Home
Docs
GitHub
Pricing
Blog
Log In

Run Sandworm Audit for your App

Get started
Hold on, we're currently generating a fresh version of this report
Generated on May 6, 2024 via pnpm

gatsby-plugin-gtag 1.0.13

Gatsby plugin to add Google Analytics gtag.js (replacement for analytics.js) to a site. Includes Outbound Links.
Package summary
Share
27
issues
1
critical severity
license
1
16
high severity
vulnerability
1
license
2
meta
13
7
moderate severity
vulnerability
1
license
1
meta
5
3
low severity
license
3
14
licenses
1120
MIT
73
ISC
31
Apache-2.0
67
other licenses
BSD-2-Clause
28
BSD-3-Clause
23
0BSD
4
(MIT OR CC0-1.0)
3
+ 7 more
Package created
31 Aug 2018
Version published
17 Feb 2020
Maintainers
1
Total deps
1291
Direct deps
1
License
MIT

Issues

27

1 critical severity issue

critical
Recommendation: Check the package code and files for license information
via: gatsby@5.13.4
Collapse
Expand

16 high severity issues

high
Recommendation: Upgrade to version 5.3.4 or later
via: gatsby@5.13.4
Recommendation: Read and validate the license terms
via: gatsby@5.13.4
Recommendation: Validate that the license expression complies with your license policy
via: gatsby@5.13.4
via: gatsby@5.13.4
via: gatsby@5.13.4
via: gatsby@5.13.4
via: gatsby@5.13.4
via: gatsby@5.13.4
via: gatsby@5.13.4
via: gatsby@5.13.4
via: gatsby@5.13.4
via: gatsby@5.13.4
via: gatsby@5.13.4
via: gatsby@5.13.4
via: gatsby@5.13.4
via: gatsby@5.13.4
Collapse
Expand

7 moderate severity issues

moderate
Recommendation: Upgrade to version 0.28.0 or later
via: gatsby@5.13.4
Recommendation: Validate that the package complies with your license policy
via: gatsby@5.13.4
via: gatsby@5.13.4
via: gatsby@5.13.4
via: gatsby@5.13.4
via: gatsby@5.13.4
via: gatsby@5.13.4
Collapse
Expand

3 low severity issues

low
Recommendation: Read and validate the license terms
via: gatsby@5.13.4
Recommendation: Read and validate the license terms
via: gatsby@5.13.4
Recommendation: Read and validate the license terms
via: gatsby@5.13.4
Collapse
Expand

Licenses

MIT License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
Cannot
hold-liable
Must
include-copyright
include-license
1120 Packages, Including:
@ardatan/relay-compiler@12.0.0
@babel/code-frame@7.12.11
@babel/code-frame@7.24.2
@babel/compat-data@7.24.4
@babel/core@7.24.5
@babel/eslint-parser@7.24.5
@babel/generator@7.24.5
@babel/helper-annotate-as-pure@7.22.5
@babel/helper-builder-binary-assignment-operator-visitor@7.22.15
@babel/helper-compilation-targets@7.23.6
@babel/helper-create-class-features-plugin@7.24.5
@babel/helper-create-regexp-features-plugin@7.22.15
@babel/helper-define-polyfill-provider@0.6.2
@babel/helper-environment-visitor@7.22.20
@babel/helper-function-name@7.23.0
@babel/helper-hoist-variables@7.22.5
@babel/helper-member-expression-to-functions@7.24.5
@babel/helper-module-imports@7.24.3
@babel/helper-module-transforms@7.24.5
@babel/helper-optimise-call-expression@7.22.5
@babel/helper-plugin-utils@7.24.5
@babel/helper-remap-async-to-generator@7.22.20
@babel/helper-replace-supers@7.24.1
@babel/helper-simple-access@7.24.5
@babel/helper-skip-transparent-expression-wrappers@7.22.5
@babel/helper-split-export-declaration@7.24.5
@babel/helper-string-parser@7.24.1
@babel/helper-validator-identifier@7.24.5
@babel/helper-validator-option@7.23.5
@babel/helper-wrap-function@7.24.5
@babel/helpers@7.24.5
@babel/highlight@7.24.5
@babel/parser@7.24.5
@babel/plugin-bugfix-firefox-class-in-computed-class-key@7.24.5
@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression@7.24.1
@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining@7.24.1
@babel/plugin-bugfix-v8-static-class-fields-redefine-readonly@7.24.1
@babel/plugin-proposal-class-properties@7.18.6
@babel/plugin-proposal-nullish-coalescing-operator@7.18.6
@babel/plugin-proposal-numeric-separator@7.18.6
@babel/plugin-proposal-object-rest-spread@7.20.7
@babel/plugin-proposal-optional-chaining@7.21.0
@babel/plugin-proposal-private-property-in-object@7.21.0-placeholder-for-preset-env.2
@babel/plugin-syntax-async-generators@7.8.4
@babel/plugin-syntax-class-properties@7.12.13
@babel/plugin-syntax-class-static-block@7.14.5
@babel/plugin-syntax-dynamic-import@7.8.3
@babel/plugin-syntax-export-namespace-from@7.8.3
@babel/plugin-syntax-flow@7.24.1
@babel/plugin-syntax-import-assertions@7.24.1

