Home
Docs
GitHub
Pricing
Blog
Log In

Run Sandworm Audit for your App

Get started
Hold on, we're currently generating a fresh version of this report
Generated on Feb 15, 2024 via pnpm

gatsby-plugin-netlify 2.11.1

A Gatsby plugin which generates a _headers file for netlify
Package summary
Share
85
issues
5
critical severity
vulnerability
3
license
2
49
high severity
vulnerability
12
license
5
meta
32
22
moderate severity
vulnerability
12
license
1
meta
9
9
low severity
vulnerability
2
license
7
19
licenses
1524
MIT
116
ISC
37
BSD-2-Clause
76
other licenses
BSD-3-Clause
31
Apache-2.0
19
0BSD
6
(MIT OR CC0-1.0)
4
+ 12 more
Package created
20 Sep 2017
Version published
18 Mar 2021
Maintainers
19
Total deps
1753
Direct deps
6
License
MIT

Issues

85

5 critical severity issues

critical
Recommendation: Upgrade to version 8.1.0 or later
via: gatsby@2.32.13
Recommendation: Upgrade to version 1.1.1 or later
via: gatsby@2.32.13
Recommendation: Upgrade to version 1.7.3 or later
via: gatsby@2.32.13
Recommendation: Check the package code and files for license information
via: gatsby@2.32.13
Recommendation: Check the package code and files for license information
via: gatsby@2.32.13
Collapse
Expand

49 high severity issues

high
Recommendation: Upgrade to version 5.0.0 or later
via: gatsby@2.32.13
Recommendation: Upgrade to version 0.0.3 or later
via: gatsby@2.32.13
Recommendation: Upgrade to version 4.1.1 or later
via: gatsby@2.32.13
Recommendation: Upgrade to version 4.2.3 or later
via: gatsby@2.32.13
Recommendation: Upgrade to version 0.0.8 or later
via: gatsby@2.32.13
Recommendation: Upgrade to version 5.1.2 or later
via: gatsby@2.32.13 & others
Recommendation: Upgrade to version 1.3.0 or later
via: gatsby@2.32.13
Recommendation: Upgrade to version 1.3.0 or later
via: gatsby@2.32.13
Recommendation: Upgrade to version 2.6.7 or later
via: gatsby@2.32.13
Recommendation: Upgrade to version 2.0.1 or later
via: gatsby@2.32.13
Recommendation: Upgrade to version 3.0.5 or later
via: gatsby@2.32.13
Recommendation: Validate that the package complies with your license policy
via: gatsby@2.32.13
Recommendation: Validate that the package complies with your license policy
via: gatsby@2.32.13
Recommendation: Read and validate the license terms
via: gatsby@2.32.13 & others
Recommendation: Validate that the package complies with your license policy
via: gatsby@2.32.13
Recommendation: Validate that the license expression complies with your license policy
via: gatsby@2.32.13
via: gatsby@2.32.13
via: gatsby@2.32.13
via: gatsby@2.32.13
via: gatsby@2.32.13
via: gatsby@2.32.13
via: gatsby@2.32.13
via: gatsby@2.32.13
via: gatsby@2.32.13 & others
via: gatsby@2.32.13
via: gatsby@2.32.13
via: gatsby@2.32.13
via: gatsby@2.32.13
via: gatsby@2.32.13 & others
via: gatsby@2.32.13 & others
via: gatsby@2.32.13
via: gatsby@2.32.13
via: gatsby@2.32.13
via: gatsby@2.32.13
via: gatsby@2.32.13
via: gatsby@2.32.13
via: gatsby@2.32.13
via: gatsby@2.32.13
via: gatsby@2.32.13 & others
via: gatsby@2.32.13 & others
via: gatsby@2.32.13 & others
via: gatsby@2.32.13
via: gatsby@2.32.13
via: gatsby@2.32.13
via: gatsby@2.32.13
via: gatsby@2.32.13
via: gatsby@2.32.13 & others
via: gatsby@2.32.13
Collapse
Expand

