Generated on May 31, 2024 via pnpm

Npm

Home

grunt-contrib-imagemin 0.9.0

Minify images

gruntplugin

compress

gif

Package summary

issues

licenses

Package created

6 Dec 2012

Version published

22 Oct 2014

Maintainers

Total deps

380

Direct deps

License

UNKNOWN

Issues

7 critical severity issues

critical

decompress@3.0.0

Path Traversal in decompress

Recommendation: Upgrade to version 4.2.1 or later

via: imagemin@2.2.1

getobject@0.1.0

Prototype pollution in getobject

Recommendation: Upgrade to version 1.0.0 or later

via: grunt@0.4.5

underscore@1.7.0

Arbitrary Code Execution in underscore

Recommendation: Upgrade to version 1.12.1 or later

via: grunt@0.4.5 & others

lodash@2.4.2

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.12 or later

via: grunt@0.4.5 & others

colors@0.6.2

Package has no specified license

Recommendation: Check the package code and files for license information

via: grunt@0.4.5 & others

dateformat@1.0.2-1.2.3

Package has no specified license

Recommendation: Check the package code and files for license information

via: grunt@0.4.5

inherits@1.0.2

Package has no specified license

Recommendation: Check the package code and files for license information

via: grunt@0.4.5 & others

Collapse

Expand

34 high severity issues

high

url-regex@3.2.0

Regular expression denial of service in url-regex

Recommendation: None

via: imagemin@2.2.1

grunt@0.4.5

Arbitrary Code Execution in grunt

Recommendation: Upgrade to version 1.3.0 or later

via: grunt@0.4.5

grunt@0.4.5

Race Condition in Grunt

Recommendation: Upgrade to version 1.5.3 or later

via: grunt@0.4.5

semver-regex@1.0.0

semver-regex Regular Expression Denial of Service (ReDOS)

Recommendation: Upgrade to version 3.1.3 or later

via: imagemin@2.2.1

minimatch@0.3.0

Regular Expression Denial of Service in minimatch

Recommendation: Upgrade to version 3.0.2 or later

via: grunt@0.4.5 & others

lodash@2.4.2

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.11 or later

via: grunt@0.4.5 & others

glob-parent@3.1.0

glob-parent vulnerable to Regular Expression Denial of Service in enclosure regex

Recommendation: Upgrade to version 5.1.2 or later

via: imagemin@2.2.1

js-yaml@2.0.5

Code Injection in js-yaml

Recommendation: Upgrade to version 3.13.1 or later

via: grunt@0.4.5 & others

trim-newlines@1.0.0

Uncontrolled Resource Consumption in trim-newlines

Recommendation: Upgrade to version 3.0.1 or later

via: imagemin@2.2.1 & others

minimatch@0.3.0

minimatch ReDoS vulnerability

Recommendation: Upgrade to version 3.0.5 or later

via: grunt@0.4.5 & others

lodash.template@3.6.2

Command Injection in lodash

Recommendation: None

via: imagemin@2.2.1

lodash@2.4.2

Command Injection in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: grunt@0.4.5 & others

duplexer2@0.0.2

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: imagemin@2.2.1

esprima@1.0.4

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: grunt@0.4.5 & others

glob@3.1.21

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: grunt@0.4.5 & others

glob@3.2.11

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: grunt@0.4.5

graceful-fs@1.2.3

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: grunt@0.4.5 & others

sax@0.6.1

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: imagemin@2.2.1

unique-stream@1.0.0

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: imagemin@2.2.1

rc@1.2.8

Package uses a custom license expression: `(BSD-2-Clause OR MIT OR Apache-2.0)`

Recommendation: Validate that the license expression complies with your license policy

via: imagemin@2.2.1

spdx-exceptions@2.5.0

Package uses an atypical license ("CC-BY-3.0")

