Generated on May 8, 2024 via pnpm

Npm

Home

godsend-extras 0.5.9

Separation of concerns for streaming microservices.

microservice

microservices

messaging

message-bus

message-broker

Package summary

issues

licenses

Package created

26 Apr 2017

Version published

8 Jun 2017

Maintainers

Total deps

299

Direct deps

License

MIT

Issues

18 critical severity issues

critical

xmlhttprequest-ssl@1.5.3

xmlhttprequest and xmlhttprequest-ssl vulnerable to Arbitrary Code Injection

Recommendation: Upgrade to version 1.6.2 or later

via: godsend-basics@0.5.9 & others

xmlhttprequest-ssl@1.5.3

Improper Certificate Validation in xmlhttprequest-ssl

Recommendation: Upgrade to version 1.6.1 or later

via: godsend-basics@0.5.9 & others

minimist@1.2.0

Prototype Pollution in minimist

Recommendation: Upgrade to version 1.2.6 or later

via: godsend-basics@0.5.9 & others

socket.io-parser@2.3.1

Insufficient validation when decoding a Socket.IO packet

Recommendation: Upgrade to version 3.3.3 or later

via: godsend-basics@0.5.9 & others

arraybuffer.slice@0.0.6

Package has no specified license

Recommendation: Check the package code and files for license information

via: godsend-basics@0.5.9 & others

better-assert@1.0.2

Package has no specified license

Recommendation: Check the package code and files for license information

via: godsend-basics@0.5.9 & others

blob@0.0.4

Package has no specified license

Recommendation: Check the package code and files for license information

via: godsend-basics@0.5.9 & others

callsite@1.0.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: godsend-basics@0.5.9 & others

component-bind@1.0.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: godsend-basics@0.5.9 & others

component-emitter@1.1.2

Package has no specified license

Recommendation: Check the package code and files for license information

via: godsend-basics@0.5.9 & others

component-inherit@0.0.3

Package has no specified license

Recommendation: Check the package code and files for license information

via: godsend-basics@0.5.9 & others

indexof@0.0.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: godsend-basics@0.5.9 & others

ms@0.7.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: godsend-basics@0.5.9 & others

object-component@0.0.3

Package has no specified license

Recommendation: Check the package code and files for license information

via: godsend-basics@0.5.9 & others

options@0.0.6

Package has no specified license

Recommendation: Check the package code and files for license information

via: godsend-basics@0.5.9 & others

proclaim@3.4.4

Package has no specified license

Recommendation: Check the package code and files for license information

via: godsend-basics@0.5.9 & others

socket.io-stream@0.9.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: godsend-basics@0.5.9 & others

util-inspect@0.1.8

Package has no specified license

Recommendation: Check the package code and files for license information

via: godsend-basics@0.5.9 & others

Collapse

Expand

17 high severity issues

high

engine.io@1.8.3

Resource exhaustion in engine.io

Recommendation: Upgrade to version 3.6.0 or later

via: godsend-basics@0.5.9 & others

socket.io-parser@2.3.1

Resource exhaustion in socket.io-parser

Recommendation: Upgrade to version 3.3.2 or later

via: godsend-basics@0.5.9 & others

parsejson@0.0.3

Regular Expression Denial of Service in parsejson

Recommendation: None

via: godsend-basics@0.5.9 & others

ws@1.1.2

Denial of Service in ws

Recommendation: Upgrade to version 1.1.5 or later

via: godsend-basics@0.5.9 & others

fresh@0.5.0

Regular Expression Denial of Service in fresh

Recommendation: Upgrade to version 0.5.2 or later

via: godsend-basics@0.5.9 & others

mime@1.3.4

mime Regular Expression Denial of Service when MIME lookup performed on untrusted user input