ISC License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
Cannot
hold-liable
Must
include-copyright
include-license
73 Packages, Including:
@trysound/sax@0.2.0
ansi-align@3.0.1
anymatch@3.1.3
at-least-node@1.0.0
boolbase@1.0.0
chownr@1.1.4
cli-width@3.0.0
cliui@6.0.0
css-declaration-sorter@6.4.1
d@1.0.2
electron-to-chromium@1.4.757
es5-ext@0.10.64
es6-symbol@3.1.4
es6-weak-map@2.0.3
esniff@2.0.1
ext@1.7.0
fastq@1.17.1
flatted@3.3.1
fs-exists-cached@1.0.0
fs.realpath@1.0.0
get-caller-file@2.0.5
glob-parent@5.1.2
glob@7.2.3
graceful-fs@4.2.10
graceful-fs@4.2.11
hosted-git-info@3.0.8
icss-utils@5.1.0
inflight@1.0.6
inherits@2.0.4
ini@1.3.8
isexe@2.0.0
lru-cache@4.0.0
lru-cache@5.1.1
lru-cache@6.0.0
memoizee@0.4.15
minimatch@3.1.2
mute-stream@0.0.8
next-tick@1.1.0
once@1.4.0
physical-cpu-count@2.0.0
picocolors@1.0.0
postcss-modules-extract-imports@3.1.0
postcss-modules-scope@3.2.0
postcss-modules-values@4.0.0
proto-list@1.2.4
pseudomap@1.0.2
read@1.0.7
remove-trailing-separator@1.1.0
require-main-filename@2.0.0
rimraf@2.7.1

Apache License 2.0

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
use-patent-claims
place-warranty
Cannot
hold-liable
use-trademark
Must
include-copyright
include-license
state-changes
include-notice
31 Packages, Including:
@ampproject/remapping@2.3.0
@humanwhocodes/config-array@0.5.0
@swc/helpers@0.4.36
@webassemblyjs/leb128@1.11.6
@xtuc/long@4.2.2
ansi-html-community@0.0.8
aria-query@5.3.0
axobject-query@3.2.1
b4a@1.6.6
bare-events@2.2.2
bare-fs@2.3.0
bare-os@2.3.0
bare-path@2.1.2
bare-stream@1.0.0
bser@2.1.1
detect-libc@1.0.3
detect-libc@2.0.3
doctrine@2.1.0
doctrine@3.0.0
eslint-visitor-keys@1.3.0
eslint-visitor-keys@2.1.0
eslint-visitor-keys@3.4.3
fb-watchman@2.0.2
human-signals@2.1.0
human-signals@5.0.0
opentracing@0.14.7
rxjs@6.6.7
sharp@0.32.6
true-case-path@2.2.1
tunnel-agent@0.6.0
typescript@5.4.5

