Home
Docs
GitHub
Pricing
Blog
Log In

Run Sandworm Audit for your App

Get started
Hold on, we're currently generating a fresh version of this report
Generated on Apr 22, 2024 via pnpm

grunt 0.3.14

A task-based command line build tool for JavaScript projects.
Package summary
Share
140
issues
25
critical severity
vulnerability
1
license
24
56
high severity
vulnerability
15
license
36
meta
5
20
moderate severity
vulnerability
9
meta
11
39
low severity
vulnerability
2
license
37
13
licenses
171
MIT
88
ISC
33
BlueOak-1.0.0
53
other licenses
N/A
24
Apache-2.0
12
BSD-3-Clause
6
BSD-2-Clause
4
+ 6 more
Package created
12 Jan 2012
Version published
29 Aug 2012
Maintainers
4
Total deps
345
Direct deps
16
License
UNKNOWN

Issues

140

25 critical severity issues

critical
Recommendation: Upgrade to version 2.4.24 or later
via: uglify-js@1.3.5
Recommendation: Check the package code and files for license information
via: connect@2.4.6
Recommendation: Check the package code and files for license information
via: colors@0.6.2 & others
Recommendation: Check the package code and files for license information
via: connect@2.4.6
Recommendation: Check the package code and files for license information
via: connect@2.4.6
Recommendation: Check the package code and files for license information
via: gzip-js@0.3.2
Recommendation: Check the package code and files for license information
via: connect@2.4.6
Recommendation: Check the package code and files for license information
via: dateformat@1.0.2-1.2.3
Recommendation: Check the package code and files for license information
via: connect@2.4.6
Recommendation: Check the package code and files for license information
via: connect@2.4.6
Recommendation: Check the package code and files for license information
via: prompt@0.1.12
Recommendation: Check the package code and files for license information
via: connect@2.4.6
Recommendation: Check the package code and files for license information
via: temporary@0.0.8
Recommendation: Check the package code and files for license information
via: connect@2.4.6
Recommendation: Check the package code and files for license information
via: prompt@0.1.12
Recommendation: Check the package code and files for license information
via: prompt@0.1.12
Recommendation: Check the package code and files for license information
via: connect@2.4.6
Recommendation: Check the package code and files for license information
via: connect@2.4.6
Recommendation: Check the package code and files for license information
via: prompt@0.1.12
Recommendation: Check the package code and files for license information
via: connect@2.4.6
Recommendation: Check the package code and files for license information
via: temporary@0.0.8
Recommendation: Check the package code and files for license information
via: prompt@0.1.12
Recommendation: Check the package code and files for license information
via: uglify-js@1.3.5
Recommendation: Check the package code and files for license information
via: underscore@1.2.4
Recommendation: Check the package code and files for license information
via: prompt@0.1.12
Collapse
Expand

56 high severity issues

high
Recommendation: Upgrade to version 1.3.0 or later
via: grunt@0.3.14
Recommendation: Upgrade to version 1.5.3 or later
via: grunt@0.3.14
Recommendation: Upgrade to version 6.0.4 or later
via: connect@2.4.6
Recommendation: Upgrade to version 1.3.0 or later
via: grunt@0.3.14
Recommendation: Upgrade to version 1.0.0 or later
via: connect@2.4.6
Recommendation: Upgrade to version 1.5.3 or later
via: grunt@0.3.14
Recommendation: Upgrade to version 1.0.0 or later
via: connect@2.4.6
Recommendation: Upgrade to version 4.3.2 or later
via: semver@1.0.14
Recommendation: Upgrade to version 2.6.0 or later
via: uglify-js@1.3.5
Recommendation: Upgrade to version 0.5.2 or later
via: connect@2.4.6
Recommendation: Upgrade to version 3.0.2 or later
via: glob-whatev@0.1.8
Recommendation: Upgrade to version 1.4.1 or later
via: connect@2.4.6
Recommendation: None
via: prompt@0.1.12
Recommendation: Upgrade to version 6.2.4 or later
via: connect@2.4.6
Recommendation: Upgrade to version 3.0.5 or later
via: glob-whatev@0.1.8
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Validate that the package complies with your license policy
via: gzip-js@0.3.2
Recommendation: Validate that the package complies with your license policy
via: gzip-js@0.3.2
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
via: connect@2.4.6
via: connect@2.4.6
via: glob-whatev@0.1.8
via: nodeunit@0.7.4
via: prompt@0.1.12
Collapse
Expand

