Home
Docs
GitHub
Pricing
Blog
Log In

Run Sandworm Audit for your App

Get started
Hold on, we're currently generating a fresh version of this report
Generated on May 6, 2024 via pnpm

generator-office 1.9.7

Yeoman generator for creating Microsoft Office projects using any text editor.
Package summary
Share
19
issues
2
critical severity
license
2
6
high severity
license
5
meta
1
5
moderate severity
vulnerability
1
meta
4
6
low severity
license
6
13
licenses
252
MIT
93
ISC
13
Apache-2.0
28
other licenses
BSD-2-Clause
13
BSD-3-Clause
3
N/A
2
MIT/X11
2
+ 6 more
Package created
24 Aug 2015
Version published
26 May 2023
Maintainers
1
Total deps
386
Direct deps
10
License
MIT

Issues

19

2 critical severity issues

critical
Recommendation: Check the package code and files for license information
via: unzipper@0.10.11
Recommendation: Check the package code and files for license information
via: yosay@2.0.2
Collapse
Expand

6 high severity issues

high
Recommendation: Validate that the package complies with your license policy
via: unzipper@0.10.11
Recommendation: Validate that the package complies with your license policy
via: unzipper@0.10.11
Recommendation: Read and validate the license terms
via: yeoman-generator@5.10.0
Recommendation: Read and validate the license terms
via: yeoman-generator@5.10.0
Recommendation: Read and validate the license terms
via: yeoman-generator@5.10.0
via: yeoman-generator@5.10.0
Collapse
Expand

5 moderate severity issues

moderate
Recommendation: Upgrade to version 1.6.0 or later
via: axios@1.3.3
via: office-addin-manifest@1.13.2
via: yeoman-generator@5.10.0
via: yeoman-generator@5.10.0
via: yosay@2.0.2
Collapse
Expand

6 low severity issues

low
Recommendation: Read and validate the license terms
via: unzipper@0.10.11
Recommendation: Read and validate the license terms
via: unzipper@0.10.11
Recommendation: Read and validate the license terms
via: yeoman-generator@5.10.0
Recommendation: Read and validate the license terms
via: yeoman-generator@5.10.0
Recommendation: Read and validate the license terms
via: yeoman-generator@5.10.0
Recommendation: Read and validate the license terms
via: yeoman-generator@5.10.0
Collapse
Expand

Licenses

MIT License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
Cannot
hold-liable
Must
include-copyright
include-license
252 Packages, Including:
@babel/code-frame@7.24.2
@babel/helper-validator-identifier@7.24.5
@babel/highlight@7.24.5
@gar/promisify@1.1.3
@microsoft/teams-manifest@0.1.3
@nodelib/fs.scandir@2.1.5
@nodelib/fs.stat@2.0.5
@nodelib/fs.walk@1.2.8
@npmcli/move-file@2.0.1
@octokit/auth-token@2.5.0
@octokit/core@3.6.0
@octokit/endpoint@6.0.12
@octokit/graphql@4.8.0
@octokit/openapi-types@12.11.0
@octokit/plugin-paginate-rest@2.21.3
@octokit/plugin-request-log@1.0.4
@octokit/plugin-rest-endpoint-methods@5.16.2
@octokit/request-error@2.1.0
@octokit/request@5.6.3
@octokit/rest@18.12.0
@octokit/types@6.41.0
@pkgjs/parseargs@0.11.0
@tootallnate/once@2.0.0
@tufjs/canonical-json@1.0.0
@tufjs/models@1.0.4
@types/fs-extra@11.0.4
@types/jsonfile@6.1.4
@types/minimatch@3.0.5
@types/node@20.12.8
@types/normalize-package-data@2.4.4
adm-zip@0.5.12
agent-base@6.0.2
agentkeepalive@4.5.0
aggregate-error@3.1.0
ajv-draft-04@1.0.0
ajv@8.13.0
ansi-regex@2.1.1
ansi-regex@3.0.1
ansi-regex@5.0.1
ansi-regex@6.0.1
ansi-styles@2.2.1
ansi-styles@3.2.1
ansi-styles@4.3.0
ansi-styles@6.2.1
applicationinsights@1.8.10
array-differ@3.0.0
array-union@2.1.0
arrify@2.0.1
async-hook-jl@1.7.6
async@3.2.5

