Generated on Feb 29, 2024 via pnpm

Npm

Home

generator-office 1.7.0

Yeoman generator for creating Microsoft Office projects using any text editor.

office

yeoman-generator

office-add-in

Package summary

issues

licenses

Package created

24 Aug 2015

Version published

2 May 2020

Maintainers

Total deps

453

Direct deps

License

MIT

Issues

4 critical severity issues

critical

ejs@2.7.4

ejs template injection vulnerability

Recommendation: Upgrade to version 3.1.7 or later

via: yeoman-generator@4.13.0

buffers@0.1.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: unzipper@0.10.14

cli-table@0.3.11

Package has no specified license

Recommendation: Check the package code and files for license information

via: yeoman-generator@4.13.0

pad-component@0.0.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: yosay@2.0.2

Collapse

Expand

14 high severity issues

high

glob-parent@3.1.0

glob-parent vulnerable to Regular Expression Denial of Service in enclosure regex

Recommendation: Upgrade to version 5.1.2 or later

via: yeoman-generator@4.13.0

chainsaw@0.1.0

Package uses an invalid SPDX license ("MIT/X11")

Recommendation: Validate that the package complies with your license policy

via: unzipper@0.10.14

traverse@0.3.9

Package uses an invalid SPDX license ("MIT/X11")

Recommendation: Validate that the package complies with your license policy

via: unzipper@0.10.14

glob-to-regexp@0.3.0

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: yeoman-generator@4.13.0

spdx-exceptions@2.5.0

Package uses an atypical license ("CC-BY-3.0")

Recommendation: Read and validate the license terms

via: yeoman-generator@4.13.0

ejs@2.7.4

Package uses postinstall script: "node ./postinstall.js"

via: yeoman-generator@4.13.0

har-validator@5.1.5

Deprecated package

via: request@2.88.2

opn@6.0.0

Deprecated package

via: opn@6.0.0

request@2.88.2

Deprecated package

via: request@2.88.2

resolve-url@0.2.1

Deprecated package

via: yeoman-generator@4.13.0

source-map-resolve@0.5.3

Deprecated package

via: yeoman-generator@4.13.0

source-map-url@0.4.1

Deprecated package

via: yeoman-generator@4.13.0

urix@0.1.0

Deprecated package

via: yeoman-generator@4.13.0

uuid@3.4.0

Deprecated package

via: request@2.88.2 & others

Collapse

Expand

6 moderate severity issues

moderate

got@6.7.1

Got allows a redirect to a UNIX socket

Recommendation: Upgrade to version 11.8.5 or later

via: yeoman-generator@4.13.0

request@2.88.2

Server-Side Request Forgery in Request

Recommendation: None

via: request@2.88.2

tough-cookie@2.5.0

tough-cookie Prototype Pollution vulnerability

Recommendation: Upgrade to version 4.1.3 or later

via: request@2.88.2

axios@0.21.4

Axios Cross-Site Request Forgery Vulnerability

Recommendation: Upgrade to version 0.28.0 or later

via: yeoman-generator@4.13.0

@microsoft/teams-manifest@0.1.3

Package has no specified source code repository

via: office-addin-manifest@1.12.10

pad-component@0.0.1

Package has no specified source code repository

via: yosay@2.0.2

Collapse

Expand

5 low severity issues

low

chainsaw@0.1.0

Package uses a license that is not OSI approved ("MIT/X11")

Recommendation: Read and validate the license terms

via: unzipper@0.10.14

traverse@0.3.9

Package uses a license that is not OSI approved ("MIT/X11")

Recommendation: Read and validate the license terms

via: unzipper@0.10.14

glob-to-regexp@0.3.0

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: yeoman-generator@4.13.0

spdx-exceptions@2.5.0

Package uses a license that is not OSI approved ("CC-BY-3.0")

Recommendation: Read and validate the license terms

via: yeoman-generator@4.13.0

spdx-license-ids@3.0.17

Package uses a license that is not OSI approved ("CC0-1.0")

