Home
Docs
GitHub
Pricing
Blog
Log In

Run Sandworm Audit for your App

Get started
Hold on, we're currently generating a fresh version of this report
Generated on May 25, 2024 via pnpm

frontail 4.6.0

streaming logs to the browser
Package summary
Share
13
issues
4
critical severity
license
4
4
high severity
meta
4
4
moderate severity
vulnerability
2
meta
2
1
low severity
vulnerability
1
8
licenses
115
MIT
7
ISC
6
Apache-2.0
11
other licenses
N/A
4
BSD-3-Clause
3
BSD-2-Clause
2
(AFL-2.1 OR BSD-3-Clause)
1
+ 1 more
Package created
4 Apr 2012
Version published
3 Jul 2019
Maintainers
1
Total deps
139
Direct deps
16
License
MIT

Issues

13

4 critical severity issues

critical
Recommendation: Check the package code and files for license information
via: commander@1.3.2
Recommendation: Check the package code and files for license information
via: socket.io@2.5.0
Recommendation: Check the package code and files for license information
via: socket.io@2.5.0
Recommendation: Check the package code and files for license information
via: socket.io@2.5.0
Collapse
Expand

4 high severity issues

high
via: socket.io@2.5.0
via: universal-analytics@0.4.23
via: universal-analytics@0.4.23
via: universal-analytics@0.4.23 & others
Collapse
Expand

4 moderate severity issues

moderate
Recommendation: Upgrade to version 4.1.3 or later
via: universal-analytics@0.4.23
Recommendation: None
via: universal-analytics@0.4.23
via: socket.io@2.5.0
via: socket.io@2.5.0
Collapse
Expand

1 low severity issue

low
Recommendation: Upgrade to version 4.3.1 or later
via: socket.io@2.5.0
Collapse
Expand

Licenses

MIT License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
Cannot
hold-liable
Must
include-copyright
include-license
115 Packages, Including:
CBuffer@0.1.5
accepts@1.3.8
after@0.8.2
ajv@6.12.6
arraybuffer.slice@0.0.7
asn1@0.2.6
assert-plus@1.0.0
asynckit@0.4.0
aws4@1.13.0
backo2@1.0.2
base64-arraybuffer@0.1.4
base64id@2.0.0
basic-auth-connect@1.0.0
blob@0.0.5
byline@5.0.0
combined-stream@1.0.8
component-emitter@1.2.1
component-emitter@1.3.1
connect@3.6.6
cookie-parser@1.4.6
cookie-signature@1.0.6
cookie@0.1.5
cookie@0.3.1
cookie@0.4.1
cookie@0.4.2
core-util-is@1.0.2
crc@3.4.4
crypto-random-string@1.0.0
daemon-fix41@1.1.2
dashdash@1.14.1
debug@2.6.9
debug@3.1.0
debug@4.1.1
debug@4.3.4
delayed-stream@1.0.0
depd@1.1.2
destroy@1.0.4
dot-prop@4.2.1
ecc-jsbn@0.1.2
ee-first@1.1.1
encodeurl@1.0.2
engine.io-client@3.5.3
engine.io-parser@2.2.1
engine.io@3.6.1
escape-html@1.0.3
etag@1.8.1
express-session@1.15.6
extend@3.0.2
extsprintf@1.3.0
fast-deep-equal@3.1.3

ISC License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
Cannot
hold-liable
Must
include-copyright
include-license
7 Packages, Including:
graceful-fs@4.2.11
har-schema@2.0.0
inherits@2.0.3
json-stringify-safe@5.0.1
setprototypeof@1.1.0
signal-exit@3.0.7
write-file-atomic@2.4.3

Apache License 2.0

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
use-patent-claims
place-warranty
Cannot
hold-liable
use-trademark
Must
include-copyright
include-license
state-changes
include-notice
6 Packages, Including:
aws-sign2@0.7.0
caseless@0.12.0
forever-agent@0.6.1
oauth-sign@0.9.0
request@2.88.2
tunnel-agent@0.6.0

N/A

N/A
4 Packages, Including:
commander@1.3.2
component-bind@1.0.0
component-inherit@0.0.3
indexof@0.0.1

BSD 3-Clause "New" or "Revised" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
use-trademark
hold-liable
Must
include-copyright
include-license
3 Packages, Including:
bcrypt-pbkdf@1.0.2
qs@6.5.3
tough-cookie@2.5.0

BSD 2-Clause "Simplified" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
hold-liable
Must
include-copyright
include-license
2 Packages, Including:
configstore@4.0.0
uri-js@4.4.1

(AFL-2.1 OR BSD-3-Clause)

Permissive
1 Packages, Including:
json-schema@0.4.0

The Unlicense

Public Domain
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
private-use
modify
Cannot
include-copyright
hold-liable
Must
1 Packages, Including:
tweetnacl@0.14.5
Disclaimer

This deed highlights only some of the key features and terms of the actual license. It is not a license and has no legal value. You should carefully review all of the terms and conditions of the actual license before using the licensed material.

Sandworm is not a law firm and does not provide legal services. Distributing, displaying, or linking to this deed or the license that it summarizes does not create a lawyer-client or any other relationship.

Direct Dependencies

16
All Dependencies CSV
β“˜ This is a list of frontail 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.
NameVersionSizeLicenseTypeVulnerabilities
CBuffer0.1.58.21 kBMIT
prod
basic-auth-connect1.0.02.77 kBMIT
prod
byline5.0.03.6 kBMIT
prod
commander1.3.210.69 kBUNKNOWN
prod
1
configstore4.0.03.14 kBBSD-2-Clause
prod
connect3.6.626.75 kBMIT
prod
cookie-parser1.4.64.2 kBMIT
prod
cookie0.1.53.66 kBMIT
prod
daemon-fix411.1.23.65 kBMIT
prod
express-session1.15.620.99 kBMIT
prod
is-docker1.1.01.53 kBMIT
prod
serve-static1.13.28.2 kBMIT
prod
socket.io2.5.014.13 kBMIT
prod
3
1
2
1
universal-analytics0.4.2325.02 kBMIT
prod
3
2
untildify3.0.31.54 kBMIT
prod
uuid3.3.311.83 kBMIT
prod
1

Visualizations