Hold on, we're currently generating a fresh version of this report

Generated on Mar 2, 2024 via pnpm

fuge-runner 2.0.1

[![npm version][npm-badge]][npm-url] [![npm downloads][npm-downloads-badge]][npm-url] [![Build Status][travis-badge]][travis-url]

Package summary

25

issues

8

licenses

Package created

16 Oct 2015

Version published

30 Jun 2017

Maintainers

5

Total deps

188

Direct deps

14

License

MIT

Issues

25

4 critical severity issues

parse-url@1.3.11

Server-Side Request Forgery in parse-url

Recommendation: Upgrade to version 6.0.1 or later

via: parse-url@1.3.11

parse-url@1.3.11

Server-Side Request Forgery (SSRF) in GitHub repository ionicabizau/parse-url

Recommendation: Upgrade to version 8.1.0 or later

via: parse-url@1.3.11

lodash@3.10.1

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.12 or later

via: lodash@3.10.1

map-stream@0.1.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: ps-tree@1.2.0

13 high severity issues

parse-url@1.3.11

Hostname confusion in parse-url

Recommendation: Upgrade to version 6.0.1 or later

via: parse-url@1.3.11

lodash@3.10.1

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.11 or later

via: lodash@3.10.1

glob-parent@2.0.0

glob-parent vulnerable to Regular Expression Denial of Service in enclosure regex

Recommendation: Upgrade to version 5.1.2 or later

via: chokidar@1.7.0 & others

lodash@3.10.1

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.19 or later

via: lodash@3.10.1

lodash@3.10.1

Command Injection in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: lodash@3.10.1

pause-stream@0.0.11

Package uses an invalid SPDX license ("(MIT OR Apache2)")

Recommendation: Validate that the package complies with your license policy

via: ps-tree@1.2.0

chokidar@1.7.0

Deprecated package

via: chokidar@1.7.0 & others

fsevents@1.2.13

Deprecated package

via: chokidar@1.7.0 & others

fsevents@1.2.13

Package uses install script: "node install.js"

via: chokidar@1.7.0 & others

resolve-url@0.2.1

Deprecated package

via: chokidar@1.7.0 & others

source-map-resolve@0.5.3

Deprecated package

via: chokidar@1.7.0 & others

source-map-url@0.4.1

Deprecated package

via: chokidar@1.7.0 & others

urix@0.1.0

Deprecated package

via: chokidar@1.7.0 & others

5 moderate severity issues

lodash@3.10.1

Regular Expression Denial of Service (ReDoS) in lodash

Recommendation: Upgrade to version 4.17.11 or later

via: lodash@3.10.1

parse-url@1.3.11

Cross site scripting in parse-url

Recommendation: Upgrade to version 6.0.1 or later

via: parse-url@1.3.11

parse-url@1.3.11

Cross site scripting in parse-url

Recommendation: Upgrade to version 6.0.1 or later

via: parse-url@1.3.11

parse-url@1.3.11

parse-url parses http URLs incorrectly, making it vulnerable to host name spoofing

Recommendation: Upgrade to version 8.1.0 or later

via: parse-url@1.3.11

lodash@3.10.1

Regular Expression Denial of Service (ReDoS) in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: lodash@3.10.1

3 low severity issues

braces@1.8.5

Regular Expression Denial of Service in braces

Recommendation: Upgrade to version 2.3.1 or later

via: chokidar@1.7.0 & others

lodash@3.10.1

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.5 or later

via: lodash@3.10.1

braces@1.8.5

Regular Expression Denial of Service (ReDoS) in braces

Recommendation: Upgrade to version 2.3.1 or later

via: chokidar@1.7.0 & others

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

169 Packages, Including:

ansi-regex@2.1.1

ansi-styles@2.2.1

arr-diff@2.0.0

arr-diff@4.0.0

arr-flatten@1.1.0

arr-union@3.1.0

array-unique@0.2.1

array-unique@0.3.2

assign-symbols@1.0.0

async-each@1.0.6

async@0.9.2

base@0.11.2

binary-extensions@1.13.1

bindings@1.5.0

bl@1.2.3

braces@1.8.5

braces@2.3.2

buffer-alloc-unsafe@1.1.0

buffer-alloc@1.2.0

buffer-fill@1.0.0

buffer-from@1.1.2

cache-base@1.0.1

chalk@1.1.3

chokidar-child@0.1.3

chokidar@1.7.0

class-utils@0.3.6

collection-visit@1.0.0

component-emitter@1.3.1

concat-stream@1.6.2

copy-descriptor@0.1.1

core-util-is@1.0.3

debug@2.6.9

debug@3.2.7

decode-uri-component@0.2.2

define-property@0.2.5

define-property@1.0.0

define-property@2.0.2

duplexer@0.1.2

end-of-stream@1.4.4

escape-string-regexp@1.0.5

event-stream@3.3.4

expand-brackets@0.1.5

expand-brackets@2.1.4

expand-range@1.8.2

extend-shallow@2.0.1

extend-shallow@3.0.2

extglob@0.3.2

extglob@2.0.4

file-uri-to-path@1.0.0

filename-regex@2.0.1

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

11 Packages, Including:

anymatch@1.3.2

chownr@1.1.4

glob-parent@2.0.0

graceful-fs@4.2.11

inherits@2.0.4

once@1.4.0

remove-trailing-separator@1.1.0

simple-grep@0.0.1

split-ca@1.0.1

split2@2.2.0

wrappy@1.0.2

(MIT OR Apache-2.0)

Permissive

2 Packages, Including:

JSONStream@1.3.2

atob@2.1.2

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

2 Packages, Including:

docker-modem@1.0.9

dockerode@2.5.8

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

1 Packages, Including:

dotenv@2.0.0

N/A

N/A

1 Packages, Including:

map-stream@0.1.0

(MIT OR Apache2)

Invalid

1 Packages, Including:

pause-stream@0.0.11

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

1 Packages, Including:

source-map@0.5.7

Direct Dependencies

14

All Dependencies CSV

ⓘ This is a list of fuge-runner 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
async	0.9.2	20.46 kB	MIT	prod
chalk	1.1.3	5.11 kB	MIT	prod
chokidar-child	0.1.3	2.75 kB	MIT	prod	8 2
chokidar	1.7.0	22.33 kB	MIT	prod	8 2
dockerode	2.5.8	32.13 kB	Apache-2.0	prod
dotenv	2.0.0	10.76 kB	BSD-2-Clause	prod
is-git-url	0.2.3	2.12 kB	MIT	prod
lodash	3.10.1	169.48 kB	MIT	prod	1 3 2 1
parse-github-url	0.3.2	3.78 kB	MIT	prod
parse-url	1.3.11	4.63 kB	MIT	prod	2 1 3
ps-tree	1.2.0	3.94 kB	MIT	prod	1 1
pump	1.0.3	2.92 kB	MIT	prod
simple-grep	0.0.1	953 B	ISC	prod
split2	2.2.0	3.84 kB	ISC	prod

Recent Versions