Generated on May 27, 2024 via pnpm

Npm

Home

handbrake-js 2.0.7

Handbrake for node.js. Brings video encoding.

handbrake

encode

transcode

Package summary

issues

licenses

Package created

13 Mar 2013

Version published

28 Nov 2015

Maintainers

Total deps

107

Direct deps

License

MIT

Issues

5 critical severity issues

critical

deep-extend@0.4.2

Prototype Pollution in deep-extend

Recommendation: Upgrade to version 0.5.1 or later

via: command-line-args@2.1.6

buffers@0.1.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: unzip@0.1.11

console-dope@0.3.6

Package has no specified license

Recommendation: Check the package code and files for license information

via: console-dope@0.3.6

more-fs@0.5.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: more-fs@0.5.0

object-to-spawn-args@0.1.2

Package has no specified license

Recommendation: Check the package code and files for license information

via: object-to-spawn-args@0.1.2

Collapse

Expand

15 high severity issues

high

minimatch@2.0.10

Regular Expression Denial of Service in minimatch

Recommendation: Upgrade to version 3.0.2 or later

via: more-fs@0.5.0

fstream@0.1.31

Arbitrary File Overwrite in fstream

Recommendation: Upgrade to version 1.0.12 or later

via: unzip@0.1.11

minimatch@2.0.10

minimatch ReDoS vulnerability

Recommendation: Upgrade to version 3.0.5 or later

via: more-fs@0.5.0

chainsaw@0.1.0

Package uses an invalid SPDX license ("MIT/X11")

Recommendation: Validate that the package complies with your license policy

via: unzip@0.1.11

traverse@0.3.9

Package uses an invalid SPDX license ("MIT/X11")

Recommendation: Validate that the package complies with your license policy

via: unzip@0.1.11

fstream@0.1.31

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: unzip@0.1.11

core-js@2.6.12

Deprecated package

via: command-line-args@2.1.6

core-js@2.6.12

Package uses postinstall script: "node -e "try{require('./postinstall')}catch(e){}""

via: command-line-args@2.1.6

handbrake-js@2.0.7

Package uses postinstall script: "node scripts/install.js"

via: handbrake-js@2.0.7

har-validator@5.1.5

Deprecated package

via: request@2.88.2

minimatch@2.0.10

Deprecated package

via: more-fs@0.5.0

more-fs@0.5.0

Deprecated package

via: more-fs@0.5.0

natives@1.1.6

Deprecated package

via: unzip@0.1.11

request@2.88.2

Deprecated package

via: request@2.88.2

uuid@3.4.0

Deprecated package

via: request@2.88.2

Collapse

Expand

2 moderate severity issues

moderate

tough-cookie@2.5.0

tough-cookie Prototype Pollution vulnerability

Recommendation: Upgrade to version 4.1.3 or later

via: request@2.88.2

request@2.88.2

Server-Side Request Forgery in Request

Recommendation: None

via: request@2.88.2

Collapse

Expand

3 low severity issues

low

chainsaw@0.1.0

Package uses a license that is not OSI approved ("MIT/X11")

Recommendation: Read and validate the license terms

via: unzip@0.1.11

traverse@0.3.9

Package uses a license that is not OSI approved ("MIT/X11")

Recommendation: Read and validate the license terms

via: unzip@0.1.11

fstream@0.1.31

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: unzip@0.1.11

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

74 Packages, Including:

ajv@6.12.6

ansi-escape-sequences@2.2.2

array-back@1.0.4

array-tools@1.8.6

asn1@0.2.6

assert-plus@1.0.0

asynckit@0.4.0

aws4@1.13.0

balanced-match@1.0.2

binary@0.3.0

brace-expansion@1.1.11

collect-all@0.2.1

collect-all@1.0.4

collect-json@1.0.9

column-layout@2.1.4

combined-stream@1.0.8

command-line-args@2.1.6

command-line-usage@2.0.5

concat-map@0.0.1

core-js@2.6.12

core-util-is@1.0.2

core-util-is@1.0.3

dashdash@1.14.1

deep-extend@0.4.2

delayed-stream@1.0.0

ecc-jsbn@0.1.2

extend@3.0.2

extsprintf@1.3.0

fast-deep-equal@3.1.3

fast-json-stable-stringify@2.1.0

feature-detect-es6@1.5.0

find-replace@1.0.3

form-data@2.3.3

getpass@0.1.7

handbrake-js@2.0.7

har-validator@5.1.5

http-signature@1.2.0

is-typedarray@1.0.0

isarray@0.0.1

isstream@0.1.2

jsbn@0.1.1

json-schema-traverse@0.4.1

jsprim@1.4.2

match-stream@0.0.2

mime-db@1.52.0

mime-types@2.1.35

minimist@1.2.8

mkdirp@0.5.6

object-get@2.1.1

object-tools@1.6.7

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

14 Packages, Including:

fs.realpath@1.0.0

glob@4.5.3

glob@7.2.3

graceful-fs@3.0.12

har-schema@2.0.0

inflight@1.0.6

inherits@2.0.4

json-stringify-safe@5.0.1

minimatch@2.0.10

minimatch@3.1.2

natives@1.1.6

once@1.4.0

rimraf@2.7.1

wrappy@1.0.2

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

6 Packages, Including:

aws-sign2@0.7.0

caseless@0.12.0

forever-agent@0.6.1

oauth-sign@0.9.0

request@2.88.2

tunnel-agent@0.6.0

N/A

4 Packages, Including:

buffers@0.1.1

console-dope@0.3.6

more-fs@0.5.0

object-to-spawn-args@0.1.2

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

3 Packages, Including:

bcrypt-pbkdf@1.0.2

qs@6.5.3

tough-cookie@2.5.0

MIT/X11

Invalid

Not OSI Approved

2 Packages, Including:

chainsaw@0.1.0

traverse@0.3.9

BSD

Invalid

Not OSI Approved

1 Packages, Including:

fstream@0.1.31

(AFL-2.1 OR BSD-3-Clause)

Permissive

1 Packages, Including:

json-schema@0.4.0

The Unlicense

Public Domain

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

private-use

modify

Cannot

include-copyright

hold-liable

Must

1 Packages, Including:

tweetnacl@0.14.5

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

1 Packages, Including:

uri-js@4.4.1

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of handbrake-js 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
command-line-args	2.1.6	838.17 kB	MIT	prod	1 2
console-dope	0.3.6	2.56 kB	UNKNOWN	prod	1
more-fs	0.5.0	2.75 kB	UNKNOWN	prod	1 4
object-to-spawn-args	0.1.2	1.45 kB	UNKNOWN	prod	1
request	2.88.2	57.83 kB	Apache-2.0	prod	3 2
unzip	0.1.11	8.62 kB	MIT	prod	1 5 3