Generated on May 1, 2024 via pnpm

Npm

Home

gfs-react-tools 2.0.9

整合gfs相关功能模块

tools

react

Package summary

issues

licenses

Package created

5 Jan 2017

Version published

20 Nov 2017

Maintainers

Total deps

274

Direct deps

License

MIT

Issues

1 critical severity issue

critical

open@0.0.5

Command Injection in open

Recommendation: Upgrade to version 6.0.0 or later

via: cnpm@4.6.0

Collapse

Expand

26 high severity issues

high

npm@3.10.10

Incorrect Permission Assignment for Critical Resource in NPM

Recommendation: Upgrade to version 5.7.1 or later

via: cnpm@4.6.0

npm@3.10.10

npm Vulnerable to Global node_modules Binary Overwrite

Recommendation: Upgrade to version 6.13.4 or later

via: cnpm@4.6.0

npm@3.10.10

npm symlink reference outside of node_modules

Recommendation: Upgrade to version 6.13.3 or later

via: cnpm@4.6.0

tar@2.2.2

Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization

Recommendation: Upgrade to version 3.2.2 or later

via: cnpm@4.6.0

npm@3.10.10

Arbitrary File Write in npm

Recommendation: Upgrade to version 6.13.3 or later

via: cnpm@4.6.0

node-fetch@1.7.3

node-fetch forwards secure headers to untrusted sites

Recommendation: Upgrade to version 2.6.7 or later

via: gfs-fetch@1.0.6 & others

tar@2.2.2

Arbitrary File Creation/Overwrite on Windows via insufficient relative path sanitization

Recommendation: Upgrade to version 4.4.18 or later

via: cnpm@4.6.0

pause-stream@0.0.11

Package uses an invalid SPDX license ("(MIT OR Apache2)")

Recommendation: Validate that the package complies with your license policy

via: cnpm@4.6.0

@types/redux-devtools-dock-monitor@1.2.3

Deprecated package

via: gfs-redux-bind-react@2.0.5

@types/redux-devtools@3.7.0

Deprecated package

via: gfs-redux-bind-react@2.0.5

core-js@1.2.7

Deprecated package

via: gfs-fetch@1.0.6 & others

core-js@2.6.12

Deprecated package

via: gfs-redux-bind-react@2.0.5

core-js@2.6.12

Package uses postinstall script: "node -e "try{require('./postinstall')}catch(e){}""

via: gfs-redux-bind-react@2.0.5

create-react-class@15.7.0

Deprecated package

via: gfs-fetch@1.0.6 & others

har-validator@5.1.5

Deprecated package

via: cnpm@4.6.0

react-dom@15.7.0

Deprecated package

via: gfs-fetch@1.0.6 & others

react-dom@16.14.0

Deprecated package

via: gfs-redux-bind-react@2.0.5 & others

react@15.7.0

Deprecated package

via: gfs-fetch@1.0.6 & others

react@16.14.0

Deprecated package

via: gfs-redux-bind-react@2.0.5 & others

redux-devtools-dock-monitor@1.2.0

Deprecated package

via: gfs-redux-bind-react@2.0.5

redux-devtools-instrument@1.10.0

Deprecated package

via: gfs-redux-bind-react@2.0.5

redux-devtools-log-monitor@1.4.0

Deprecated package

via: gfs-redux-bind-react@2.0.5

redux-devtools@3.7.0

Deprecated package

via: gfs-redux-bind-react@2.0.5

request@2.88.2

Deprecated package

via: cnpm@4.6.0

tar@2.2.2

Deprecated package

via: cnpm@4.6.0

uuid@3.4.0

Deprecated package

via: cnpm@4.6.0

Collapse

Expand

7 moderate severity issues

moderate

npm@3.10.10

npm CLI exposing sensitive information through logs

Recommendation: Upgrade to version 6.14.6 or later

via: cnpm@4.6.0

semver@5.3.0

semver vulnerable to Regular Expression Denial of Service

Recommendation: Upgrade to version 5.7.2 or later

via: cnpm@4.6.0

tough-cookie@2.5.0

tough-cookie Prototype Pollution vulnerability

Recommendation: Upgrade to version 4.1.3 or later

via: cnpm@4.6.0

request@2.88.2

Server-Side Request Forgery in Request

Recommendation: None

via: cnpm@4.6.0

tar@2.2.2

Denial of service while parsing a tar file due to lack of folders count validation

