Generated on Apr 19, 2024 via pnpm

gulp-svg-sprite 1.3.7

SVG sprites & stacks galore — Gulp plugin wrapping around svg-sprite that reads in a bunch of SVG files, optimizes them and creates SVG sprites and CSS resources in various flavours

gulpplugin

icon

icons

Package summary

issues

licenses

Package created

30 Dec 2014

Version published

1 Jun 2017

Maintainers

Total deps

259

Direct deps

License

MIT

Issues

4 critical severity issues

critical

xmldom@0.1.27

xmldom allows multiple root nodes in a DOM

Recommendation: None

via: svg-sprite@1.3.7

cssmin@0.4.3

Package has no specified license

Recommendation: Check the package code and files for license information

via: svg-sprite@1.3.7

cycle@1.0.3

Package has no specified license

Recommendation: Check the package code and files for license information

via: svg-sprite@1.3.7

progress@1.1.8

Package has no specified license

Recommendation: Check the package code and files for license information

via: svg-sprite@1.3.7

Collapse

Expand

15 high severity issues

high

js-yaml@3.7.0

Code Injection in js-yaml

Recommendation: Upgrade to version 3.13.1 or later

via: svg-sprite@1.3.7

lodash.template@3.6.2

Command Injection in lodash

Recommendation: None

via: gulp-util@3.0.8

duplexer2@0.0.2

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: gulp-util@3.0.8

prettysize@0.1.0

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: svg-sprite@1.3.7

spdx-exceptions@2.5.0

Package uses an atypical license ("CC-BY-3.0")

Recommendation: Read and validate the license terms

via: svg-sprite@1.3.7

xmldom@0.1.27

Package uses an invalid SPDX license ("LGPL")

Recommendation: Validate that the package complies with your license policy

via: svg-sprite@1.3.7

xpath@0.0.24

Package uses an atypical license ("CC-BY-SA-2.0")

Recommendation: Read and validate the license terms

via: svg-sprite@1.3.7

gulp-util@3.0.8

Deprecated package

via: gulp-util@3.0.8

har-validator@5.1.5

Deprecated package

via: svg-sprite@1.3.7

phantomjs-prebuilt@2.1.16

Deprecated package

via: svg-sprite@1.3.7

phantomjs-prebuilt@2.1.16

Package uses install script: "node install.js"

via: svg-sprite@1.3.7

request@2.88.2

Deprecated package

via: svg-sprite@1.3.7

svgo@0.7.2

Deprecated package

via: svg-sprite@1.3.7

uuid@3.4.0

Deprecated package

via: svg-sprite@1.3.7

xmldom@0.1.27

Deprecated package

via: svg-sprite@1.3.7

Collapse

Expand

8 moderate severity issues

moderate

mem@1.1.0

Denial of Service in mem

Recommendation: Upgrade to version 4.0.0 or later

via: svg-sprite@1.3.7

js-yaml@3.7.0

Denial of Service in js-yaml

Recommendation: Upgrade to version 3.13.0 or later

via: svg-sprite@1.3.7

yargs-parser@7.0.0

yargs-parser Vulnerable to Prototype Pollution

Recommendation: Upgrade to version 13.1.2 or later

via: svg-sprite@1.3.7

xmldom@0.1.27

Misinterpretation of malicious XML input

Recommendation: Upgrade to version 0.5.0 or later

via: svg-sprite@1.3.7

xmldom@0.1.27

Misinterpretation of malicious XML input

Recommendation: None

via: svg-sprite@1.3.7

tough-cookie@2.5.0

tough-cookie Prototype Pollution vulnerability

Recommendation: Upgrade to version 4.1.3 or later

via: svg-sprite@1.3.7

request@2.88.2

Server-Side Request Forgery in Request

Recommendation: None

via: svg-sprite@1.3.7

eyes@0.1.8

Package has no specified source code repository

via: svg-sprite@1.3.7

Collapse

Expand

6 low severity issues

low

duplexer2@0.0.2

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: gulp-util@3.0.8

prettysize@0.1.0

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: svg-sprite@1.3.7

spdx-exceptions@2.5.0

Package uses a license that is not OSI approved ("CC-BY-3.0")

Recommendation: Read and validate the license terms

via: svg-sprite@1.3.7

spdx-license-ids@3.0.17

Package uses a license that is not OSI approved ("CC0-1.0")

Recommendation: Read and validate the license terms

via: svg-sprite@1.3.7

xmldom@0.1.27

Package uses a license that is not OSI approved ("LGPL")

Recommendation: Read and validate the license terms

via: svg-sprite@1.3.7

xpath@0.0.24

Package uses a license that is not OSI approved ("CC-BY-SA-2.0")

