Hold on, we're currently generating a fresh version of this report

Generated on Jan 25, 2024 via pnpm

frontail 4.2.1

streaming logs to the browser

Package summary

57

issues

4

licenses

Package created

4 Apr 2012

Version published

25 Jul 2018

Maintainers

1

Total deps

75

Direct deps

8

License

MIT

Issues

57

24 critical severity issues

socket.io-parser@2.3.1

Insufficient validation when decoding a Socket.IO packet

Recommendation: Upgrade to version 3.3.3 or later

via: socket.io@1.7.4

arraybuffer.slice@0.0.6

Package has no specified license

Recommendation: Check the package code and files for license information

via: socket.io@1.7.4

better-assert@1.0.2

Package has no specified license

Recommendation: Check the package code and files for license information

via: socket.io@1.7.4

blob@0.0.4

Package has no specified license

Recommendation: Check the package code and files for license information

via: socket.io@1.7.4

buffer-crc32@0.2.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: connect@2.11.0

bytes@0.2.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: connect@2.11.0

callsite@1.0.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: socket.io@1.7.4

commander@1.3.2

Package has no specified license

Recommendation: Check the package code and files for license information

via: commander@1.3.2

component-bind@1.0.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: socket.io@1.7.4

component-emitter@1.1.2

Package has no specified license

Recommendation: Check the package code and files for license information

via: socket.io@1.7.4

component-inherit@0.0.3

Package has no specified license

Recommendation: Check the package code and files for license information

via: socket.io@1.7.4

cookie-signature@1.0.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: connect@2.11.0

cookie@0.1.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: connect@2.11.0 & others

fresh@0.2.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: connect@2.11.0

indexof@0.0.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: socket.io@1.7.4

mime@1.2.11

Package has no specified license

Recommendation: Check the package code and files for license information

via: connect@2.11.0

ms@0.7.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: socket.io@1.7.4

object-component@0.0.3

Package has no specified license

Recommendation: Check the package code and files for license information

via: socket.io@1.7.4

options@0.0.6

Package has no specified license

Recommendation: Check the package code and files for license information

via: socket.io@1.7.4

pause@0.0.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: connect@2.11.0

qs@0.6.5

Package has no specified license

Recommendation: Check the package code and files for license information

via: connect@2.11.0

range-parser@0.0.4

Package has no specified license

Recommendation: Check the package code and files for license information

via: connect@2.11.0

send@0.1.4

Package has no specified license

Recommendation: Check the package code and files for license information

via: connect@2.11.0

uid2@0.0.3

Package has no specified license

Recommendation: Check the package code and files for license information

via: connect@2.11.0

14 high severity issues

qs@0.6.5

Prototype Pollution Protection Bypass in qs

Recommendation: Upgrade to version 6.0.4 or later

via: connect@2.11.0

engine.io@1.8.5

Resource exhaustion in engine.io

Recommendation: Upgrade to version 3.6.0 or later

via: socket.io@1.7.4

socket.io-parser@2.3.1

Resource exhaustion in socket.io-parser

Recommendation: Upgrade to version 3.3.2 or later

via: socket.io@1.7.4

parsejson@0.0.3

Regular Expression Denial of Service in parsejson

Recommendation: None

via: socket.io@1.7.4

qs@0.6.5

Denial-of-Service Extended Event Loop Blocking in qs

Recommendation: Upgrade to version 1.0.0 or later

via: connect@2.11.0

negotiator@0.3.0

Regular Expression Denial of Service in negotiator

Recommendation: Upgrade to version 0.6.1 or later

via: connect@2.11.0

qs@0.6.5

Denial-of-Service Memory Exhaustion in qs

Recommendation: Upgrade to version 1.0.0 or later

via: connect@2.11.0

fresh@0.2.0

Regular Expression Denial of Service in fresh

Recommendation: Upgrade to version 0.5.2 or later

via: connect@2.11.0

mime@1.2.11

mime Regular Expression Denial of Service when MIME lookup performed on untrusted user input

