Home
Docs
GitHub
Pricing
Blog
Log In

Run Sandworm Audit for your App

Get started
Hold on, we're currently generating a fresh version of this report
Generated on Mar 29, 2024 via pnpm
Package summary
Share
36
issues
6
critical severity
vulnerability
3
license
3
18
high severity
vulnerability
9
license
4
meta
5
7
moderate severity
vulnerability
6
meta
1
5
low severity
vulnerability
1
license
4
4
licenses
18
MIT
5
ISC
4
BSD
3
N/A
Package created
12 Jan 2012
Version published
18 Feb 2013
Maintainers
4
Total deps
30
Direct deps
16
License
UNKNOWN

Issues

36

6 critical severity issues

critical
Recommendation: Upgrade to version 2.0.5 or later
via: js-yaml@1.0.3
Recommendation: Upgrade to version 4.17.12 or later
via: findup-sync@0.1.3 & others
Recommendation: Upgrade to version 1.12.1 or later
via: js-yaml@1.0.3
Recommendation: Check the package code and files for license information
via: colors@0.6.2
Recommendation: Check the package code and files for license information
via: dateformat@1.0.2-1.2.3
Recommendation: Check the package code and files for license information
via: glob@3.1.21
Collapse
Expand

18 high severity issues

high
Recommendation: Upgrade to version 1.3.0 or later
via: grunt@0.4.0
Recommendation: Upgrade to version 1.5.3 or later
via: grunt@0.4.0
Recommendation: Upgrade to version 1.3.0 or later
via: grunt@0.4.0
Recommendation: Upgrade to version 1.5.3 or later
via: grunt@0.4.0
Recommendation: Upgrade to version 3.0.2 or later
via: findup-sync@0.1.3 & others
Recommendation: Upgrade to version 4.17.11 or later
via: findup-sync@0.1.3 & others
Recommendation: Upgrade to version 3.13.1 or later
via: js-yaml@1.0.3
Recommendation: Upgrade to version 3.0.5 or later
via: findup-sync@0.1.3 & others
Recommendation: Upgrade to version 4.17.21 or later
via: findup-sync@0.1.3 & others
Recommendation: Validate that the package complies with your license policy
via: glob@3.1.21
Recommendation: Validate that the package complies with your license policy
via: findup-sync@0.1.3
Recommendation: Validate that the package complies with your license policy
via: rimraf@2.0.3
Recommendation: Validate that the package complies with your license policy
via: glob@3.1.21
via: coffee-script@1.3.3
via: rimraf@2.0.3
via: glob@3.1.21
via: glob@3.1.21 & others
via: findup-sync@0.1.3
Collapse
Expand

7 moderate severity issues

moderate
Recommendation: Upgrade to version 1.5.2 or later
via: grunt@0.4.0
Recommendation: Upgrade to version 4.17.11 or later
via: findup-sync@0.1.3 & others
Recommendation: Upgrade to version 3.3.5 or later
via: js-yaml@1.0.3 & others
Recommendation: Upgrade to version 3.13.0 or later
via: js-yaml@1.0.3
Recommendation: Upgrade to version 1.5.2 or later
via: grunt@0.4.0
Recommendation: Upgrade to version 4.17.21 or later
via: findup-sync@0.1.3 & others
via: dateformat@1.0.2-1.2.3
Collapse
Expand

5 low severity issues

low
Recommendation: Upgrade to version 4.17.5 or later
via: findup-sync@0.1.3 & others
Recommendation: Read and validate the license terms
via: glob@3.1.21
Recommendation: Read and validate the license terms
via: findup-sync@0.1.3
Recommendation: Read and validate the license terms
via: rimraf@2.0.3
Recommendation: Read and validate the license terms
via: glob@3.1.21
Collapse
Expand