22 moderate severity issues

moderate
Recommendation: Upgrade to version 3.1.5 or later
via: gatsby@2.32.13
Recommendation: Upgrade to version 1.3.0 or later
via: gatsby@2.32.13
Recommendation: Upgrade to version 11.8.5 or later
via: gatsby@2.32.13
Recommendation: Upgrade to version 11.0.4 or later
via: gatsby@2.32.13
Recommendation: Upgrade to version 8.1.0 or later
via: gatsby@2.32.13
Recommendation: Upgrade to version 6.2.1 or later
via: gatsby@2.32.13
Recommendation: Upgrade to version 7.4.6 or later
via: gatsby@2.32.13
Recommendation: Upgrade to version 7.0.36 or later
via: gatsby@2.32.13
Recommendation: Upgrade to version 1.0.0 or later
via: gatsby@2.32.13
Recommendation: Upgrade to version 8.4.31 or later
via: gatsby@2.32.13
Recommendation: Upgrade to version 4.25.7 or later
via: gatsby@2.32.13
Recommendation: Upgrade to version 1.6.0 or later
via: gatsby@2.32.13
Recommendation: Validate that the package complies with your license policy
via: gatsby@2.32.13
via: gatsby@2.32.13 & others
via: gatsby@2.32.13 & others
via: gatsby@2.32.13 & others
via: gatsby@2.32.13 & others
via: gatsby@2.32.13
via: gatsby@2.32.13
via: gatsby@2.32.13
via: gatsby@2.32.13
via: gatsby@2.32.13
Collapse
Expand

9 low severity issues

low
Recommendation: Upgrade to version 1.0.0 or later
via: gatsby@2.32.13
Recommendation: Upgrade to version 1.0.0 or later
via: gatsby@2.32.13
Recommendation: Read and validate the license terms
via: gatsby@2.32.13
Recommendation: Read and validate the license terms
via: gatsby@2.32.13
Recommendation: Read and validate the license terms
via: gatsby@2.32.13
Recommendation: Read and validate the license terms
via: gatsby@2.32.13
Recommendation: Read and validate the license terms
via: gatsby@2.32.13
Recommendation: Read and validate the license terms
via: gatsby@2.32.13 & others
Recommendation: Read and validate the license terms
via: gatsby@2.32.13
Collapse
Expand

Licenses

MIT License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
Cannot
hold-liable
Must
include-copyright
include-license
1524 Packages, Including:
@ardatan/aggregate-error@0.0.6
@babel/code-frame@7.23.5
@babel/compat-data@7.23.5
@babel/core@7.10.5
@babel/core@7.23.9
@babel/generator@7.23.6
@babel/helper-annotate-as-pure@7.22.5
@babel/helper-builder-binary-assignment-operator-visitor@7.22.15
@babel/helper-compilation-targets@7.23.6
@babel/helper-create-class-features-plugin@7.23.10
@babel/helper-create-regexp-features-plugin@7.22.15
@babel/helper-define-polyfill-provider@0.5.0
@babel/helper-environment-visitor@7.22.20
@babel/helper-function-name@7.23.0
@babel/helper-hoist-variables@7.22.5
@babel/helper-member-expression-to-functions@7.23.0
@babel/helper-module-imports@7.22.15
@babel/helper-module-transforms@7.23.3
@babel/helper-optimise-call-expression@7.22.5
@babel/helper-plugin-utils@7.10.4
@babel/helper-plugin-utils@7.22.5
@babel/helper-remap-async-to-generator@7.22.20
@babel/helper-replace-supers@7.22.20
@babel/helper-simple-access@7.22.5
@babel/helper-skip-transparent-expression-wrappers@7.22.5
@babel/helper-split-export-declaration@7.22.6
@babel/helper-string-parser@7.23.4
@babel/helper-validator-identifier@7.22.20
@babel/helper-validator-option@7.23.5
@babel/helper-wrap-function@7.22.20
@babel/helpers@7.23.9
@babel/highlight@7.23.4
@babel/parser@7.23.9
@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression@7.23.3
@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining@7.23.3
@babel/plugin-bugfix-v8-static-class-fields-redefine-readonly@7.23.7
@babel/plugin-proposal-class-properties@7.18.6
@babel/plugin-proposal-nullish-coalescing-operator@7.18.6
@babel/plugin-proposal-numeric-separator@7.18.6
@babel/plugin-proposal-object-rest-spread@7.10.4
@babel/plugin-proposal-optional-chaining@7.21.0
@babel/plugin-proposal-private-property-in-object@7.21.0-placeholder-for-preset-env.2
@babel/plugin-syntax-async-generators@7.8.4
@babel/plugin-syntax-class-properties@7.12.13
@babel/plugin-syntax-class-static-block@7.14.5
@babel/plugin-syntax-dynamic-import@7.8.3
@babel/plugin-syntax-export-namespace-from@7.8.3
@babel/plugin-syntax-import-assertions@7.23.3
@babel/plugin-syntax-import-attributes@7.23.3
@babel/plugin-syntax-import-meta@7.10.4