Recommendation: Upgrade to version 1.4.1 or later

via: connect@2.11.0

debug@2.3.3

debug Inefficient Regular Expression Complexity vulnerability

Recommendation: Upgrade to version 2.6.9 or later

via: socket.io@1.7.4

qs@0.6.5

qs vulnerable to Prototype Pollution

Recommendation: Upgrade to version 6.2.4 or later

via: connect@2.11.0

stream-counter@0.2.0

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: connect@2.11.0

connect@2.11.0

Deprecated package

via: connect@2.11.0

json3@3.3.2

Deprecated package

via: socket.io@1.7.4

17 moderate severity issues

cookie-signature@1.0.1

cookie-signature Timing Attack

Recommendation: Upgrade to version 1.0.4 or later

via: connect@2.11.0

engine.io@1.8.5

Uncaught exception in engine.io

Recommendation: Upgrade to version 3.6.1 or later

via: socket.io@1.7.4

connect@2.11.0

Cross-Site Scripting in connect

Recommendation: Upgrade to version 2.14.0 or later

via: connect@2.11.0

socket.io@1.7.4

CORS misconfiguration in socket.io

Recommendation: Upgrade to version 2.4.0 or later

via: socket.io@1.7.4

debug@2.3.3

Regular Expression Denial of Service in debug

Recommendation: Upgrade to version 2.6.9 or later

via: socket.io@1.7.4

ms@0.7.2

Vercel ms Inefficient Regular Expression Complexity vulnerability

Recommendation: Upgrade to version 2.0.0 or later

via: socket.io@1.7.4

send@0.1.4

Root Path Disclosure in send

Recommendation: Upgrade to version 0.11.1 or later

via: connect@2.11.0

bytes@0.2.1

Package has no specified source code repository

via: connect@2.11.0

callsite@1.0.0

Package has no specified source code repository

via: socket.io@1.7.4

cookie-signature@1.0.1

Package has no specified source code repository

via: connect@2.11.0

has-binary@0.1.7

Package has no specified source code repository

via: socket.io@1.7.4

indexof@0.0.1

Package has no specified source code repository

via: socket.io@1.7.4

methods@0.0.1

Package has no specified source code repository

via: connect@2.11.0

object-component@0.0.3

Package has no specified source code repository

via: socket.io@1.7.4

pause@0.0.1

Package has no specified source code repository

via: connect@2.11.0

range-parser@0.0.4

Package has no specified source code repository

via: connect@2.11.0

uid2@0.0.3

Package has no specified source code repository

via: connect@2.11.0

2 low severity issues

send@0.1.4

Directory Traversal in send

Recommendation: Upgrade to version 0.8.4 or later

via: connect@2.11.0

stream-counter@0.2.0

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: connect@2.11.0

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

50 Packages, Including:

CBuffer@0.1.4

accepts@1.3.3

after@0.8.2

backo2@1.0.2

base64-arraybuffer@0.1.5

base64id@1.0.0

byline@5.0.0

component-emitter@1.2.1

connect@2.11.0

cookie@0.3.1

core-util-is@1.0.3

daemon-fix41@1.1.2

debug@2.2.0

debug@2.3.3

debug@4.3.4

engine.io-client@1.8.6

engine.io-parser@1.3.2

engine.io@1.8.5

frontail@4.2.1

has-binary@0.1.7

has-cors@1.1.0

isarray@0.0.1

json3@3.3.2

keypress@0.1.0

methods@0.0.1

mime-db@1.52.0

mime-types@2.1.35

ms@0.7.2

ms@2.1.2

multiparty@2.2.0

negotiator@0.3.0

negotiator@0.6.1

object-assign@4.1.0

parsejson@0.0.3

parseqs@0.0.5

parseuri@0.0.5

raw-body@0.0.3

readable-stream@1.1.14

socket.io-adapter@0.5.0

socket.io-client@1.7.4

socket.io-parser@2.3.1

socket.io@1.7.4

string_decoder@0.10.31

to-array@0.1.4

ultron@1.0.2

untildify@3.0.3

ws@1.1.5

wtf-8@1.0.0

xmlhttprequest-ssl@1.6.3

yeast@0.1.2

N/A

N/A

23 Packages, Including:

arraybuffer.slice@0.0.6

better-assert@1.0.2

blob@0.0.4

buffer-crc32@0.2.1

bytes@0.2.1

callsite@1.0.0

commander@1.3.2

component-bind@1.0.0

component-emitter@1.1.2

component-inherit@0.0.3

cookie-signature@1.0.1

cookie@0.1.0

fresh@0.2.0

indexof@0.0.1

mime@1.2.11

ms@0.7.1

object-component@0.0.3

options@0.0.6

pause@0.0.1

qs@0.6.5

range-parser@0.0.4

send@0.1.4

uid2@0.0.3

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

1 Packages, Including:

inherits@2.0.4

BSD

Invalid

Not OSI Approved

1 Packages, Including:

stream-counter@0.2.0

Direct Dependencies

8

All Dependencies CSV

ⓘ This is a list of frontail 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
CBuffer	0.1.4	5.83 kB	MIT	prod
byline	5.0.0	3.6 kB	MIT	prod
commander	1.3.2	10.69 kB	UNKNOWN	prod	1
connect	2.11.0	75.54 kB	MIT	prod	11 9 9 2
cookie	0.1.0	3.07 kB	UNKNOWN	prod	1
daemon-fix41	1.1.2	3.65 kB	MIT	prod
socket.io	1.7.4	19.67 kB	MIT	prod	12 5 8
untildify	3.0.3	1.54 kB	MIT	prod

Recent Versions