Licenses

MIT License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
Cannot
hold-liable
Must
include-copyright
include-license
18 Packages, Including:
argparse@0.1.16
async@0.1.22
coffee-script@1.3.3
eventemitter2@0.4.14
findup-sync@0.1.3
grunt@0.4.0
hooker@0.2.3
iconv-lite@0.2.11
js-yaml@1.0.3
lodash@0.9.2
lodash@2.4.2
minimatch@0.2.14
minimatch@0.3.0
nopt@1.0.10
rimraf@2.0.3
underscore.string@2.2.1
underscore.string@2.4.0
underscore@1.7.0

ISC License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
Cannot
hold-liable
Must
include-copyright
include-license
5 Packages, Including:
abbrev@1.1.1
inherits@2.0.4
lru-cache@2.7.3
sigmund@1.0.1
which@1.0.9

BSD

Invalid
Not OSI Approved
4 Packages, Including:
glob@3.1.21
glob@3.2.11
graceful-fs@1.1.14
graceful-fs@1.2.3

N/A

N/A
3 Packages, Including:
colors@0.6.2
dateformat@1.0.2-1.2.3
inherits@1.0.2
Disclaimer

This deed highlights only some of the key features and terms of the actual license. It is not a license and has no legal value. You should carefully review all of the terms and conditions of the actual license before using the licensed material.

Sandworm is not a law firm and does not provide legal services. Distributing, displaying, or linking to this deed or the license that it summarizes does not create a lawyer-client or any other relationship.

Direct Dependencies

16
All Dependencies CSV
β“˜ This is a list of grunt 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.
NameVersionSizeLicenseTypeVulnerabilities
async0.1.2212 kBMIT
prod
coffee-script1.3.366.24 kBMIT
prod
1
colors0.6.26.14 kBUNKNOWN
prod
1
dateformat1.0.2-1.2.33.9 kBUNKNOWN
prod
1
1
eventemitter20.4.146.79 kBMIT
prod
findup-sync0.1.33.41 kBMIT
prod
1
6
2
2
glob3.1.2114.53 kBBSD
prod
1
6
2
hooker0.2.38.47 kBMIT
prod
iconv-lite0.2.11229.65 kBMIT
prod
js-yaml1.0.395.05 kBMIT
prod
2
1
2
lodash0.9.266.12 kBMIT
prod
1
2
2
1
minimatch0.2.1417.17 kBMIT
prod
3
nopt1.0.1010 kBMIT
prod
rimraf2.0.33.32 kBMIT
prod
2
1
underscore.string2.2.184.91 kBMIT
prod
1
which1.0.92.23 kBISC
prod

Visualizations

Frequently Asked Questions

What does grunt do?

Grunt is a powerful JavaScript Task Runner, designed to automate repetitive tasks in the development process. With its numerous plugins, Grunt can handle tasks ranging from linting and minifying files, to unit testing and compiling code, making it an essential tool for any JavaScript developer's toolkit.

How do you use grunt?

To use Grunt, it needs to be installed in your project using npm (Node Package Manager). You can install Grunt by running the following command in your project root:

npm install grunt --save-dev

After installing, you create a 'Gruntfile.js' in your project root where you define your tasks. Here's an example of a basic Gruntfile:

module.exports = function(grunt) {
  // Project configuration.
  grunt.initConfig({
    pkg: grunt.file.readJSON('package.json'), // Read the package.json file
    uglify: { // Task for uglifying JavaScript files
      my_target: {
        files: {
          'dest/output.min.js': ['src/input1.js', 'src/input2.js'] //uglified output of input js files
        }
      }
    }
  });

  // Load the plugin that provides the "uglify" task.
  grunt.loadNpmTasks('grunt-contrib-uglify');

  // Default task(s).
  grunt.registerTask('default', ['uglify']);
};

Once you've defined your tasks in the Gruntfile, you can run them from the command line with:

grunt <task-name>

For the default task, simply run grunt with no arguments.

Where are the grunt docs?

The Grunt documentation is available on the official Grunt website gruntjs.com. Here, you will find detailed guides and tutorials on how to use Grunt, configure Grunt tasks, create your own Grunt plugins, and much more. The support and contributing guidelines can also be accessed from the website.