy@1.2.0
ecc-jsbn@0.1.2
ee-first@1.1.1
encodeurl@1.0.2
es-define-property@1.0.0
es-errors@1.3.0
es6-promise@3.3.1
es6-promise@4.2.8
escape-html@1.0.3
etag@1.8.1
express-pdf@1.2.2
express@4.19.2
extend@3.0.2
extsprintf@1.3.0
fast-deep-equal@3.1.3
fast-json-stable-stringify@2.1.0
fd-slicer@1.1.0
finalhandler@1.2.0
form-data@2.3.3
forwarded@0.2.0
fresh@0.5.2
fs-extra@1.0.0
function-bind@1.1.2
get-intrinsic@1.2.4
getpass@0.1.7

Apache License 2.0

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
use-patent-claims
place-warranty
Cannot
hold-liable
use-trademark
Must
include-copyright
include-license
state-changes
include-notice
8 Packages, Including:
aws-sign2@0.7.0
caseless@0.12.0
forever-agent@0.6.1
kew@0.7.0
oauth-sign@0.9.0
phantomjs-prebuilt@2.1.16
request@2.88.2
tunnel-agent@0.6.0

ISC License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
Cannot
hold-liable
Must
include-copyright
include-license
7 Packages, Including:
graceful-fs@4.2.11
har-schema@2.0.0
inherits@2.0.4
isexe@2.0.0
json-stringify-safe@5.0.1
setprototypeof@1.2.0
which@1.3.1

BSD 3-Clause "New" or "Revised" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
use-trademark
hold-liable
Must
include-copyright
include-license
4 Packages, Including:
bcrypt-pbkdf@1.0.2
qs@6.11.0
qs@6.5.3
tough-cookie@2.5.0

BSD 2-Clause "Simplified" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
hold-liable
Must
include-copyright
include-license
2 Packages, Including:
extract-zip@1.7.0
uri-js@4.4.1

(AFL-2.1 OR BSD-3-Clause)

Permissive
1 Packages, Including:
json-schema@0.4.0

N/A

N/A
1 Packages, Including:
progress@1.1.8

The Unlicense

Public Domain
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
private-use
modify
Cannot
include-copyright
hold-liable
Must
1 Packages, Including:
tweetnacl@0.14.5
Disclaimer

This deed highlights only some of the key features and terms of the actual license. It is not a license and has no legal value. You should carefully review all of the terms and conditions of the actual license before using the licensed material.

Sandworm is not a law firm and does not provide legal services. Distributing, displaying, or linking to this deed or the license that it summarizes does not create a lawyer-client or any other relationship.

Direct Dependencies

4
All Dependencies CSV
β“˜ This is a list of express-pdf 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.
NameVersionSizeLicenseTypeVulnerabilities
es6-promise3.3.142.52 kBMIT
prod
express4.19.2209.73 kBMIT
prod peer
html-pdf2.2.071.37 kBMIT
prod
1
7
2
var-clean1.0.12.93 kBMIT
prod

Visualizations