Generated on Apr 22, 2024 via pnpm

Npm

Home

grunt-contrib-jasmine 2.0.1

Run jasmine specs headlessly through Headless Chrome

gruntplugin

jasmine

unit

Package summary

issues

licenses

Package created

7 Nov 2012

Version published

31 May 2018

Maintainers

Total deps

304

Direct deps

License

MIT

Issues

1 critical severity issue

critical

lodash@2.4.2

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.12 or later

via: lodash@2.4.2

Collapse

Expand

10 high severity issues

high

http-cache-semantics@3.8.1

http-cache-semantics vulnerable to Regular Expression Denial of Service

Recommendation: Upgrade to version 4.1.1 or later

via: pacote@8.1.3

lodash@2.4.2

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.11 or later

via: lodash@2.4.2

lodash@2.4.2

Command Injection in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: lodash@2.4.2

rx-lite-aggregates@4.0.8

Package uses an invalid SPDX license ("Apache License, Version 2.0")

Recommendation: Validate that the package complies with your license policy

via: grunt-eslint@20.1.0

rx-lite@4.0.8

Package uses an invalid SPDX license ("Apache License, Version 2.0")

Recommendation: Validate that the package complies with your license policy

via: grunt-eslint@20.1.0

spdx-exceptions@2.5.0

Package uses an atypical license ("CC-BY-3.0")

Recommendation: Read and validate the license terms

via: pacote@8.1.3

circular-json@0.3.3

Deprecated package

via: grunt-eslint@20.1.0

node-fetch-npm@2.0.4

Deprecated package

via: pacote@8.1.3

puppeteer@1.4.0

Deprecated package

via: puppeteer@1.4.0

puppeteer@1.4.0

Package uses install script: "node install.js"

via: puppeteer@1.4.0

Collapse

Expand

6 moderate severity issues

moderate

lodash@2.4.2

Regular Expression Denial of Service (ReDoS) in lodash

Recommendation: Upgrade to version 4.17.11 or later

via: lodash@2.4.2

ajv@5.5.2

Prototype Pollution in Ajv

Recommendation: Upgrade to version 6.12.3 or later

via: grunt-eslint@20.1.0

lodash@2.4.2

Regular Expression Denial of Service (ReDoS) in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: lodash@2.4.2

puppeteer@1.4.0

Use-After-Free in puppeteer

Recommendation: Upgrade to version 1.13.0 or later

via: puppeteer@1.4.0

ip@1.1.5

NPM IP package incorrectly identifies some private IP addresses as public

Recommendation: Upgrade to version 1.1.9 or later

via: pacote@8.1.3

tar@4.4.19

Denial of service while parsing a tar file due to lack of folders count validation

Recommendation: Upgrade to version 6.2.1 or later

via: pacote@8.1.3

Collapse

Expand

5 low severity issues

low

lodash@2.4.2

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.5 or later

via: lodash@2.4.2

rx-lite-aggregates@4.0.8

Package uses a license that is not OSI approved ("Apache License, Version 2.0")

Recommendation: Read and validate the license terms

via: grunt-eslint@20.1.0

rx-lite@4.0.8

Package uses a license that is not OSI approved ("Apache License, Version 2.0")

Recommendation: Read and validate the license terms

via: grunt-eslint@20.1.0

spdx-exceptions@2.5.0

Package uses a license that is not OSI approved ("CC-BY-3.0")

Recommendation: Read and validate the license terms

via: pacote@8.1.3

spdx-license-ids@3.0.17

Package uses a license that is not OSI approved ("CC0-1.0")