BSD 2-Clause "Simplified" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
hold-liable
Must
include-copyright
include-license
28 Packages, Including:
@typescript-eslint/parser@5.62.0
@typescript-eslint/typescript-estree@5.62.0
configstore@5.0.1
css-select@4.3.0
css-what@6.1.0
damerau-levenshtein@1.0.8
domelementtype@2.3.0
domhandler@4.3.1
domutils@2.8.0
dotenv-expand@5.1.0
dotenv@7.0.0
dotenv@8.6.0
entities@2.2.0
eslint-scope@5.1.1
espree@7.3.1
esprima@4.0.1
esrecurse@4.3.0
estraverse@4.3.0
estraverse@5.3.0
esutils@2.0.3
glob-to-regexp@0.4.1
http-cache-semantics@4.1.1
nth-check@2.1.1
regjsparser@0.9.1
terser@5.31.0
uri-js@4.4.1
webidl-conversions@3.0.1
yurnalist@2.1.0

BSD 3-Clause "New" or "Revised" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
use-trademark
hold-liable
Must
include-copyright
include-license
23 Packages, Including:
@hapi/hoek@9.3.0
@hapi/topo@5.1.0
@humanwhocodes/object-schema@1.2.1
@sideway/address@4.1.5
@sideway/formula@3.0.1
@sideway/pinpoint@2.0.0
@xtuc/ieee754@1.2.0
eslint-plugin-flowtype@5.10.0
esquery@1.5.0
filesize@8.0.7
flat@5.0.2
ieee754@1.2.1
immutable@3.7.6
joi@17.13.1
qs@6.11.0
serialize-javascript@5.0.1
serialize-javascript@6.0.2
signedsource@1.0.0
source-map-js@1.2.0
source-map@0.6.1
source-map@0.7.4
sprintf-js@1.0.3
table@6.8.2

BSD Zero Clause License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
include-copyright
include-license
include-original
Cannot
hold-liable
Must
4 Packages, Including:
password-prompt@1.1.3
tslib@1.14.1
tslib@2.4.1
tslib@2.6.2

(MIT OR CC0-1.0)

Public Domain
3 Packages, Including:
type-fest@0.20.2
type-fest@0.21.3
type-fest@0.8.1

The Unlicense

Public Domain
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
private-use
modify
Cannot
include-copyright
hold-liable
Must
2 Packages, Including:
fs-monkey@1.0.6
memfs@3.5.3

Creative Commons Zero v1.0 Universal

Public Domain
Not OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
Cannot
Must
2 Packages, Including:
language-subtag-registry@0.3.22
mdn-data@2.0.14

Mozilla Public License 2.0

Weakly Protective
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
place-warranty
use-patent-claims
Cannot
use-trademark
hold-liable
Must
include-copyright
include-license
disclose-source
include-original
1 Packages, Including:
axe-core@4.7.0

Creative Commons Attribution 4.0 International

Uncategorized
Not OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
Cannot
Must
1 Packages, Including:
caniuse-lite@1.0.30001616

(MIT OR WTFPL)

Permissive
1 Packages, Including:
expand-template@2.0.3

N/A

N/A
1 Packages, Including:
linkfs@2.1.0

(BSD-2-Clause OR MIT OR Apache-2.0)

Expression
1 Packages, Including:
rc@1.2.8
Disclaimer

This deed highlights only some of the key features and terms of the actual license. It is not a license and has no legal value. You should carefully review all of the terms and conditions of the actual license before using the licensed material.

Sandworm is not a law firm and does not provide legal services. Distributing, displaying, or linking to this deed or the license that it summarizes does not create a lawyer-client or any other relationship.

Direct Dependencies

1
All Dependencies CSV
β“˜ This is a list of gatsby-plugin-gtag 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.
NameVersionSizeLicenseTypeVulnerabilities
gatsby5.13.46.67 MBMIT
prod peer
1
16
7
3

Visualizations