20 moderate severity issues

moderate
Recommendation: Upgrade to version 1.5.2 or later
via: grunt@0.3.14
Recommendation: Upgrade to version 3.3.5 or later
via: underscore.string@2.1.1
Recommendation: Upgrade to version 1.5.2 or later
via: grunt@0.3.14
Recommendation: Upgrade to version 2.14.0 or later
via: connect@2.4.6
Recommendation: Upgrade to version 2.8.2 or later
via: connect@2.4.6
Recommendation: Upgrade to version 2.68.0 or later
via: prompt@0.1.12
Recommendation: Upgrade to version 0.11.1 or later
via: connect@2.4.6
Recommendation: Upgrade to version 5.7.2 or later
via: semver@1.0.14
Recommendation: None
via: prompt@0.1.12
via: nodeunit@0.7.4
via: connect@2.4.6
via: dateformat@1.0.2-1.2.3
via: prompt@0.1.12
via: connect@2.4.6
via: connect@2.4.6
via: jshint@0.5.9
via: nodeunit@0.7.4
via: connect@2.4.6
via: connect@2.4.6
via: connect@2.4.6
Collapse
Expand

39 low severity issues

low
Recommendation: Upgrade to version 2.8.1 or later
via: connect@2.4.6
Recommendation: Upgrade to version 0.8.4 or later
via: connect@2.4.6
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: gzip-js@0.3.2
Recommendation: Read and validate the license terms
via: gzip-js@0.3.2
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Recommendation: Read and validate the license terms
via: nodeunit@0.7.4
Collapse
Expand

Licenses

MIT License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
Cannot
hold-liable
Must
include-copyright
include-license
171 Packages, Including:
@alcalzone/ansi-tokenize@0.1.3
@bcoe/v8-coverage@0.2.3
@cspotcode/source-map-support@0.8.1
@isaacs/ts-node-temp-fork-for-pr-2009@10.9.5
@istanbuljs/schema@0.1.3
@jridgewell/resolve-uri@3.1.2
@jridgewell/sourcemap-codec@1.4.15
@jridgewell/trace-mapping@0.3.25
@jridgewell/trace-mapping@0.3.9
@pkgjs/parseargs@0.11.0
@tsconfig/node14@14.1.2
@tsconfig/node16@16.1.3
@tsconfig/node18@18.2.4
@tsconfig/node20@20.1.4
@tufjs/canonical-json@2.0.0
@tufjs/models@2.0.0
@types/istanbul-lib-coverage@2.0.6
@types/node@20.12.7
acorn-walk@8.3.2
acorn@8.11.3
agent-base@7.1.1
aggregate-error@3.1.0
ansi-escapes@6.2.1
ansi-regex@5.0.1
ansi-regex@6.0.1
ansi-styles@4.3.0
ansi-styles@6.2.1
arg@4.1.3
argsparser@0.0.7
async@0.1.22
auto-bind@5.0.1
balanced-match@1.0.2
binary-extensions@2.3.0
brace-expansion@1.1.11
brace-expansion@2.0.1
braces@3.0.2
builtins@5.1.0
chalk@5.3.0
chokidar@3.6.0
ci-info@3.9.0
clean-stack@2.2.0
cli-boxes@3.0.0
cli-cursor@4.0.0
cli-truncate@3.1.0
code-excerpt@4.0.0
color-convert@2.0.1
color-name@1.1.4
concat-map@0.0.1
convert-source-map@2.0.0
convert-to-spaces@2.0.1