Recommendation: Read and validate the license terms

via: pretty-bytes@1.0.4

coffee-script@1.3.3

Deprecated package

via: grunt@0.4.5

gifsicle@3.0.4

Package uses postinstall script: "node lib/install.js"

via: imagemin@2.2.1

graceful-fs@1.2.3

Deprecated package

via: grunt@0.4.5 & others

gulp-util@3.0.8

Deprecated package

via: imagemin@2.2.1

jpegtran-bin@3.2.0

Package uses postinstall script: "node lib/install.js"

via: imagemin@2.2.1

minimatch@0.2.14

Deprecated package

via: grunt@0.4.5 & others

minimatch@0.3.0

Deprecated package

via: grunt@0.4.5

minimatch@2.0.10

Deprecated package

via: imagemin@2.2.1

natives@1.1.6

Deprecated package

via: imagemin@2.2.1

optipng-bin@3.1.4

Package uses postinstall script: "node lib/install.js"

via: imagemin@2.2.1

pngquant-bin@3.1.1

Package uses postinstall script: "node lib/install.js"

via: imagemin@2.2.1

svgo@0.4.5

Deprecated package

via: imagemin@2.2.1

uuid@2.0.3

Deprecated package

via: imagemin@2.2.1

Collapse

Expand

10 moderate severity issues

moderate

lodash@2.4.2

Regular Expression Denial of Service (ReDoS) in lodash

Recommendation: Upgrade to version 4.17.11 or later

via: grunt@0.4.5 & others

underscore.string@2.3.3

Regular Expression Denial of Service in underscore.string

Recommendation: Upgrade to version 3.3.5 or later

via: grunt@0.4.5 & others

js-yaml@2.0.5

Denial of Service in js-yaml

Recommendation: Upgrade to version 3.13.0 or later

via: grunt@0.4.5 & others

tunnel-agent@0.4.3

Memory Exposure in tunnel-agent

Recommendation: Upgrade to version 0.6.0 or later

via: imagemin@2.2.1

got@5.7.1

Got allows a redirect to a UNIX socket

Recommendation: Upgrade to version 11.8.5 or later

via: imagemin@2.2.1

grunt@0.4.5

Path Traversal in Grunt

Recommendation: Upgrade to version 1.5.2 or later

via: grunt@0.4.5

lodash@2.4.2

Regular Expression Denial of Service (ReDoS) in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: grunt@0.4.5 & others

semver@4.3.6

semver vulnerable to Regular Expression Denial of Service

Recommendation: Upgrade to version 5.7.2 or later

via: imagemin@2.2.1

lodash@2.4.2

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.5 or later

via: grunt@0.4.5 & others

dateformat@1.0.2-1.2.3

Package has no specified source code repository

via: grunt@0.4.5

Collapse

Expand

12 low severity issues

low

braces@1.8.5

Regular Expression Denial of Service in braces

Recommendation: Upgrade to version 2.3.1 or later

via: imagemin@2.2.1

braces@1.8.5

Regular Expression Denial of Service (ReDoS) in braces

Recommendation: Upgrade to version 2.3.1 or later

via: imagemin@2.2.1

semver-regex@1.0.0

Regular expression denial of service in semver-regex

Recommendation: Upgrade to version 3.1.4 or later

via: imagemin@2.2.1

duplexer2@0.0.2

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: imagemin@2.2.1

esprima@1.0.4

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: grunt@0.4.5 & others

glob@3.1.21

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: grunt@0.4.5 & others

glob@3.2.11

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: grunt@0.4.5

graceful-fs@1.2.3

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: grunt@0.4.5 & others

sax@0.6.1

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: imagemin@2.2.1

unique-stream@1.0.0

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: imagemin@2.2.1

spdx-exceptions@2.5.0

Package uses a license that is not OSI approved ("CC-BY-3.0")

Recommendation: Read and validate the license terms

via: pretty-bytes@1.0.4

spdx-license-ids@3.0.18

Package uses a license that is not OSI approved ("CC0-1.0")

