Hold on, we're currently generating a fresh version of this report

Generated on Apr 12, 2024 via pnpm

graffmaker 0.0.4

Graph building DSL for Neo4J

Package summary

47

issues

6

licenses

Package created

28 Jun 2013

Version published

28 Jun 2013

Maintainers

1

Total deps

28

Direct deps

2

License

WTFPL

Issues

47

15 critical severity issues

asn1@0.1.11

Package has no specified license

Recommendation: Check the package code and files for license information

via: neo4j@0.2.21

assert-plus@0.1.5

Package has no specified license

Recommendation: Check the package code and files for license information

via: neo4j@0.2.21

aws-sign@0.3.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: neo4j@0.2.21

combined-stream@0.0.7

Package has no specified license

Recommendation: Check the package code and files for license information

via: neo4j@0.2.21

cookie-jar@0.3.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: neo4j@0.2.21

ctype@0.5.3

Package has no specified license

Recommendation: Check the package code and files for license information

via: neo4j@0.2.21

delayed-stream@0.0.5

Package has no specified license

Recommendation: Check the package code and files for license information

via: neo4j@0.2.21

forever-agent@0.5.2

Package has no specified license

Recommendation: Check the package code and files for license information

via: neo4j@0.2.21

http-status@0.1.8

Package has no specified license

Recommendation: Check the package code and files for license information

via: neo4j@0.2.21

mime@1.2.11

Package has no specified license

Recommendation: Check the package code and files for license information

via: neo4j@0.2.21

oauth-sign@0.3.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: neo4j@0.2.21

qs@0.6.6

Package has no specified license

Recommendation: Check the package code and files for license information

via: neo4j@0.2.21

request@2.27.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: neo4j@0.2.21

streamline@0.4.11

Package has no specified license

Recommendation: Check the package code and files for license information

via: neo4j@0.2.21

tunnel-agent@0.3.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: neo4j@0.2.21

22 high severity issues

qs@0.6.6

Prototype Pollution Protection Bypass in qs

Recommendation: Upgrade to version 6.0.4 or later

via: neo4j@0.2.21

qs@0.6.6

Denial-of-Service Extended Event Loop Blocking in qs

Recommendation: Upgrade to version 1.0.0 or later

via: neo4j@0.2.21

hawk@1.0.0

Regular Expression Denial of Service in hawk

Recommendation: Upgrade to version 3.1.3 or later

via: neo4j@0.2.21

qs@0.6.6

Denial-of-Service Memory Exhaustion in qs

Recommendation: Upgrade to version 1.0.0 or later

via: neo4j@0.2.21

mime@1.2.11

mime Regular Expression Denial of Service when MIME lookup performed on untrusted user input

Recommendation: Upgrade to version 1.4.1 or later

via: neo4j@0.2.21

hoek@0.9.1

Prototype Pollution in hoek

Recommendation: Upgrade to version 4.2.1 or later

via: neo4j@0.2.21

hawk@1.0.0

Uncontrolled Resource Consumption in Hawk

Recommendation: Upgrade to version 9.0.1 or later

via: neo4j@0.2.21

hoek@0.9.1

hoek subject to prototype pollution via the clone function.

Recommendation: None

via: neo4j@0.2.21

qs@0.6.6

qs vulnerable to Prototype Pollution

Recommendation: Upgrade to version 6.2.4 or later

via: neo4j@0.2.21

boom@0.4.2

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: neo4j@0.2.21

cryptiles@0.2.2

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: neo4j@0.2.21

hawk@1.0.0

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: neo4j@0.2.21

hoek@0.9.1

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: neo4j@0.2.21

sntp@0.2.4

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: neo4j@0.2.21

neo4j@0.2.21

Package uses an invalid SPDX license ("Apache License, Version 2.0")

Recommendation: Validate that the package complies with your license policy

via: neo4j@0.2.21

boom@0.4.2

Deprecated package

via: neo4j@0.2.21

cryptiles@0.2.2

Deprecated package

via: neo4j@0.2.21

hawk@1.0.0

Deprecated package

via: neo4j@0.2.21

hoek@0.9.1

Deprecated package

via: neo4j@0.2.21

node-uuid@1.4.8

Deprecated package

via: neo4j@0.2.21

request@2.27.0

Deprecated package

via: neo4j@0.2.21

sntp@0.2.4

Deprecated package

via: neo4j@0.2.21

3 moderate severity issues

tunnel-agent@0.3.0

Memory Exposure in tunnel-agent

Recommendation: Upgrade to version 0.6.0 or later

via: neo4j@0.2.21

request@2.27.0

Remote Memory Exposure in request

Recommendation: Upgrade to version 2.68.0 or later

via: neo4j@0.2.21

request@2.27.0

Server-Side Request Forgery in Request

Recommendation: None

via: neo4j@0.2.21

7 low severity issues

boom@0.4.2

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: neo4j@0.2.21

cryptiles@0.2.2

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: neo4j@0.2.21

hawk@1.0.0

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: neo4j@0.2.21

hoek@0.9.1

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: neo4j@0.2.21

sntp@0.2.4

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: neo4j@0.2.21

graffmaker@0.0.4

Package uses a license that is not OSI approved ("WTFPL")

Recommendation: Read and validate the license terms

via: graffmaker@0.0.4

neo4j@0.2.21

Package uses a license that is not OSI approved ("Apache License, Version 2.0")

Recommendation: Read and validate the license terms

via: neo4j@0.2.21

Licenses

N/A

N/A

15 Packages, Including:

asn1@0.1.11

assert-plus@0.1.5

aws-sign@0.3.0

combined-stream@0.0.7

cookie-jar@0.3.0

ctype@0.5.3

delayed-stream@0.0.5

forever-agent@0.5.2

http-status@0.1.8

mime@1.2.11

oauth-sign@0.3.0

qs@0.6.6

request@2.27.0

streamline@0.4.11

tunnel-agent@0.3.0

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

5 Packages, Including:

async@0.9.2

form-data@0.1.4

http-signature@0.10.1

node-uuid@1.4.8

rsvp@1.2.0

BSD

Invalid

Not OSI Approved

5 Packages, Including:

boom@0.4.2

cryptiles@0.2.2

hawk@1.0.0

hoek@0.9.1

sntp@0.2.4

Do What The F*ck You Want To Public License

Permissive

Not OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

sublicense

distribute

modify

Cannot

Must

rename

1 Packages, Including:

graffmaker@0.0.4

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

1 Packages, Including:

json-stringify-safe@5.0.1

Apache License, Version 2.0

Invalid

Not OSI Approved

1 Packages, Including:

neo4j@0.2.21

Direct Dependencies

2

All Dependencies CSV

ⓘ This is a list of graffmaker 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
neo4j	0.2.21	36.58 kB	Apache License, Version 2.0	prod	15 22 3 6
rsvp	1.2.0	13.16 kB	MIT	prod

All Versions