ISC License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
Cannot
hold-liable
Must
include-copyright
include-license
88 Packages, Including:
@isaacs/cliui@8.0.2
@npmcli/agent@2.2.2
@npmcli/fs@3.1.0
@npmcli/git@5.0.6
@npmcli/installed-package-contents@2.0.2
@npmcli/node-gyp@3.0.0
@npmcli/package-json@5.0.3
@npmcli/promise-spawn@7.0.1
@npmcli/redact@1.1.0
@npmcli/run-script@7.0.4
@tapjs/processinfo@3.1.7
abbrev@1.1.1
abbrev@2.0.0
anymatch@3.1.3
async-hook-domain@4.0.1
c8@8.0.1
cacache@18.0.2
chownr@2.0.0
cliui@8.0.1
events-to-array@2.0.3
foreground-child@2.0.0
foreground-child@3.1.1
fs-minipass@2.1.0
fs-minipass@3.0.3
fs.realpath@1.0.0
function-loop@4.0.0
get-caller-file@2.0.5
glob-parent@5.1.2
glob@10.3.12
glob@7.2.3
graceful-fs@4.2.11
hosted-git-info@7.0.1
ignore-walk@6.0.4
inflight@1.0.6
inherits@2.0.4
isexe@2.0.0
isexe@3.1.1
lru-cache@10.2.0
lru-cache@2.7.3
lru-cache@6.0.0
make-error@1.3.6
make-fetch-happen@13.0.0
minimatch@3.1.2
minimatch@9.0.4
minipass-collect@2.0.1
minipass-flush@1.0.5
minipass-pipeline@1.2.4
minipass-sized@1.0.3
minipass@3.3.6
minipass@5.0.0

Blue Oak Model License 1.0.0

Uncategorized
Not OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
Cannot
Must
33 Packages, Including:
@tapjs/after-each@1.1.20
@tapjs/after@1.1.20
@tapjs/asserts@1.1.20
@tapjs/before-each@1.1.20
@tapjs/before@1.1.20
@tapjs/config@2.4.17
@tapjs/core@1.5.2
@tapjs/error-serdes@1.2.2
@tapjs/filter@1.2.20
@tapjs/fixture@1.2.20
@tapjs/intercept@1.2.20
@tapjs/mock@1.3.2
@tapjs/node-serialize@1.3.2
@tapjs/reporter@1.3.18
@tapjs/run@1.5.2
@tapjs/snapshot@1.2.20
@tapjs/spawn@1.1.20
@tapjs/stack@1.2.8
@tapjs/stdin@1.1.20
@tapjs/test@1.4.2
@tapjs/typescript@1.4.2
@tapjs/worker@1.1.20
is-actual-promise@1.0.1
jackspeak@2.3.6
path-scurry@1.10.2
prismjs-terminal@1.2.3
resolve-import@1.4.5
sync-content@1.0.2
tap-parser@15.3.2
tap-yaml@2.2.2
tap@18.7.2
tcompare@6.4.6
tshy@1.14.0

N/A

N/A
24 Packages, Including:
bytes@0.1.0
colors@0.6.2
connect@2.4.6
cookie@0.0.4
crc32@0.2.2
crc@0.2.0
dateformat@1.0.2-1.2.3
formidable@1.0.11
fresh@0.1.0
loggly@0.3.11
mime@1.2.6
package@1.0.1
pause@0.0.1
pkginfo@0.2.3
prompt@0.1.12
qs@0.5.1
range-parser@0.0.4
request@2.9.203
send@0.0.4
temporary@0.0.8
timespan@2.3.0
uglify-js@1.3.5
underscore@1.2.4
winston@0.5.11

Apache License 2.0

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
use-patent-claims
place-warranty
Cannot
hold-liable
use-trademark
Must
include-copyright
include-license
state-changes
include-notice
12 Packages, Including:
@sigstore/bundle@2.3.1
@sigstore/core@1.1.0
@sigstore/protobuf-specs@0.3.1
@sigstore/sign@2.3.0
@sigstore/tuf@2.3.2
@sigstore/verify@1.2.0
exponential-backoff@3.1.1
sigstore@2.3.0
spdx-correct@3.2.0
typescript@5.2.2
typescript@5.4.5
validate-npm-package-license@3.0.4

BSD 3-Clause "New" or "Revised" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
use-trademark
hold-liable
Must
include-copyright
include-license
6 Packages, Including:
diff@4.0.2
diff@5.2.0
istanbul-lib-coverage@3.2.2
istanbul-lib-report@3.0.1
istanbul-reports@3.1.7
sprintf-js@1.1.3

