Generated on Apr 22, 2024 via pnpm

Npm

Home

grunt-contrib-jasmine 0.9.0

Run jasmine specs headlessly through PhantomJS

gruntplugin

jasmine

unit

phantomjs

headless

tests

Package summary

issues

licenses

Package created

7 Nov 2012

Version published

10 Jul 2015

Maintainers

Total deps

196

Direct deps

License

MIT

Issues

6 critical severity issues

critical

lodash@2.4.2

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.12 or later

via: lodash@2.4.2

minimist@0.0.8

Prototype Pollution in minimist

Recommendation: Upgrade to version 0.2.4 or later

via: grunt-lib-phantomjs@0.7.1

debug@0.7.4

Package has no specified license

Recommendation: Check the package code and files for license information

via: grunt-lib-phantomjs@0.7.1

package@1.0.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: grunt-lib-phantomjs@0.7.1

progress@1.1.8

Package has no specified license

Recommendation: Check the package code and files for license information

via: grunt-lib-phantomjs@0.7.1

temporary@0.0.8

Package has no specified license

Recommendation: Check the package code and files for license information

via: grunt-lib-phantomjs@0.7.1

Collapse

Expand

22 high severity issues

high

qs@5.2.1

Prototype Pollution Protection Bypass in qs

Recommendation: Upgrade to version 6.0.4 or later

via: grunt-lib-phantomjs@0.7.1

hoek@2.16.3

Prototype Pollution in hoek

Recommendation: Upgrade to version 4.2.1 or later

via: grunt-lib-phantomjs@0.7.1

phantomjs@1.9.20

PhantomJS Arbitrary File Read

Recommendation: None

via: grunt-lib-phantomjs@0.7.1

debug@0.7.4

debug Inefficient Regular Expression Complexity vulnerability

Recommendation: Upgrade to version 2.6.9 or later

via: grunt-lib-phantomjs@0.7.1

lodash@2.4.2

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.11 or later

via: lodash@2.4.2

hawk@3.1.3

Uncontrolled Resource Consumption in Hawk

Recommendation: Upgrade to version 9.0.1 or later

via: grunt-lib-phantomjs@0.7.1

tough-cookie@2.2.2

Regular Expression Denial of Service in tough-cookie

Recommendation: Upgrade to version 2.3.3 or later

via: grunt-lib-phantomjs@0.7.1

hoek@2.16.3

hoek subject to prototype pollution via the clone function.

Recommendation: None

via: grunt-lib-phantomjs@0.7.1

qs@5.2.1

qs vulnerable to Prototype Pollution

Recommendation: Upgrade to version 6.2.4 or later

via: grunt-lib-phantomjs@0.7.1

lodash@2.4.2

Command Injection in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: lodash@2.4.2

sntp@1.0.9

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: grunt-lib-phantomjs@0.7.1

boom@2.10.1

Deprecated package

via: grunt-lib-phantomjs@0.7.1

cryptiles@2.0.5

Deprecated package

via: grunt-lib-phantomjs@0.7.1

har-validator@2.0.6

Deprecated package

via: grunt-lib-phantomjs@0.7.1

hawk@3.1.3

Deprecated package

via: grunt-lib-phantomjs@0.7.1

hoek@2.16.3

Deprecated package

via: grunt-lib-phantomjs@0.7.1

mkdirp@0.5.0

Deprecated package

via: grunt-lib-phantomjs@0.7.1

node-uuid@1.4.8

Deprecated package

via: grunt-lib-phantomjs@0.7.1

phantomjs@1.9.20

Package uses install script: "node install.js"

via: grunt-lib-phantomjs@0.7.1

request@2.67.0

Deprecated package

via: grunt-lib-phantomjs@0.7.1

sntp@1.0.9

Deprecated package

via: grunt-lib-phantomjs@0.7.1

tough-cookie@2.2.2

Deprecated package

via: grunt-lib-phantomjs@0.7.1

Collapse

Expand

11 moderate severity issues

moderate

lodash@2.4.2

Regular Expression Denial of Service (ReDoS) in lodash

Recommendation: Upgrade to version 4.17.11 or later

via: lodash@2.4.2

tunnel-agent@0.4.3

Memory Exposure in tunnel-agent

Recommendation: Upgrade to version 0.6.0 or later

via: grunt-lib-phantomjs@0.7.1

bl@1.0.3

Remote Memory Exposure in bl

Recommendation: Upgrade to version 1.2.3 or later

via: grunt-lib-phantomjs@0.7.1

concat-stream@1.5.0

Memory Exposure in concat-stream

Recommendation: Upgrade to version 1.5.2 or later

via: grunt-lib-phantomjs@0.7.1

tough-cookie@2.2.2

ReDoS via long string of semicolons in tough-cookie

Recommendation: Upgrade to version 2.3.0 or later

via: grunt-lib-phantomjs@0.7.1

request@2.67.0

Remote Memory Exposure in request

Recommendation: Upgrade to version 2.68.0 or later

via: grunt-lib-phantomjs@0.7.1

lodash@2.4.2

Regular Expression Denial of Service (ReDoS) in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: lodash@2.4.2