Recommendation: Read and validate the license terms

via: pacote@8.1.3

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

224 Packages, Including:

acorn-jsx@3.0.1

acorn@3.3.0

acorn@5.7.4

agent-base@4.2.1

agent-base@4.3.0

agentkeepalive@3.5.2

ajv-keywords@2.1.1

ajv@5.5.2

ansi-escapes@3.2.0

ansi-regex@2.1.1

ansi-regex@3.0.1

ansi-styles@2.2.1

ansi-styles@3.2.1

ansi-styles@4.3.0

argparse@1.0.10

array-each@1.0.1

array-slice@1.1.0

async-limiter@1.0.1

async@3.2.5

babel-code-frame@6.26.0

balanced-match@1.0.2

bluebird@3.7.2

brace-expansion@1.1.11

braces@3.0.2

buffer-crc32@0.2.13

buffer-from@1.1.2

builtins@1.0.3

caller-path@0.1.0

callsites@0.2.0

chalk@1.1.3

chalk@2.4.2

chalk@4.1.2

chardet@0.4.2

circular-json@0.3.3

cli-cursor@2.1.0

co@4.6.0

color-convert@1.9.3

color-convert@2.0.1

color-name@1.1.3

color-name@1.1.4

colors@1.1.2

concat-map@0.0.1

concat-stream@1.6.2

core-util-is@1.0.3

cross-spawn@5.1.0

cyclist@1.0.2

dateformat@4.6.3

debug@2.6.9

debug@3.1.0

debug@3.2.7

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

55 Packages, Including:

abbrev@1.1.1

aproba@1.2.0

cacache@11.3.3

chownr@1.1.4

cli-width@2.2.1

copy-concurrently@1.0.5

figgy-pudding@3.5.2

fs-minipass@1.2.7

fs-write-stream-atomic@1.0.10

fs.realpath@1.0.0

glob@7.1.7

glob@7.2.3

graceful-fs@4.2.11

hosted-git-info@2.8.9

ignore-walk@3.0.4

inflight@1.0.6

inherits@2.0.4

ini@1.3.8

is-resolvable@1.1.0

isexe@2.0.0

lru-cache@4.1.5

lru-cache@5.1.1

make-fetch-happen@4.0.2

minimatch@3.0.8

minimatch@3.1.2

minipass@2.9.0

move-concurrently@1.0.1

mute-stream@0.0.7

nopt@3.0.6

nopt@4.0.3

npm-bundled@1.1.2

npm-normalize-package-bin@1.0.1

npm-package-arg@6.1.1

npm-packlist@1.4.8

npm-pick-manifest@2.2.3

once@1.4.0

osenv@0.1.5

promise-inflight@1.0.1

pseudomap@1.0.2

rimraf@2.6.3

rimraf@2.7.1

run-queue@1.0.3

semver@5.7.2

signal-exit@3.0.7

ssri@6.0.2

tar@4.4.19

unique-filename@1.1.1

unique-slug@2.0.2

validate-npm-package-name@3.0.0

which@1.3.1

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

11 Packages, Including:

eslint-scope@3.7.3

espree@3.5.4

esprima@4.0.1

esrecurse@4.3.0

estraverse@4.3.0

estraverse@5.3.0

esutils@2.0.3

extract-zip@1.7.0

http-cache-semantics@3.8.1

mississippi@3.0.0

normalize-package-data@2.5.0

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

5 Packages, Including:

doctrine@2.1.0

eslint-visitor-keys@1.3.0

puppeteer@1.4.0

spdx-correct@3.2.0

validate-npm-package-license@3.0.4

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

4 Packages, Including:

esquery@1.5.0

sprintf-js@1.0.3

sprintf-js@1.1.3

table@4.0.2

Apache License, Version 2.0

Invalid

Not OSI Approved

2 Packages, Including:

rx-lite-aggregates@4.0.8

rx-lite@4.0.8

(WTFPL OR MIT)

Permissive

1 Packages, Including:

path-is-inside@1.0.2

Creative Commons Attribution 3.0 Unported

Uncategorized

Not OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

Cannot

Must

1 Packages, Including:

spdx-exceptions@2.5.0

Creative Commons Zero v1.0 Universal

Public Domain

Not OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

Cannot

Must

1 Packages, Including:

spdx-license-ids@3.0.17

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of grunt-contrib-jasmine 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
chalk	1.1.3	5.11 kB	MIT	prod
grunt-eslint	20.1.0	2.31 kB	MIT	prod	3 1 2
lodash	2.4.2	192.11 kB	MIT	prod	1 2 2 1
pacote	8.1.3	30.12 kB	MIT	prod	3 2 2
puppeteer	1.4.0	99.28 kB	Apache-2.0	prod	2 1
rimraf	2.7.1	5.53 kB	ISC	prod
sprintf-js	1.0.3	10.09 kB	BSD-3-Clause	prod