Recommendation: Read and validate the license terms

via: pretty-bytes@1.0.4

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

334 Packages, Including:

@types/keyv@3.1.4

@types/node@20.12.13

@types/responselike@1.0.3

ansi-gray@0.1.1

ansi-regex@0.2.1

ansi-regex@2.1.1

ansi-styles@1.1.0

ansi-styles@2.2.1

ansi-wrap@0.1.0

archive-type@3.2.0

argparse@0.1.16

arr-diff@2.0.0

arr-flatten@1.1.0

array-differ@1.0.0

array-find-index@1.0.2

array-uniq@1.0.3

array-unique@0.2.1

async-each-series@1.1.0

async@0.1.22

async@0.9.2

balanced-match@1.0.2

beeper@1.1.1

bin-build@2.2.0

bin-check@2.0.0

bin-version-check@2.1.0

bin-version@1.0.4

bin-wrapper@3.0.2

bl@1.2.3

brace-expansion@1.1.11

braces@1.8.5

buffer-alloc-unsafe@1.1.0

buffer-alloc@1.2.0

buffer-crc32@0.2.13

buffer-fill@1.0.0

buffer-from@1.1.2

buffer-to-vinyl@1.1.0

camelcase-keys@1.0.0

camelcase-keys@2.1.0

camelcase@1.2.1

camelcase@2.1.1

capture-stack-trace@1.0.2

caw@1.2.0

chalk@0.5.1

chalk@1.1.3

clone-stats@0.0.1

clone@0.2.0

clone@1.0.4

co@3.1.0

coa@0.4.1

coffee-script@1.3.3

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

28 Packages, Including:

abbrev@1.1.1

color-support@1.1.3

fs.realpath@1.0.0

glob-parent@2.0.0

glob-parent@3.1.0

glob@4.5.3

glob@5.0.15

glob@7.2.3

graceful-fs@3.0.12

graceful-fs@4.2.11

gulp-sourcemaps@1.6.0

hosted-git-info@2.8.9

inflight@1.0.6

inherits@2.0.4

ini@1.3.8

lru-cache@2.7.3

minimatch@2.0.10

minimatch@3.1.2

natives@1.1.6

once@1.4.0

remove-trailing-separator@1.1.0

rimraf@2.7.1

semver@4.3.6

semver@5.7.2

sigmund@1.0.1

signal-exit@3.0.7

which@1.0.9

wrappy@1.0.2

BSD

Invalid

Not OSI Approved

7 Packages, Including:

duplexer2@0.0.2

esprima@1.0.4

glob@3.1.21

glob@3.2.11

graceful-fs@1.2.3

sax@0.6.1

unique-stream@1.0.0

N/A

3 Packages, Including:

colors@0.6.2

dateformat@1.0.2-1.2.3

inherits@1.0.2

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

3 Packages, Including:

spdx-correct@3.2.0

tunnel-agent@0.4.3

validate-npm-package-license@3.0.4

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

1 Packages, Including:

duplexer2@0.1.4

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

1 Packages, Including:

normalize-package-data@2.5.0

(BSD-2-Clause OR MIT OR Apache-2.0)

Expression

1 Packages, Including:

rc@1.2.8

Creative Commons Attribution 3.0 Unported

Uncategorized

Not OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

Cannot

Must

1 Packages, Including:

spdx-exceptions@2.5.0

Creative Commons Zero v1.0 Universal

Public Domain

Not OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

Cannot

Must

1 Packages, Including:

spdx-license-ids@3.0.18

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of grunt-contrib-imagemin 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
async	0.9.2	20.46 kB	MIT	prod
chalk	0.5.1	3.26 kB	MIT	prod
grunt	0.4.5	22.45 kB	MIT	prod peer	6 15 7 4
imagemin	2.2.1	3.14 kB	MIT	prod	5 28 8 9
pretty-bytes	1.0.4	2.26 kB	MIT	prod	2 2