Hold on, we're currently generating a fresh version of this report

Generated on May 18, 2024 via pnpm

express-status-monitor 0.1.5

Realtime Monitoring for Express-based Node applications

Package summary

25

issues

2

licenses

Package created

17 Aug 2016

Version published

5 Oct 2016

Maintainers

1

Total deps

48

Direct deps

3

License

MIT

Issues

25

12 critical severity issues

socket.io-parser@2.3.1

Insufficient validation when decoding a Socket.IO packet

Recommendation: Upgrade to version 3.3.3 or later

via: socket.io@1.7.4

arraybuffer.slice@0.0.6

Package has no specified license

Recommendation: Check the package code and files for license information

via: socket.io@1.7.4

better-assert@1.0.2

Package has no specified license

Recommendation: Check the package code and files for license information

via: socket.io@1.7.4

blob@0.0.4

Package has no specified license

Recommendation: Check the package code and files for license information

via: socket.io@1.7.4

callsite@1.0.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: socket.io@1.7.4

component-bind@1.0.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: socket.io@1.7.4

component-emitter@1.1.2

Package has no specified license

Recommendation: Check the package code and files for license information

via: socket.io@1.7.4

component-inherit@0.0.3

Package has no specified license

Recommendation: Check the package code and files for license information

via: socket.io@1.7.4

indexof@0.0.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: socket.io@1.7.4

ms@0.7.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: socket.io@1.7.4

object-component@0.0.3

Package has no specified license

Recommendation: Check the package code and files for license information

via: socket.io@1.7.4

options@0.0.6

Package has no specified license

Recommendation: Check the package code and files for license information

via: socket.io@1.7.4

5 high severity issues

engine.io@1.8.5

Resource exhaustion in engine.io

Recommendation: Upgrade to version 3.6.0 or later

via: socket.io@1.7.4

socket.io-parser@2.3.1

Resource exhaustion in socket.io-parser

Recommendation: Upgrade to version 3.3.2 or later

via: socket.io@1.7.4

parsejson@0.0.3

Regular Expression Denial of Service in parsejson

Recommendation: None

via: socket.io@1.7.4

debug@2.3.3

debug Inefficient Regular Expression Complexity vulnerability

Recommendation: Upgrade to version 2.6.9 or later

via: socket.io@1.7.4

json3@3.3.2

Deprecated package

via: socket.io@1.7.4

7 moderate severity issues

engine.io@1.8.5

Uncaught exception in engine.io

Recommendation: Upgrade to version 3.6.1 or later

via: socket.io@1.7.4

socket.io@1.7.4

CORS misconfiguration in socket.io

Recommendation: Upgrade to version 2.4.0 or later

via: socket.io@1.7.4

ms@0.7.2

Vercel ms Inefficient Regular Expression Complexity vulnerability

Recommendation: Upgrade to version 2.0.0 or later

via: socket.io@1.7.4

callsite@1.0.0

Package has no specified source code repository

via: socket.io@1.7.4

has-binary@0.1.7

Package has no specified source code repository

via: socket.io@1.7.4

indexof@0.0.1

Package has no specified source code repository

via: socket.io@1.7.4

object-component@0.0.3

Package has no specified source code repository

via: socket.io@1.7.4

1 low severity issue

debug@2.3.3

Regular Expression Denial of Service in debug

Recommendation: Upgrade to version 2.6.9 or later

via: socket.io@1.7.4

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

37 Packages, Including:

accepts@1.3.3

after@0.8.2

backo2@1.0.2

base64-arraybuffer@0.1.5

base64id@1.0.0

component-emitter@1.2.1

cookie@0.3.1

debug@2.2.0

debug@2.3.3

engine.io-client@1.8.6

engine.io-parser@1.3.2

engine.io@1.8.5

express-status-monitor@0.1.5

has-binary@0.1.7

has-cors@1.1.0

isarray@0.0.1

json3@3.3.2

mime-db@1.52.0

mime-types@2.1.35

ms@0.7.2

negotiator@0.6.1

object-assign@4.1.0

on-headers@1.0.2

parsejson@0.0.3

parseqs@0.0.5

parseuri@0.0.5

pidusage@1.2.0

socket.io-adapter@0.5.0

socket.io-client@1.7.4

socket.io-parser@2.3.1

socket.io@1.7.4

to-array@0.1.4

ultron@1.0.2

ws@1.1.5

wtf-8@1.0.0

xmlhttprequest-ssl@1.6.3

yeast@0.1.2

N/A

N/A

11 Packages, Including:

arraybuffer.slice@0.0.6

better-assert@1.0.2

blob@0.0.4

callsite@1.0.0

component-bind@1.0.0

component-emitter@1.1.2

component-inherit@0.0.3

indexof@0.0.1

ms@0.7.1

object-component@0.0.3

options@0.0.6

Direct Dependencies

3

All Dependencies CSV

ⓘ This is a list of express-status-monitor 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
on-headers	1.0.2	3.15 kB	MIT	prod
pidusage	1.2.0	9.69 kB	MIT	prod
socket.io	1.7.4	19.67 kB	MIT	prod	12 5 7 1

Recent Versions