Home
Docs
GitHub
Pricing
Blog
Log In

Run Sandworm Audit for your App

Get started
Hold on, we're currently generating a fresh version of this report
Generated on Apr 10, 2024 via pnpm

firebase-functions 4.4.1

Firebase SDK for Cloud Functions
Package summary
Share
3
issues
1
critical severity
vulnerability
1
2
high severity
meta
2
9
licenses
197
MIT
33
Apache-2.0
19
ISC
29
other licenses
BSD-3-Clause
16
BSD-2-Clause
9
Python-2.0
1
Unlicense
1
+ 2 more
Package created
9 Mar 2017
Version published
12 Jun 2023
Maintainers
4
Total deps
278
Direct deps
7
License
MIT

Issues

3

1 critical severity issue

critical
Recommendation: Upgrade to version 7.2.5 or later
via: firebase-admin@11.11.1
Collapse
Expand

2 high severity issues

high
via: firebase-admin@11.11.1
via: firebase-admin@11.11.1 & others
Collapse
Expand

Licenses

MIT License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
Cannot
hold-liable
Must
include-copyright
include-license
197 Packages, Including:
@babel/helper-string-parser@7.24.1
@babel/helper-validator-identifier@7.22.20
@babel/parser@7.24.4
@babel/types@7.24.0
@fastify/busboy@1.2.1
@tootallnate/once@2.0.0
@types/body-parser@1.19.5
@types/connect@3.4.38
@types/cors@2.8.17
@types/express-serve-static-core@4.19.0
@types/express@4.17.21
@types/express@4.17.3
@types/glob@8.1.0
@types/http-errors@2.0.4
@types/jsonwebtoken@9.0.6
@types/linkify-it@3.0.5
@types/long@4.0.2
@types/markdown-it@12.2.3
@types/mdurl@1.0.5
@types/mime@1.3.5
@types/minimatch@5.1.2
@types/node@20.12.7
@types/qs@6.9.14
@types/range-parser@1.2.7
@types/rimraf@3.0.2
@types/send@0.17.4
@types/serve-static@1.15.7
abort-controller@3.0.0
accepts@1.3.8
acorn-jsx@5.3.2
acorn@8.11.3
agent-base@6.0.2
ansi-regex@5.0.1
ansi-styles@4.3.0
array-flatten@1.1.1
arrify@2.0.1
async-retry@1.3.3
balanced-match@1.0.2
base64-js@1.5.1
bignumber.js@9.1.2
bluebird@3.7.2
body-parser@1.20.2
brace-expansion@2.0.1
bytes@3.1.2
call-bind@1.0.7
catharsis@0.9.0
chalk@4.1.2
color-convert@2.0.1
color-name@1.1.4
compressible@2.0.18

Apache License 2.0

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
use-patent-claims
place-warranty
Cannot
hold-liable
use-trademark
Must
include-copyright
include-license
state-changes
include-notice
33 Packages, Including:
@firebase/app-types@0.9.0
@firebase/auth-interop-types@0.2.1
@firebase/component@0.6.4
@firebase/database-compat@0.3.4
@firebase/database-types@0.10.4
@firebase/database@0.14.4
@firebase/logger@0.4.0
@firebase/util@1.9.3
@google-cloud/firestore@6.8.0
@google-cloud/paginator@3.0.7
@google-cloud/projectify@3.0.0
@google-cloud/promisify@3.0.1
@google-cloud/storage@6.12.0
@grpc/grpc-js@1.8.21
@grpc/proto-loader@0.7.12
@jsdoc/salty@0.2.7
ecdsa-sig-formatter@1.0.11
eslint-visitor-keys@3.4.3
fast-text-encoding@1.0.6
faye-websocket@0.11.4
firebase-admin@11.11.1
gaxios@5.1.3
gcp-metadata@5.3.0
google-auth-library@8.9.0
google-gax@3.6.1
js2xmlparser@4.0.2
jsdoc@4.0.2
long@5.2.3
proto3-json-serializer@1.1.1
teeny-request@8.0.3
websocket-driver@0.7.4
websocket-extensions@0.1.4
xmlcreate@2.0.4

ISC License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
Cannot
hold-liable
Must
include-copyright
include-license
19 Packages, Including:
cliui@8.0.1
fs.realpath@1.0.0
get-caller-file@2.0.5
glob@8.1.0
graceful-fs@4.2.11
inflight@1.0.6
inherits@2.0.4
lru-cache@4.0.2
lru-cache@6.0.0
minimatch@5.1.6
once@1.4.0
pseudomap@1.0.2
semver@7.6.0
setprototypeof@1.2.0
wrappy@1.0.2
y18n@5.0.8
yallist@2.1.2
yallist@4.0.0
yargs-parser@21.1.1

BSD 3-Clause "New" or "Revised" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
use-trademark
hold-liable
Must
include-copyright
include-license
16 Packages, Including:
@protobufjs/aspromise@1.1.2
@protobufjs/base64@1.1.2
@protobufjs/codegen@2.0.4
@protobufjs/eventemitter@1.1.0
@protobufjs/fetch@1.1.0
@protobufjs/float@1.0.2
@protobufjs/inquire@1.1.0
@protobufjs/path@1.1.2
@protobufjs/pool@1.1.0
@protobufjs/utf8@1.1.0
buffer-equal-constant-time@1.0.1
protobufjs-cli@1.1.1
protobufjs@7.2.4
protobufjs@7.2.6
qs@6.11.0
source-map@0.6.1

BSD 2-Clause "Simplified" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
hold-liable
Must
include-copyright
include-license
9 Packages, Including:
entities@2.1.0
escodegen@1.14.3
espree@9.6.1
esprima@4.0.1
estraverse@4.3.0
estraverse@5.3.0
esutils@2.0.3
uglify-js@3.17.4
webidl-conversions@3.0.1

Python License 2.0

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
Cannot
use-trademark
hold-liable
Must
include-copyright
include-license
state-changes
1 Packages, Including:
argparse@2.0.1

The Unlicense

Public Domain
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
private-use
modify
Cannot
include-copyright
hold-liable
Must
1 Packages, Including:
markdown-it-anchor@8.6.7

(BSD-3-Clause OR GPL-2.0)

Permissive
1 Packages, Including:
node-forge@1.3.1

BSD Zero Clause License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
include-copyright
include-license
include-original
Cannot
hold-liable
Must
1 Packages, Including:
tslib@2.6.2
Disclaimer

This deed highlights only some of the key features and terms of the actual license. It is not a license and has no legal value. You should carefully review all of the terms and conditions of the actual license before using the licensed material.

Sandworm is not a law firm and does not provide legal services. Distributing, displaying, or linking to this deed or the license that it summarizes does not create a lawyer-client or any other relationship.

Direct Dependencies

7
All Dependencies CSV
β“˜ This is a list of firebase-functions 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.
NameVersionSizeLicenseTypeVulnerabilities
@types/cors2.8.172.06 kBMIT
prod
@types/express4.17.32.48 kBMIT
prod
cors2.8.56.03 kBMIT
prod
express4.19.2209.73 kBMIT
prod
firebase-admin11.11.1228.78 kBApache-2.0
prod peer
1
2
node-fetch2.7.043.6 kBMIT
prod optional
protobufjs7.2.6565.47 kBBSD-3-Clause
prod optional
1

Visualizations