Recommendation: Upgrade to version 1.4.1 or later

via: godsend-basics@0.5.9 & others

debug@2.6.1

debug Inefficient Regular Expression Complexity vulnerability

Recommendation: Upgrade to version 2.6.9 or later

via: godsend-basics@0.5.9 & others

node-forge@0.7.1

Prototype Pollution in node-forge

Recommendation: Upgrade to version 0.10.0 or later

via: node-forge@0.7.1

node-forge@0.7.1

Improper Verification of Cryptographic Signature in node-forge

Recommendation: Upgrade to version 1.3.0 or later

via: node-forge@0.7.1

node-forge@0.7.1

Improper Verification of Cryptographic Signature in node-forge

Recommendation: Upgrade to version 1.3.0 or later

via: node-forge@0.7.1

qs@6.4.0

qs vulnerable to Prototype Pollution

Recommendation: Upgrade to version 6.4.1 or later

via: godsend-basics@0.5.9 & others

rc@1.2.8

Package uses a custom license expression: `(BSD-2-Clause OR MIT OR Apache-2.0)`

Recommendation: Validate that the license expression complies with your license policy

via: level@1.6.0

json3@3.3.0

Deprecated package

via: godsend-basics@0.5.9 & others

json3@3.3.2

Deprecated package

via: godsend-basics@0.5.9 & others

leveldown@1.6.0

Package uses install script: "prebuild-install || node-gyp rebuild"

via: level@1.6.0

proclaim@3.4.4

Deprecated package

via: godsend-basics@0.5.9 & others

uuid@3.0.1

Deprecated package

via: godsend-basics@0.5.9 & others

Collapse

Expand

15 moderate severity issues

moderate

bl@0.8.2

Memory Exposure in bl

Recommendation: Upgrade to version 0.9.5 or later

via: level-sublevel@6.6.1

node-forge@0.7.1

Improper Verification of Cryptographic Signature in `node-forge`

Recommendation: Upgrade to version 1.3.0 or later

via: node-forge@0.7.1

engine.io@1.8.3

Uncaught exception in engine.io

Recommendation: Upgrade to version 3.6.1 or later

via: godsend-basics@0.5.9 & others

bl@0.8.2

Remote Memory Exposure in bl

Recommendation: Upgrade to version 1.2.3 or later

via: level-sublevel@6.6.1

socket.io@1.7.3

CORS misconfiguration in socket.io

Recommendation: Upgrade to version 2.4.0 or later

via: godsend-basics@0.5.9 & others

node-forge@0.7.1

Open Redirect in node-forge

Recommendation: Upgrade to version 1.0.0 or later

via: node-forge@0.7.1

ms@0.7.2

Vercel ms Inefficient Regular Expression Complexity vulnerability

Recommendation: Upgrade to version 2.0.0 or later

via: godsend-basics@0.5.9 & others

minimist@1.2.0

Prototype Pollution in minimist

Recommendation: Upgrade to version 1.2.3 or later

via: godsend-basics@0.5.9 & others

semver@5.1.1

semver vulnerable to Regular Expression Denial of Service

Recommendation: Upgrade to version 5.7.2 or later

via: level-sublevel@6.6.1 & others

express@4.15.2

Express.js Open Redirect in malformed URLs

Recommendation: Upgrade to version 4.19.2 or later

via: godsend-basics@0.5.9 & others

callsite@1.0.0

Package has no specified source code repository

via: godsend-basics@0.5.9 & others

has-binary@0.1.7

Package has no specified source code repository

via: godsend-basics@0.5.9 & others

indexof@0.0.1

Package has no specified source code repository

via: godsend-basics@0.5.9 & others

object-component@0.0.3

Package has no specified source code repository

via: godsend-basics@0.5.9 & others

util-inspect@0.1.8

Package has no specified source code repository

via: godsend-basics@0.5.9 & others

Collapse

Expand

5 low severity issues

low

node-forge@0.7.1

Prototype Pollution in node-forge debug API.

Recommendation: Upgrade to version 1.0.0 or later

via: node-forge@0.7.1

node-forge@0.7.1

Prototype Pollution in node-forge util.setPath API

Recommendation: Upgrade to version 0.10.0 or later

via: node-forge@0.7.1

node-forge@0.7.1

URL parsing in node-forge could lead to undesired behavior.