ISC License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
Cannot
hold-liable
Must
include-copyright
include-license
116 Packages, Including:
@iarna/toml@2.2.5
@webassemblyjs/helper-fsm@1.9.0
ansi-align@3.0.1
anymatch@2.0.0
anymatch@3.1.3
aproba@1.2.0
async-cache@1.1.0
boolbase@1.0.0
browserify-sign@4.2.2
cacache@12.0.4
cacache@13.0.1
chownr@1.1.4
cli-width@2.2.1
cli-width@3.0.0
cliui@5.0.0
cliui@6.0.0
cliui@7.0.4
copy-concurrently@1.0.5
d@1.0.1
electron-to-chromium@1.4.671
es5-ext@0.10.62
es6-symbol@3.1.3
es6-weak-map@2.0.3
ext@1.7.0
fastq@1.17.1
figgy-pudding@3.5.2
flatted@2.0.2
fs-exists-cached@1.0.0
fs-minipass@2.1.0
fs-write-stream-atomic@1.0.10
fs.realpath@1.0.0
get-caller-file@2.0.5
glob-parent@3.1.0
glob-parent@5.1.2
glob@7.2.3
graceful-fs@4.2.11
hosted-git-info@3.0.8
icss-replace-symbols@1.1.0
icss-utils@2.1.0
infer-owner@1.0.4
inflight@1.0.6
inherits@2.0.3
inherits@2.0.4
ini@1.3.8
ini@2.0.0
is-resolvable@1.1.0
isexe@2.0.0
json-stringify-safe@5.0.1
killable@1.0.1
lru-cache@4.0.0

BSD 2-Clause "Simplified" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
hold-liable
Must
include-copyright
include-license
37 Packages, Including:
@typescript-eslint/parser@2.34.0
@typescript-eslint/typescript-estree@2.34.0
configstore@5.0.1
css-select@2.1.0
css-select@4.3.0
css-what@3.4.2
css-what@6.1.0
damerau-levenshtein@1.0.8
default-gateway@4.2.0
domelementtype@1.3.1
domelementtype@2.3.0
domhandler@4.3.1
domutils@1.7.0
domutils@2.8.0
dotenv@8.6.0
entities@2.2.0
eslint-scope@4.0.3
eslint-scope@5.1.1
espree@6.2.1
esprima@4.0.1
esrecurse@4.3.0
estraverse@4.3.0
estraverse@5.3.0
esutils@2.0.3
glob-to-regexp@0.4.1
http-cache-semantics@3.8.1
http-cache-semantics@4.1.1
mississippi@3.0.0
nth-check@1.0.2
nth-check@2.1.1
regjsparser@0.9.1
terser@4.8.1
terser@5.27.1
update-notifier@5.1.0
uri-js@4.4.1
webidl-conversions@3.0.1
yurnalist@2.1.0

BSD 3-Clause "New" or "Revised" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
use-trademark
hold-liable
Must
include-copyright
include-license
31 Packages, Including:
@hapi/address@2.1.4
@hapi/bourne@1.3.2
@hapi/hoek@8.5.1
@hapi/hoek@9.3.0
@hapi/joi@15.1.1
@hapi/topo@3.1.6
@hapi/topo@5.1.0
@sideway/address@4.1.5
@sideway/formula@3.0.1
@sideway/pinpoint@2.0.0
@xtuc/ieee754@1.2.0
diff@4.0.2
diff@5.2.0
duplexer3@0.1.5
eslint-plugin-flowtype@3.13.0
esquery@1.5.0
filesize@3.5.11
highlight.js@10.7.3
hoist-non-react-statics@3.3.2
ieee754@1.2.1
joi@17.12.1
qs@6.11.0
qs@6.11.2
serialize-javascript@4.0.0
serialize-javascript@6.0.2
source-map@0.5.7
source-map@0.6.1
source-map@0.7.3
source-map@0.7.4
sprintf-js@1.0.3
table@5.4.6