Recommendation: Upgrade to version 6.2.1 or later

via: cnpm@4.6.0

@types/redux-devtools-dock-monitor@1.2.3

Package has no specified source code repository

via: gfs-redux-bind-react@2.0.5

@types/redux-devtools@3.7.0

Package has no specified source code repository

via: gfs-redux-bind-react@2.0.5

Collapse

Expand

1 low severity issue

low

node-fetch@1.7.3

The `size` option isn't honored after following a redirect in node-fetch

Recommendation: Upgrade to version 2.6.1 or later

via: gfs-fetch@1.0.6 & others

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

223 Packages, Including:

@babel/runtime@7.24.5

@types/base16@1.0.5

@types/prop-types@15.7.12

@types/react-dom@0.14.23

@types/react-redux@4.4.47

@types/react@0.14.57

@types/react@16.14.60

@types/react@18.3.1

@types/redux-devtools-dock-monitor@1.2.3

@types/redux-devtools-log-monitor@1.0.35

@types/redux-devtools@3.7.0

@types/scheduler@0.16.8

agentkeepalive@3.5.2

ajv@6.12.6

ansi-regex@2.1.1

ansi-styles@2.2.1

ansi-styles@3.2.1

any-promise@1.3.0

asap@2.0.6

asn1@0.2.6

assert-plus@1.0.0

asynckit@0.4.0

auto-correct@1.0.0

await-event@2.1.0

aws4@1.12.0

babel-runtime@6.26.0

bagpipe@0.3.5

balanced-match@1.0.2

base16@1.0.0

binary-mirror-config@1.41.0

brace-expansion@1.1.11

bytes@2.5.0

call-bind@1.0.7

chalk@1.1.3

chalk@2.4.2

classnames@2.5.1

cli-cursor@2.1.0

cli-spinners@1.3.1

cnpm@4.6.0

co-from-stream@0.0.0

co-fs-extra@1.2.1

co-parallel@1.0.0

co-read@0.0.1

co-thread@0.0.1

co@4.6.0

code-point-at@1.1.0

color-convert@1.9.3

color-name@1.1.3

colors@1.4.0

combined-stream@1.0.8

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

35 Packages, Including:

abbrev@1.1.1

aproba@1.2.0

are-we-there-yet@1.1.7

block-stream@0.0.9

cmd-shim@2.1.0

console-control-strings@1.1.0

fs.realpath@1.0.0

fstream@1.0.12

gauge@2.7.4

glob@7.2.3

graceful-fs@4.2.11

har-schema@2.0.0

has-unicode@2.0.1

hosted-git-info@2.8.9

inflight@1.0.6

inherits@2.0.4

isexe@2.0.0

json-stringify-safe@5.0.1

lru-cache@2.7.3

minimatch@3.1.2

nopt@3.0.6

normalize-git-url@3.0.2

npm-package-arg@4.2.1

npmlog@4.1.2

once@1.4.0

osenv@0.1.5

rimraf@2.7.1

semver@5.3.0

semver@5.7.2

set-blocking@2.0.0

signal-exit@3.0.7

tar@2.2.2

which@1.3.1

wide-align@1.1.5

wrappy@1.0.2

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

6 Packages, Including:

aws-sign2@0.7.0

caseless@0.12.0

forever-agent@0.6.1

oauth-sign@0.9.0

request@2.88.2

tunnel-agent@0.6.0

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

5 Packages, Including:

bcrypt-pbkdf@1.0.2

hoist-non-react-statics@3.3.2

qs@6.12.1

qs@6.5.3

tough-cookie@2.5.0

(AFL-2.1 OR BSD-3-Clause)

Permissive

1 Packages, Including:

json-schema@0.4.0

Artistic License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

use-trademark

hold-liable

Must

rename

state-changes

include-original

include-install-instructions

1 Packages, Including:

npm@3.10.10

(MIT OR Apache2)

Invalid

1 Packages, Including:

pause-stream@0.0.11

The Unlicense

Public Domain

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

private-use

modify

Cannot

include-copyright

hold-liable

Must

1 Packages, Including:

tweetnacl@0.14.5

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

1 Packages, Including:

uri-js@4.4.1

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of gfs-react-tools 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
cnpm	4.6.0	10.06 kB	MIT	prod	1 11 5
gfs-fetch	1.0.6	27.72 kB	MIT	prod	5 1
gfs-loadingbar	1.0.1	119.06 kB	MIT	prod	5 1
gfs-mock	1.0.3	22.33 kB	MIT	prod	5 1
gfs-react-redux-twoway-binding	0.1.0	11.1 kB	MIT	prod	5 1
gfs-redux-bind-react	2.0.5	49.31 kB	MIT	prod	15 2 1
install	0.8.9	276.66 kB	MIT	prod
react-dom	16.14.0	722.53 kB	MIT	prod	2
react-redux	5.1.2	42.53 kB	MIT	prod peer	4 1
react	16.14.0	59.16 kB	MIT	prod peer	1
redux	3.7.2	30.05 kB	MIT	prod peer