Recommendation: Read and validate the license terms

via: yeoman-generator@4.13.0

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

371 Packages, Including:

@babel/code-frame@7.23.5

@babel/helper-validator-identifier@7.22.20

@babel/highlight@7.23.4

@microsoft/teams-manifest@0.1.3

@mrmlnc/readdir-enhanced@2.2.1

@nodelib/fs.stat@1.1.3

@types/fs-extra@11.0.4

@types/glob@7.2.0

@types/jsonfile@6.1.4

@types/keyv@3.1.4

@types/minimatch@3.0.5

@types/minimatch@5.1.2

@types/node@20.11.22

@types/normalize-package-data@2.4.4

@types/responselike@1.0.3

adm-zip@0.5.10

ajv-draft-04@1.0.0

ajv@6.12.6

ajv@8.12.0

ansi-escapes@4.3.2

ansi-regex@2.1.1

ansi-regex@3.0.1

ansi-regex@5.0.1

ansi-styles@2.2.1

ansi-styles@3.2.1

ansi-styles@4.3.0

applicationinsights@1.8.10

arr-diff@4.0.0

arr-flatten@1.1.0

arr-union@3.1.0

array-differ@3.0.0

array-union@1.0.2

array-union@2.1.0

array-uniq@1.0.3

array-unique@0.3.2

arrify@1.0.1

arrify@2.0.1

asn1@0.2.6

assert-plus@1.0.0

assign-symbols@1.0.0

async-hook-jl@1.7.6

async@2.6.4

async@3.2.5

asynckit@0.4.0

aws4@1.12.0

axios@0.21.4

axios@1.6.7

balanced-match@1.0.2

base@0.11.2

binary@0.3.0

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

32 Packages, Including:

at-least-node@1.0.0

cli-width@3.0.0

fs.realpath@1.0.0

fstream@1.0.12

glob-parent@3.1.0

glob@7.2.3

graceful-fs@4.2.11

har-schema@2.0.0

hosted-git-info@2.8.9

inflight@1.0.6

inherits@2.0.3

inherits@2.0.4

isexe@2.0.0

json-stringify-safe@5.0.1

listenercount@1.0.1

lru-cache@6.0.0

minimatch@3.1.2

minimatch@5.1.6

mute-stream@0.0.8

once@1.4.0

remove-trailing-separator@1.1.0

rimraf@2.7.1

rimraf@3.0.2

sax@1.3.0

semver@5.7.2

semver@6.3.1

semver@7.6.0

signal-exit@3.0.7

which@1.3.1

which@2.0.2

wrappy@1.0.2

yallist@4.0.0

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

14 Packages, Including:

aws-sign2@0.7.0

caseless@0.12.0

ejs@2.7.4

ejs@3.1.9

filelist@1.0.4

forever-agent@0.6.1

human-signals@1.1.1

jake@10.8.7

oauth-sign@0.9.0

request@2.88.2

rxjs@6.6.7

spdx-correct@3.2.0

tunnel-agent@0.6.0

validate-npm-package-license@3.0.4

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

11 Packages, Including:

async-listener@0.6.10

cls-hooked@4.2.2

continuation-local-storage@3.2.1

emitter-listener@1.1.2

normalize-package-data@2.5.0

shimmer@1.2.1

uri-js@4.4.1

webidl-conversions@3.0.1

yeoman-environment@2.10.3

yeoman-generator@4.13.0

yosay@2.0.2

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

9 Packages, Including:

bcrypt-pbkdf@1.0.2

diff@3.5.0

diff@4.0.2

duplexer2@0.1.4

duplexer3@0.1.5

qs@6.5.3

shelljs@0.8.5

source-map@0.5.7

tough-cookie@2.5.0

N/A

3 Packages, Including:

buffers@0.1.1

cli-table@0.3.11

pad-component@0.0.1

(MIT OR Apache-2.0)

Permissive

2 Packages, Including:

JSONStream@1.3.5

atob@2.1.2

The Unlicense

Public Domain

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

private-use

modify

Cannot

include-copyright

hold-liable

Must

2 Packages, Including:

big-integer@1.6.52

tweetnacl@0.14.5

MIT/X11

Invalid

Not OSI Approved

2 Packages, Including:

chainsaw@0.1.0

traverse@0.3.9

(MIT OR CC0-1.0)

Public Domain

2 Packages, Including:

type-fest@0.21.3

type-fest@0.6.0

BSD

Invalid

Not OSI Approved

1 Packages, Including:

glob-to-regexp@0.3.0

(AFL-2.1 OR BSD-3-Clause)

Permissive

1 Packages, Including:

json-schema@0.4.0

Creative Commons Attribution 3.0 Unported

Uncategorized

Not OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

Cannot

Must

1 Packages, Including:

spdx-exceptions@2.5.0

Creative Commons Zero v1.0 Universal

Public Domain

Not OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

Cannot

Must

1 Packages, Including:

spdx-license-ids@3.0.17

BSD Zero Clause License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

include-copyright

include-license

include-original

Cannot

hold-liable

Must

1 Packages, Including:

tslib@1.14.1

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of generator-office 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
chalk	4.1.2	11.31 kB	MIT	prod optional
lodash	4.17.21	311.49 kB	MIT	prod optional
office-addin-manifest	1.12.10	94.59 kB	MIT	prod	1
office-addin-usage-data	1.6.9	104.78 kB	MIT	prod
opn	6.0.0	9.8 kB	MIT	prod	1
request	2.88.2	57.83 kB	Apache-2.0	prod	3 2
rimraf	3.0.2	6.33 kB	ISC	prod
unzipper	0.10.14	14.56 kB	MIT	prod	1 2 2
uuid	3.4.0	11.87 kB	MIT	prod	1
yeoman-generator	4.13.0	25.01 kB	BSD-2-Clause	prod optional	2 8 2 3
yosay	2.0.2	3.99 kB	BSD-2-Clause	prod	1 1