ISC License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
Cannot
hold-liable
Must
include-copyright
include-license
93 Packages, Including:
@isaacs/cliui@8.0.2
@npmcli/fs@2.1.2
@npmcli/fs@3.1.0
@npmcli/git@4.1.0
@npmcli/installed-package-contents@2.1.0
@npmcli/node-gyp@3.0.0
@npmcli/promise-spawn@6.0.2
@npmcli/run-script@6.0.2
abbrev@1.1.1
aproba@2.0.0
are-we-there-yet@3.0.1
at-least-node@1.0.0
cacache@16.1.3
cacache@17.1.4
chownr@2.0.0
color-support@1.1.3
console-control-strings@1.1.0
deprecation@2.3.1
fastq@1.17.1
foreground-child@3.1.1
fs-minipass@2.1.0
fs-minipass@3.0.3
fs.realpath@1.0.0
fstream@1.0.12
gauge@4.0.4
glob-parent@5.1.2
glob@10.3.12
glob@7.2.3
glob@8.1.0
graceful-fs@4.2.11
has-unicode@2.0.1
hosted-git-info@2.8.9
hosted-git-info@6.1.1
ignore-walk@6.0.5
infer-owner@1.0.4
inflight@1.0.6
inherits@2.0.3
inherits@2.0.4
isexe@2.0.0
listenercount@1.0.1
lru-cache@10.2.2
lru-cache@6.0.0
lru-cache@7.18.3
make-fetch-happen@10.2.1
make-fetch-happen@11.1.1
minimatch@3.1.2
minimatch@5.1.6
minimatch@7.4.6
minimatch@9.0.4
minipass-collect@1.0.2

Apache License 2.0

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
use-patent-claims
place-warranty
Cannot
hold-liable
use-trademark
Must
include-copyright
include-license
state-changes
include-notice
13 Packages, Including:
@sigstore/bundle@1.1.0
@sigstore/protobuf-specs@0.2.1
@sigstore/sign@1.0.0
@sigstore/tuf@1.0.3
before-after-hook@2.2.3
ejs@3.1.10
exponential-backoff@3.1.1
filelist@1.0.4
human-signals@2.1.0
jake@10.9.1
sigstore@1.9.0
spdx-correct@3.2.0
validate-npm-package-license@3.0.4

BSD 2-Clause "Simplified" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
hold-liable
Must
include-copyright
include-license
13 Packages, Including:
async-listener@0.6.10
cls-hooked@4.2.2
continuation-local-storage@3.2.1
emitter-listener@1.1.2
http-cache-semantics@4.1.1
normalize-package-data@2.5.0
normalize-package-data@5.0.0
npm-install-checks@6.3.0
shimmer@1.2.1
uri-js@4.4.1
webidl-conversions@3.0.1
yeoman-generator@5.10.0
yosay@2.0.2

BSD 3-Clause "New" or "Revised" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
use-trademark
hold-liable
Must
include-copyright
include-license
3 Packages, Including:
duplexer2@0.1.4
shelljs@0.8.5
sprintf-js@1.1.3

N/A

N/A
2 Packages, Including:
buffers@0.1.1
pad-component@0.0.1

MIT/X11

Invalid
Not OSI Approved
2 Packages, Including:
chainsaw@0.1.0
traverse@0.3.9

Blue Oak Model License 1.0.0

Uncategorized
Not OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
Cannot
Must
2 Packages, Including:
jackspeak@2.3.6
path-scurry@1.10.2

(MIT OR CC0-1.0)

Public Domain
2 Packages, Including:
type-fest@0.6.0
type-fest@0.8.1

The Unlicense

Public Domain
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
private-use
modify
Cannot
include-copyright
hold-liable
Must
1 Packages, Including:
big-integer@1.6.52

Artistic License 2.0

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
Cannot
use-trademark
hold-liable
Must
rename
state-changes
include-original
include-install-instructions
1 Packages, Including:
binaryextensions@4.19.0

Creative Commons Attribution 3.0 Unported

Uncategorized
Not OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
Cannot
Must
1 Packages, Including:
spdx-exceptions@2.5.0

Creative Commons Zero v1.0 Universal

Public Domain
Not OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
Cannot
Must
1 Packages, Including:
spdx-license-ids@3.0.17
Disclaimer

This deed highlights only some of the key features and terms of the actual license. It is not a license and has no legal value. You should carefully review all of the terms and conditions of the actual license before using the licensed material.

Sandworm is not a law firm and does not provide legal services. Distributing, displaying, or linking to this deed or the license that it summarizes does not create a lawyer-client or any other relationship.

Direct Dependencies

10
All Dependencies CSV
β“˜ This is a list of generator-office 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.
NameVersionSizeLicenseTypeVulnerabilities
axios1.3.3423.75 kBMIT
prod
1
chalk4.1.211.31 kBMIT
prod
lodash4.17.21311.49 kBMIT
prod
office-addin-manifest1.13.295.06 kBMIT
prod
1
office-addin-usage-data1.6.11104.78 kBMIT
prod
open8.4.212.6 kBMIT
prod
unzipper0.10.1114.26 kBMIT
prod
1
2
2
uuid8.3.227.32 kBMIT
prod
yeoman-generator5.10.023.26 kBBSD-2-Clause
prod
4
2
4
yosay2.0.23.99 kBBSD-2-Clause
prod
1
1

Visualizations