Recommendation: Upgrade to version 1.0.0 or later

via: node-forge@0.7.1

debug@2.6.1

Regular Expression Denial of Service in debug

Recommendation: Upgrade to version 2.6.9 or later

via: godsend-basics@0.5.9 & others

expand-template@1.1.1

Package uses a license that is not OSI approved ("WTFPL")

Recommendation: Read and validate the license terms

via: level@1.6.0

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

255 Packages, Including:

abstract-leveldown@0.12.4

abstract-leveldown@2.6.3

accepts@1.3.3

accepts@1.3.8

after@0.8.2

ansi-regex@2.1.1

array-buffer-byte-length@1.0.1

array-flatten@1.1.1

array-map@0.0.0

array-reduce@0.0.0

arraybuffer.prototype.slice@1.0.3

available-typed-arrays@1.0.7

backo2@1.0.2

balanced-match@1.0.2

base64-arraybuffer@0.1.5

base64id@1.0.0

batch@0.5.3

bindings@1.2.1

bl@0.8.2

bl@1.2.3

brace-expansion@1.1.11

buffer-alloc-unsafe@1.1.0

buffer-alloc@1.2.0

buffer-fill@1.0.0

buffer-shims@1.0.0

bytewise-core@1.2.3

bytewise@1.1.0

call-bind@1.0.7

code-point-at@1.1.0

component-emitter@1.2.1

concat-map@0.0.1

content-disposition@0.5.2

content-type@1.0.5

cookie-signature@1.0.6

cookie@0.3.1

core-util-is@1.0.3

data-view-buffer@1.0.1

data-view-byte-length@1.0.1

data-view-byte-offset@1.0.0

debug@2.2.0

debug@2.3.3

debug@2.6.1

debug@2.6.9

decompress-response@3.3.0

deep-equal@1.0.1

deep-extend@0.6.0

deferred-leveldown@0.2.0

deferred-leveldown@1.2.2

define-data-property@1.1.4

define-properties@1.2.1

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

24 Packages, Including:

aproba@1.2.0

are-we-there-yet@1.1.7

chownr@1.1.4

console-control-strings@1.1.0

fs.realpath@1.0.0

gauge@2.7.4

glob@7.1.7

has-unicode@2.0.1

inflight@1.0.6

inherits@2.0.3

inherits@2.0.4

ini@1.3.8

minimatch@3.1.2

npmlog@4.1.2

once@1.4.0

semver@5.1.1

semver@5.7.2

set-blocking@2.0.0

setprototypeof@1.0.2

setprototypeof@1.0.3

setprototypeof@1.1.0

signal-exit@3.0.7

wide-align@1.1.5

wrappy@1.0.2

N/A

14 Packages, Including:

arraybuffer.slice@0.0.6

better-assert@1.0.2

blob@0.0.4

callsite@1.0.0

component-bind@1.0.0

component-emitter@1.1.2

component-inherit@0.0.3

indexof@0.0.1

ms@0.7.1

object-component@0.0.3

options@0.0.6

proclaim@3.4.4

socket.io-stream@0.9.1

util-inspect@0.1.8

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

2 Packages, Including:

detect-libc@1.0.3

tunnel-agent@0.6.0

Do What The F*ck You Want To Public License

Permissive

Not OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

sublicense

distribute

modify

Cannot

Must

rename

1 Packages, Including:

expand-template@1.1.1

(BSD-3-Clause OR GPL-2.0)

Permissive

1 Packages, Including:

node-forge@0.7.1

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

1 Packages, Including:

qs@6.4.0

(BSD-2-Clause OR MIT OR Apache-2.0)

Expression

1 Packages, Including:

rc@1.2.8

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of godsend-extras 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
godsend-basics	0.5.9	6.68 kB	MIT	prod	18 12 10 1
godsend	0.5.9	251.46 kB	MIT	prod	18 12 10 1
level-sublevel	6.6.1	33.21 kB	MIT	prod	3
level-ws	0.0.1	7.14 kB	MIT	prod
level	1.6.0	2.71 kB	MIT	prod	2 1 1
levelup	1.3.6	39.82 kB	MIT	prod	1
node-forge	0.7.1	419.23 kB	(BSD-3-Clause OR GPL-2.0)	prod	3 2 3
uuid	3.0.1	7.03 kB	MIT	prod	1