BSD 2-Clause "Simplified" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
hold-liable
Must
include-copyright
include-license
4 Packages, Including:
@base2/pretty-print-object@1.0.1
http-cache-semantics@4.1.1
normalize-package-data@6.0.0
npm-install-checks@6.3.0

GPL

Invalid
Not OSI Approved
2 Packages, Including:
deflate-js@0.2.3
gzip-js@0.3.2

(WTFPL OR MIT)

Permissive
1 Packages, Including:
opener@1.5.2

Creative Commons Attribution 3.0 Unported

Uncategorized
Not OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
Cannot
Must
1 Packages, Including:
spdx-exceptions@2.5.0

Creative Commons Zero v1.0 Universal

Public Domain
Not OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
Cannot
Must
1 Packages, Including:
spdx-license-ids@3.0.17

BSD Zero Clause License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
include-copyright
include-license
include-original
Cannot
hold-liable
Must
1 Packages, Including:
tslib@2.6.2

(MIT OR CC0-1.0)

Public Domain
1 Packages, Including:
type-fest@0.12.0
Disclaimer

This deed highlights only some of the key features and terms of the actual license. It is not a license and has no legal value. You should carefully review all of the terms and conditions of the actual license before using the licensed material.

Sandworm is not a law firm and does not provide legal services. Distributing, displaying, or linking to this deed or the license that it summarizes does not create a lawyer-client or any other relationship.

Direct Dependencies

16
All Dependencies CSV
β“˜ This is a list of grunt 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.
NameVersionSizeLicenseTypeVulnerabilities
async0.1.2212 kBMIT
prod
colors0.6.26.14 kBUNKNOWN
prod
1
connect2.4.673.07 kBUNKNOWN
prod
11
8
9
2
dateformat1.0.2-1.2.33.9 kBUNKNOWN
prod
1
1
glob-whatev0.1.85.08 kBMIT
prod
3
gzip-js0.3.212.8 kBGPL
prod
1
2
2
hooker0.2.38.47 kBMIT
prod
jshint0.5.935.87 kBMIT
prod
1
nodeunit0.7.4520.58 kBMIT
prod
35
2
35
nopt1.0.1010 kBMIT
prod
prompt0.1.1220 kBUNKNOWN
prod
7
2
3
semver1.0.147.84 kBMIT
prod
1
1
temporary0.0.85.22 kBUNKNOWN
prod
2
uglify-js1.3.580.51 kBUNKNOWN
prod
2
1
underscore.string2.1.184.18 kBMIT
prod
1
underscore1.2.460 kBUNKNOWN
prod
1

Visualizations

Frequently Asked Questions

What does grunt do?

Grunt is a powerful JavaScript Task Runner, designed to automate repetitive tasks in the development process. With its numerous plugins, Grunt can handle tasks ranging from linting and minifying files, to unit testing and compiling code, making it an essential tool for any JavaScript developer's toolkit.

How do you use grunt?

To use Grunt, it needs to be installed in your project using npm (Node Package Manager). You can install Grunt by running the following command in your project root:

npm install grunt --save-dev

After installing, you create a 'Gruntfile.js' in your project root where you define your tasks. Here's an example of a basic Gruntfile:

module.exports = function(grunt) {
  // Project configuration.
  grunt.initConfig({
    pkg: grunt.file.readJSON('package.json'), // Read the package.json file
    uglify: { // Task for uglifying JavaScript files
      my_target: {
        files: {
          'dest/output.min.js': ['src/input1.js', 'src/input2.js'] //uglified output of input js files
        }
      }
    }
  });

  // Load the plugin that provides the "uglify" task.
  grunt.loadNpmTasks('grunt-contrib-uglify');

  // Default task(s).
  grunt.registerTask('default', ['uglify']);
};

Once you've defined your tasks in the Gruntfile, you can run them from the command line with:

grunt <task-name>

For the default task, simply run grunt with no arguments.

Where are the grunt docs?

The Grunt documentation is available on the official Grunt website gruntjs.com. Here, you will find detailed guides and tutorials on how to use Grunt, configure Grunt tasks, create your own Grunt plugins, and much more. The support and contributing guidelines can also be accessed from the website.