minimist@0.0.8

Prototype Pollution in minimist

Recommendation: Upgrade to version 0.2.1 or later

via: grunt-lib-phantomjs@0.7.1

semver@4.3.6

semver vulnerable to Regular Expression Denial of Service

Recommendation: Upgrade to version 5.7.2 or later

via: grunt-lib-phantomjs@0.7.1

tough-cookie@2.2.2

tough-cookie Prototype Pollution vulnerability

Recommendation: Upgrade to version 4.1.3 or later

via: grunt-lib-phantomjs@0.7.1

request@2.67.0

Server-Side Request Forgery in Request

Recommendation: None

via: grunt-lib-phantomjs@0.7.1

Collapse

Expand

3 low severity issues

low

lodash@2.4.2

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.5 or later

via: lodash@2.4.2

debug@0.7.4

Regular Expression Denial of Service in debug

Recommendation: Upgrade to version 2.6.9 or later

via: grunt-lib-phantomjs@0.7.1

sntp@1.0.9

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: grunt-lib-phantomjs@0.7.1

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

147 Packages, Including:

ansi-regex@2.1.1

ansi-styles@2.2.1

ansi-styles@4.3.0

argparse@1.0.10

array-each@1.0.1

array-slice@1.1.0

asn1@0.2.6

assert-plus@0.2.0

assert-plus@1.0.0

async@2.6.4

async@3.2.5

balanced-match@1.0.2

bl@1.0.3

brace-expansion@1.1.11

braces@3.0.2

chalk@1.1.3

chalk@4.1.2

color-convert@2.0.1

color-name@1.1.4

colors@1.1.2

combined-stream@1.0.8

commander@2.20.3

concat-map@0.0.1

concat-stream@1.5.0

core-util-is@1.0.2

core-util-is@1.0.3

dashdash@1.14.1

dateformat@4.6.3

delayed-stream@1.0.0

detect-file@1.0.0

ecc-jsbn@0.1.2

es5-shim@4.6.7

escape-string-regexp@1.0.5

eventemitter2@0.4.14

exit@0.1.2

expand-tilde@2.0.2

extend@3.0.2

extsprintf@1.3.0

fd-slicer@1.0.1

fill-range@7.0.1

findup-sync@4.0.0

findup-sync@5.0.0

fined@1.2.0

flagged-respawn@1.0.1

for-in@1.0.2

for-own@1.0.0

form-data@1.0.1

fs-extra@0.26.7

function-bind@1.1.2

generate-function@2.3.1

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

23 Packages, Including:

abbrev@1.1.1

fs.realpath@1.0.0

glob@7.1.7

glob@7.2.3

graceful-fs@4.2.11

har-validator@2.0.6

inflight@1.0.6

inherits@2.0.4

ini@1.3.8

isexe@2.0.0

json-stringify-safe@5.0.1

minimatch@3.0.8

minimatch@3.1.2

nopt@3.0.6

nopt@4.0.3

once@1.4.0

osenv@0.1.5

rimraf@2.7.1

semver@4.3.6

which@1.2.14

which@1.3.1

which@2.0.2

wrappy@1.0.2

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

9 Packages, Including:

bcrypt-pbkdf@1.0.2

boom@2.10.1

cryptiles@2.0.5

hawk@3.1.3

hoek@2.16.3

qs@5.2.1

sprintf-js@1.0.3

sprintf-js@1.1.3

tough-cookie@2.2.2

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

8 Packages, Including:

aws-sign2@0.6.0

caseless@0.11.0

forever-agent@0.6.1

kew@0.7.0

oauth-sign@0.8.2

phantomjs@1.9.20

request@2.67.0

tunnel-agent@0.4.3

N/A

4 Packages, Including:

debug@0.7.4

package@1.0.1

progress@1.1.8

temporary@0.0.8

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

2 Packages, Including:

esprima@4.0.1

extract-zip@1.5.0

(AFL-2.1 OR BSD-3-Clause)

Permissive

1 Packages, Including:

json-schema@0.4.0

BSD

Invalid

Not OSI Approved

1 Packages, Including:

sntp@1.0.9

The Unlicense

Public Domain

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

private-use

modify

Cannot

include-copyright

hold-liable

Must

1 Packages, Including:

tweetnacl@0.14.5

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of grunt-contrib-jasmine 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
chalk	1.1.3	5.11 kB	MIT	prod
es5-shim	4.6.7	102.6 kB	MIT	prod
grunt-lib-phantomjs	0.7.1	5.9 kB	MIT	prod	5 20 9 2
grunt	1.6.1	20.42 kB	MIT	prod peer
jasmine-core	2.99.1	71.63 kB	MIT	prod
lodash	2.4.2	192.11 kB	MIT	prod	1 2 2 1
rimraf	2.7.1	5.53 kB	ISC	prod