Generated on Feb 28, 2024 via pnpm

Npm

Home

firebase-functions 3.18.0

Firebase SDK for Cloud Functions

firebase

functions

google

cloud

Package summary

issues

licenses

Package created

9 Mar 2017

Version published

11 Feb 2022

Maintainers

Total deps

239

Direct deps

License

MIT

Issues

1 critical severity issue

critical

protobufjs@6.11.3

protobufjs Prototype Pollution vulnerability

Recommendation: Upgrade to version 6.11.4 or later

via: firebase-admin@10.3.0

Collapse

Expand

3 high severity issues

high

protobufjs@6.11.3

Package uses postinstall script: "node scripts/postinstall"

via: firebase-admin@10.3.0

protobufjs@6.11.4

Package uses postinstall script: "node scripts/postinstall"

via: firebase-admin@10.3.0

protobufjs@7.2.6

Package uses postinstall script: "node scripts/postinstall"

via: firebase-admin@10.3.0

Collapse

Expand

4 moderate severity issues

moderate

jsonwebtoken@8.5.1

jsonwebtoken unrestricted key type could lead to legacy keys usage

Recommendation: Upgrade to version 9.0.0 or later

via: firebase-admin@10.3.0

jsonwebtoken@8.5.1

jsonwebtoken's insecure implementation of key retrieval function could lead to Forgeable Public/Private Tokens from RSA to HMAC

Recommendation: Upgrade to version 9.0.0 or later

via: firebase-admin@10.3.0

jsonwebtoken@8.5.1

jsonwebtoken vulnerable to signature validation bypass due to insecure default algorithm in jwt.verify()

Recommendation: Upgrade to version 9.0.0 or later

via: firebase-admin@10.3.0

@google-cloud/firestore@4.15.1

Logging of the firestore key within nodejs-firestore

Recommendation: Upgrade to version 6.1.0 or later

via: firebase-admin@10.3.0

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

169 Packages, Including:

@fastify/busboy@1.2.1

@panva/asn1.js@1.0.0

@tootallnate/once@2.0.0

@types/body-parser@1.19.5

@types/connect@3.4.38

@types/cors@2.8.17

@types/express-serve-static-core@4.17.43

@types/express@4.17.21

@types/express@4.17.3

@types/http-errors@2.0.4

@types/jsonwebtoken@8.5.9

@types/long@4.0.2

@types/mime@1.3.5

@types/mime@3.0.4

@types/node@20.11.22

@types/qs@6.9.12

@types/range-parser@1.2.7

@types/send@0.17.4

@types/serve-static@1.15.5

abort-controller@3.0.0

accepts@1.3.8

agent-base@6.0.2

ansi-regex@5.0.1

ansi-styles@4.3.0

array-flatten@1.1.1

arrify@2.0.1

async-retry@1.3.3

base64-js@1.5.1

bignumber.js@9.1.2

body-parser@1.20.1

bytes@3.1.2

call-bind@1.0.7

color-convert@2.0.1

color-name@1.1.4

compressible@2.0.18

content-disposition@0.5.4

content-type@1.0.5

cookie-signature@1.0.6

cookie@0.5.0

cors@2.8.5

crypto-random-string@2.0.0

debug@2.6.9

debug@4.3.4

define-data-property@1.1.4

depd@2.0.0

destroy@1.2.0

dot-prop@5.3.0

duplexify@4.1.2

ee-first@1.1.1

emoji-regex@8.0.0

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

31 Packages, Including:

@firebase/app-types@0.8.1

@firebase/app-types@0.9.0

@firebase/auth-interop-types@0.1.7

@firebase/component@0.5.21

@firebase/database-compat@0.2.10

@firebase/database-types@0.9.17

@firebase/database@0.13.10

@firebase/logger@0.3.4

@firebase/util@1.7.3

@google-cloud/firestore@4.15.1

@google-cloud/paginator@3.0.7

@google-cloud/projectify@2.1.1

@google-cloud/promisify@2.0.4

@google-cloud/storage@5.20.5

@grpc/grpc-js@1.6.12

@grpc/proto-loader@0.6.13

@grpc/proto-loader@0.7.10

ecdsa-sig-formatter@1.0.11

fast-text-encoding@1.0.6

faye-websocket@0.11.4

firebase-admin@10.3.0

gaxios@4.3.3

gcp-metadata@4.3.1

google-auth-library@7.14.1

google-gax@2.30.5

long@4.0.0

long@5.2.3

proto3-json-serializer@0.1.9

teeny-request@7.2.0

websocket-driver@0.7.4

websocket-extensions@0.1.4

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

20 Packages, Including:

cliui@7.0.4

cliui@8.0.1

get-caller-file@2.0.5

graceful-fs@4.2.11

inherits@2.0.4

lru-cache@4.0.2

lru-cache@6.0.0

once@1.4.0

pseudomap@1.0.2

semver@5.7.2

semver@6.3.1

setprototypeof@1.2.0

signal-exit@3.0.7

wrappy@1.0.2

write-file-atomic@3.0.3

y18n@5.0.8

yallist@2.1.2

yallist@4.0.0

yargs-parser@20.2.9

yargs-parser@21.1.1

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

15 Packages, Including:

@protobufjs/aspromise@1.1.2

@protobufjs/base64@1.1.2

@protobufjs/codegen@2.0.4

@protobufjs/eventemitter@1.1.0

@protobufjs/fetch@1.1.0

@protobufjs/float@1.0.2

@protobufjs/inquire@1.1.0

@protobufjs/path@1.1.2

@protobufjs/pool@1.1.0

@protobufjs/utf8@1.1.0

buffer-equal-constant-time@1.0.1

protobufjs@6.11.3

protobufjs@6.11.4

protobufjs@7.2.6

qs@6.11.0

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

2 Packages, Including:

configstore@5.0.1

webidl-conversions@3.0.1

(BSD-3-Clause OR GPL-2.0)

Permissive

1 Packages, Including:

node-forge@1.3.1

BSD Zero Clause License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

include-copyright

include-license

include-original

Cannot

hold-liable

Must

1 Packages, Including:

tslib@2.6.2

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of firebase-functions 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
@types/cors	2.8.17	2.06 kB	MIT	prod
@types/express	4.17.3	2.48 kB	MIT	prod
cors	2.8.5	6.03 kB	MIT	prod
express	4.18.2	54.5 kB	MIT	prod
firebase-admin	10.3.0	218.92 kB	Apache-2.0	prod peer	1 3 4
lodash	4.17.21	311.49 kB	MIT	prod

Tree

Treemap

Recent Versions

firebase-functions 3.18.0

Issues

1 critical severity issue

3 high severity issues

4 moderate severity issues

Licenses

MIT License

Apache License 2.0

ISC License

BSD 3-Clause "New" or "Revised" License

BSD 2-Clause "Simplified" License

(BSD-3-Clause OR GPL-2.0)

BSD Zero Clause License

Direct Dependencies

Visualizations

Recent Versions

Scan your app for security vulnerabilities and license issues

Log into your account

Create your account

firebase-functions 3.18.0

Issues

1 critical severity issue

3 high severity issues

4 moderate severity issues

Licenses

MIT License

Apache License 2.0

ISC License

BSD 3-Clause "New" or "Revised" License

BSD 2-Clause "Simplified" License

(BSD-3-Clause OR GPL-2.0)

BSD Zero Clause License

Direct Dependencies

Visualizations

Recent Versions

Scan your app for security vulnerabilities and license issues