Recommendation: Read and validate the license terms

via: svg-sprite@1.3.7

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

200 Packages, Including:

ajv@6.12.6

ansi-gray@0.1.1

ansi-regex@2.1.1

ansi-regex@3.0.1

ansi-styles@2.2.1

ansi-wrap@0.1.0

argparse@1.0.10

array-differ@1.0.0

array-uniq@1.0.3

asn1@0.2.6

assert-plus@1.0.0

async@2.6.4

asynckit@0.4.0

aws4@1.12.0

balanced-match@1.0.2

beeper@1.1.1

brace-expansion@1.1.11

buffer-crc32@0.2.13

buffer-from@1.1.2

camelcase@4.1.0

chalk@1.1.3

clap@1.2.3

clone-buffer@1.0.0

clone-stats@0.0.1

clone-stats@1.0.0

clone@1.0.4

clone@2.1.2

cloneable-readable@1.1.3

coa@1.0.4

code-point-at@1.1.0

colors@1.0.3

colors@1.1.2

combined-stream@1.0.8

concat-map@0.0.1

concat-stream@1.6.2

core-util-is@1.0.2

core-util-is@1.0.3

cross-spawn@5.1.0

css-selector-parser@1.4.1

csso@2.3.2

cssom@0.3.8

dashdash@1.14.1

dateformat@2.2.0

debug@2.6.9

decamelize@1.2.0

delayed-stream@1.0.0

ecc-jsbn@0.1.2

error-ex@1.3.2

es6-promise@4.2.8

escape-string-regexp@1.0.5

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

28 Packages, Including:

cliui@3.2.0

color-support@1.1.3

fs.realpath@1.0.0

get-caller-file@1.0.3

glob@7.2.3

graceful-fs@4.2.11

har-schema@2.0.0

hosted-git-info@2.8.9

inflight@1.0.6

inherits@2.0.4

isexe@2.0.0

json-stringify-safe@5.0.1

lru-cache@4.1.5

minimatch@3.1.2

once@1.4.0

pseudomap@1.0.2

remove-trailing-separator@1.1.0

require-main-filename@1.0.1

sax@1.2.4

semver@5.7.2

set-blocking@2.0.0

signal-exit@3.0.7

which-module@2.0.1

which@1.3.1

wrappy@1.0.2

y18n@3.2.2

yallist@2.1.2

yargs-parser@7.0.0

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

10 Packages, Including:

aws-sign2@0.7.0

caseless@0.12.0

forever-agent@0.6.1

kew@0.7.0

oauth-sign@0.9.0

phantomjs-prebuilt@2.1.16

request@2.88.2

spdx-correct@3.2.0

tunnel-agent@0.6.0

validate-npm-package-license@3.0.4

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

5 Packages, Including:

bcrypt-pbkdf@1.0.2

qs@6.5.3

source-map@0.5.7

sprintf-js@1.0.3

tough-cookie@2.5.0

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

5 Packages, Including:

esprima@2.7.3

esprima@4.0.1

extract-zip@1.7.0

normalize-package-data@2.5.0

uri-js@4.4.1

N/A

3 Packages, Including:

cssmin@0.4.3

cycle@1.0.3

progress@1.1.8

BSD

Invalid

Not OSI Approved

2 Packages, Including:

duplexer2@0.0.2

prettysize@0.1.0

(AFL-2.1 OR BSD-3-Clause)

Permissive

1 Packages, Including:

json-schema@0.4.0

Creative Commons Attribution 3.0 Unported

Uncategorized

Not OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

Cannot

Must

1 Packages, Including:

spdx-exceptions@2.5.0

Creative Commons Zero v1.0 Universal

Public Domain

Not OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

Cannot

Must

1 Packages, Including:

spdx-license-ids@3.0.17

The Unlicense

Public Domain

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

private-use

modify

Cannot

include-copyright

hold-liable

Must

1 Packages, Including:

tweetnacl@0.14.5

LGPL

Invalid

Not OSI Approved

1 Packages, Including:

xmldom@0.1.27

Creative Commons Attribution Share Alike 2.0 Generic

Uncategorized

Not OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

Cannot

Must

1 Packages, Including:

xpath@0.0.24

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of gulp-svg-sprite 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
gulp-util	3.0.8	5.36 kB	MIT	prod	3 1
svg-sprite	1.3.7	63.82 kB	MIT	prod	4 12 8 5
through2	2.0.5	3.96 kB	MIT	prod
vinyl	2.2.1	7.4 kB	MIT	prod

Tree

Treemap

Recent Versions

gulp-svg-sprite 1.3.7

Issues

4 critical severity issues

15 high severity issues

8 moderate severity issues

6 low severity issues

Licenses

MIT License

ISC License

Apache License 2.0

BSD 3-Clause "New" or "Revised" License

BSD 2-Clause "Simplified" License

N/A

BSD

(AFL-2.1 OR BSD-3-Clause)

Creative Commons Attribution 3.0 Unported

Creative Commons Zero v1.0 Universal

The Unlicense

LGPL

Creative Commons Attribution Share Alike 2.0 Generic

Direct Dependencies

Visualizations

Recent Versions

Scan your app for security vulnerabilities and license issues

Log into your account

Create your account

gulp-svg-sprite 1.3.7

Issues

4 critical severity issues

15 high severity issues

8 moderate severity issues

6 low severity issues

Licenses

MIT License

ISC License

Apache License 2.0

BSD 3-Clause "New" or "Revised" License

BSD 2-Clause "Simplified" License

N/A

BSD

(AFL-2.1 OR BSD-3-Clause)

Creative Commons Attribution 3.0 Unported

Creative Commons Zero v1.0 Universal

The Unlicense

LGPL

Creative Commons Attribution Share Alike 2.0 Generic

Direct Dependencies

Visualizations

Recent Versions

Scan your app for security vulnerabilities and license issues