Generated on May 29, 2024 via pnpm

gulp-htmlmin 1.1.4

gulp plugin to minify HTML.

Package summary

23

issues

5

licenses

Package created

8 Jan 2014

Version published

23 Aug 2015

Maintainers

3

Total deps

103

Direct deps

6

License

MIT

Issues

23

14 high severity issues

uglify-js@2.4.24

Regular Expression Denial of Service in uglify-js

Recommendation: Upgrade to version 2.6.0 or later

via: html-minifier@0.7.2

minimatch@0.3.0

Regular Expression Denial of Service in minimatch

Recommendation: Upgrade to version 3.0.2 or later

via: html-minifier@0.7.2

minimatch@0.3.0

minimatch ReDoS vulnerability

Recommendation: Upgrade to version 3.0.5 or later

via: html-minifier@0.7.2

lodash.template@3.6.2

Command Injection in lodash

Recommendation: None

via: gulp-util@3.0.8

html-minifier@0.7.2

kangax html-minifier REDoS vulnerability

Recommendation: None

via: html-minifier@0.7.2

duplexer2@0.0.2

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: gulp-util@3.0.8

glob@3.2.11

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: html-minifier@0.7.2

source-map@0.1.34

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: html-minifier@0.7.2

source-map@0.1.43

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: html-minifier@0.7.2

uglify-js@2.4.24

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: html-minifier@0.7.2

wordwrap@0.0.2

Package uses an invalid SPDX license ("MIT/X11")

Recommendation: Validate that the package complies with your license policy

via: html-minifier@0.7.2

yargs@3.5.4

Package uses an invalid SPDX license ("MIT/X11")

Recommendation: Validate that the package complies with your license policy

via: html-minifier@0.7.2

gulp-util@3.0.8

Deprecated package

via: gulp-util@3.0.8

minimatch@0.3.0

Deprecated package

via: html-minifier@0.7.2

9 low severity issues

cli@0.6.6

Arbitrary File Write in cli

Recommendation: Upgrade to version 1.0.0 or later

via: html-minifier@0.7.2

clean-css@3.1.9

Regular Expression Denial of Service in clean-css

Recommendation: Upgrade to version 4.1.11 or later

via: html-minifier@0.7.2

duplexer2@0.0.2

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: gulp-util@3.0.8

glob@3.2.11

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: html-minifier@0.7.2

source-map@0.1.34

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: html-minifier@0.7.2

source-map@0.1.43

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: html-minifier@0.7.2

uglify-js@2.4.24

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: html-minifier@0.7.2

wordwrap@0.0.2

Package uses a license that is not OSI approved ("MIT/X11")

Recommendation: Read and validate the license terms

via: html-minifier@0.7.2

yargs@3.5.4

Package uses a license that is not OSI approved ("MIT/X11")

Recommendation: Read and validate the license terms

via: html-minifier@0.7.2

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

91 Packages, Including:

ansi-gray@0.1.1

ansi-regex@2.1.1

ansi-styles@2.2.1

ansi-wrap@0.1.0

array-differ@1.0.0

array-uniq@1.0.3

async@0.2.10

beeper@1.1.1

bufferstreams@1.1.3

camel-case@1.2.2

camelcase@1.2.1

chalk@1.1.3

change-case@2.3.1

clean-css@3.1.9

cli@0.6.6

clone-stats@0.0.1

clone@1.0.4

commander@2.6.0

concat-stream@1.4.11

constant-case@1.1.2

core-util-is@1.0.3

dateformat@2.2.0

decamelize@1.2.0

dot-case@1.1.2

escape-string-regexp@1.0.5

exit@0.1.2

fancy-log@1.3.3

glogg@1.0.2

gulp-htmlmin@1.1.4

gulp-util@3.0.8

gulplog@1.0.0

has-ansi@2.0.0

has-gulplog@0.1.0

html-minifier@0.7.2

is-lower-case@1.1.3

is-upper-case@1.1.2

isarray@0.0.1

isarray@1.0.0

lodash._basecopy@3.0.1

lodash._basetostring@3.0.1

lodash._basevalues@3.0.0

lodash._getnative@3.9.1

lodash._isiterateecall@3.0.9

lodash._reescape@3.0.0

lodash._reevaluate@3.0.0

lodash._reinterpolate@3.0.0

lodash._root@3.0.1

lodash.escape@3.2.0

lodash.isarguments@3.1.0

lodash.isarray@3.0.4

BSD

Invalid

Not OSI Approved

5 Packages, Including:

duplexer2@0.0.2

glob@3.2.11

source-map@0.1.34

source-map@0.1.43

uglify-js@2.4.24

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

4 Packages, Including:

color-support@1.1.3

inherits@2.0.4

lru-cache@2.7.3

sigmund@1.0.1

MIT/X11

Invalid

Not OSI Approved

2 Packages, Including:

wordwrap@0.0.2

yargs@3.5.4

BSD-3-Clause OR MIT

Permissive

1 Packages, Including:

amdefine@1.0.1

Direct Dependencies

6

All Dependencies CSV

ⓘ This is a list of gulp-htmlmin 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
bufferstreams	1.1.3	3.28 kB	MIT	prod
gulp-util	3.0.8	5.36 kB	MIT	prod	3 1
html-minifier	0.7.2	25.31 kB	MIT	prod	11 8
object-assign	4.1.1	2.61 kB	MIT	prod
readable-stream	2.3.8	25.14 kB	MIT	prod
tryit	1.0.3	1.39 kB	MIT	prod

All Versions