Hold on, we're currently generating a fresh version of this report

Generated on May 8, 2024 via pnpm

gulp-eslint 0.15.0

A gulp plugin for processing files with eslint

Package summary

25

issues

7

licenses

Package created

28 Dec 2013

Version published

1 Jul 2015

Maintainers

2

Total deps

127

Direct deps

4

License

UNKNOWN

Issues

25

1 critical severity issue

lodash@3.10.1

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.12 or later

via: eslint@0.24.1

15 high severity issues

minimatch@2.0.10

Regular Expression Denial of Service in minimatch

Recommendation: Upgrade to version 3.0.2 or later

via: eslint@0.24.1

lodash@3.10.1

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.11 or later

via: eslint@0.24.1

lodash@3.10.1

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.19 or later

via: eslint@0.24.1

minimatch@2.0.10

minimatch ReDoS vulnerability

Recommendation: Upgrade to version 3.0.5 or later

via: eslint@0.24.1

lodash.template@3.6.2

Command Injection in lodash

Recommendation: None

via: gulp-util@3.0.8

lodash@3.10.1

Command Injection in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: eslint@0.24.1

doctrine@0.6.4

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: eslint@0.24.1

duplexer2@0.0.2

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: gulp-util@3.0.8

espree@2.2.5

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: eslint@0.24.1

esutils@1.1.6

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: eslint@0.24.1

mute-stream@0.0.4

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: eslint@0.24.1

xml-escape@1.0.0

Package uses an invalid SPDX license ("MIT License")

Recommendation: Validate that the package complies with your license policy

via: eslint@0.24.1

es5-ext@0.10.64

Package uses postinstall script: " node -e "try{require('./_postinstall')}catch(e){}" || exit 0"

via: eslint@0.24.1

gulp-util@3.0.8

Deprecated package

via: gulp-util@3.0.8

minimatch@2.0.10

Deprecated package

via: eslint@0.24.1

3 moderate severity issues

lodash@3.10.1

Regular Expression Denial of Service (ReDoS) in lodash

Recommendation: Upgrade to version 4.17.11 or later

via: eslint@0.24.1

lodash@3.10.1

Regular Expression Denial of Service (ReDoS) in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: eslint@0.24.1

lodash@3.10.1

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.5 or later

via: eslint@0.24.1

6 low severity issues

doctrine@0.6.4

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: eslint@0.24.1

duplexer2@0.0.2

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: gulp-util@3.0.8

espree@2.2.5

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: eslint@0.24.1

esutils@1.1.6

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: eslint@0.24.1

mute-stream@0.0.4

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: eslint@0.24.1

xml-escape@1.0.0

Package uses a license that is not OSI approved ("MIT License")

Recommendation: Read and validate the license terms

via: eslint@0.24.1

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

101 Packages, Including:

ansi-gray@0.1.1

ansi-regex@1.1.1

ansi-regex@2.1.1

ansi-styles@2.2.1

ansi-wrap@0.1.0

argparse@1.0.10

array-differ@1.0.0

array-uniq@1.0.3

balanced-match@1.0.2

beeper@1.1.1

brace-expansion@1.1.11

buffer-from@1.1.2

bufferstreams@1.0.2

chalk@1.1.3

clone-stats@0.0.1

clone@1.0.4

concat-map@0.0.1

concat-stream@1.6.2

core-util-is@1.0.3

dateformat@2.2.0

debug@2.6.9

deep-is@0.1.4

es6-iterator@2.0.3

es6-map@0.1.5

escape-string-regexp@1.0.5

eslint@0.24.1

estraverse-fb@1.3.2

event-emitter@0.3.5

fancy-log@1.3.3

fast-levenshtein@1.0.7

figures@1.7.0

generate-function@2.3.1

generate-object-property@1.2.0

globals@8.18.0

glogg@1.0.2

gulp-eslint@0.15.0

gulp-util@3.0.8

gulplog@1.0.0

has-ansi@2.0.0

has-gulplog@0.1.0

inquirer@0.8.5

is-my-ip-valid@1.0.1

is-my-json-valid@2.20.6

is-property@1.0.2

isarray@0.0.1

isarray@1.0.0

js-yaml@3.14.1

jsonpointer@5.0.1

levn@0.2.5

lodash._basecopy@3.0.1

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

13 Packages, Including:

cli-width@1.1.1

color-support@1.1.3

d@1.0.2

es5-ext@0.10.64

es6-set@0.1.6

es6-symbol@3.1.4

es6-weak-map@2.0.3

esniff@2.0.1

ext@1.7.0

inherits@2.0.4

minimatch@2.0.10

next-tick@1.1.0

type@2.7.2

BSD

Invalid

Not OSI Approved

5 Packages, Including:

doctrine@0.6.4

duplexer2@0.0.2

espree@2.2.5

esutils@1.1.6

mute-stream@0.0.4

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

5 Packages, Including:

escope@3.6.0

esprima@4.0.1

esrecurse@4.3.0

estraverse@4.3.0

estraverse@5.3.0

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

1 Packages, Including:

rx@2.5.3

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

1 Packages, Including:

sprintf-js@1.0.3

MIT License

Invalid

Not OSI Approved

1 Packages, Including:

xml-escape@1.0.0

Direct Dependencies

4

All Dependencies CSV

ⓘ This is a list of gulp-eslint 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
bufferstreams	1.0.2	3.75 kB	MIT	prod
eslint	0.24.1	123.04 kB	MIT	prod	1 12 3 5
gulp-util	3.0.8	5.36 kB	MIT	prod	3 1
object-assign	3.0.0	1.96 kB	MIT	prod

Recent Versions