Apache License 2.0

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
use-patent-claims
place-warranty
Cannot
hold-liable
use-trademark
Must
include-copyright
include-license
state-changes
include-notice
19 Packages, Including:
@ampproject/remapping@2.2.1
@webassemblyjs/leb128@1.11.6
@xtuc/long@4.2.2
ansi-html-community@0.0.8
ansi-html@0.0.7
aria-query@5.3.0
axobject-query@3.2.1
doctrine@2.1.0
doctrine@3.0.0
eslint-visitor-keys@1.3.0
faye-websocket@0.11.4
human-signals@1.1.1
native-url@0.2.6
opentracing@0.14.7
rxjs@6.6.7
true-case-path@2.2.1
typescript@5.3.3
websocket-driver@0.7.4
websocket-extensions@0.1.4

BSD Zero Clause License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
include-copyright
include-license
include-original
Cannot
hold-liable
Must
6 Packages, Including:
password-prompt@1.1.3
tslib@1.14.1
tslib@2.0.3
tslib@2.1.0
tslib@2.2.0
tslib@2.6.2

(MIT OR CC0-1.0)

Public Domain
4 Packages, Including:
type-fest@0.20.2
type-fest@0.21.3
type-fest@0.8.1
type-fest@2.19.0

Creative Commons Zero v1.0 Universal

Public Domain
Not OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
Cannot
Must
3 Packages, Including:
language-subtag-registry@0.3.22
mdn-data@2.0.14
mdn-data@2.0.4

Apache License, Version 2.0

Invalid
Not OSI Approved
2 Packages, Including:
rx-lite-aggregates@4.0.8
rx-lite@4.0.8

N/A

N/A
2 Packages, Including:
trim@0.0.1
valid-url@1.0.9

(MIT OR Apache-2.0)

Permissive
1 Packages, Including:
atob@2.1.2

Mozilla Public License 2.0

Weakly Protective
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
place-warranty
use-patent-claims
Cannot
use-trademark
hold-liable
Must
include-copyright
include-license
disclose-source
include-original
1 Packages, Including:
axe-core@4.7.0

Creative Commons Attribution 4.0 International

Uncategorized
Not OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
Cannot
Must
1 Packages, Including:
caniuse-lite@1.0.30001587

Public Domain

Invalid
Not OSI Approved
1 Packages, Including:
jsonify@0.0.1

(BSD-3-Clause OR GPL-2.0)

Permissive
1 Packages, Including:
node-forge@0.10.0

(MIT AND Zlib)

Permissive
1 Packages, Including:
pako@1.0.11

(WTFPL OR MIT)

Permissive
1 Packages, Including:
path-is-inside@1.0.2

(BSD-2-Clause OR MIT OR Apache-2.0)

Expression
1 Packages, Including:
rc@1.2.8

(MIT AND BSD-3-Clause)

Permissive
1 Packages, Including:
sha.js@2.4.11
Disclaimer

This deed highlights only some of the key features and terms of the actual license. It is not a license and has no legal value. You should carefully review all of the terms and conditions of the actual license before using the licensed material.

Sandworm is not a law firm and does not provide legal services. Distributing, displaying, or linking to this deed or the license that it summarizes does not create a lawyer-client or any other relationship.

Direct Dependencies

6
All Dependencies CSV
β“˜ This is a list of gatsby-plugin-netlify 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.
NameVersionSizeLicenseTypeVulnerabilities
@babel/runtime7.23.953.23 kBMIT
prod
fs-extra8.1.031.77 kBMIT
prod
gatsby2.32.133.04 MBMIT
prod peer
5
49
22
9
kebab-hash0.1.22.36 kBMIT
prod
lodash4.17.21311.49 kBMIT
prod
webpack-assets-manifest3.1.110.16 kBMIT
prod
9
4
1

Visualizations