Generated on Dec 7, 2023 via pnpm

Npm

Home

homebridge-config-ui-x 4.53.0

A web based management, configuration and control platform for Homebridge.

Package summary

issues

licenses

Package created

22 Dec 2017

Version published

24 Nov 2023

Maintainers

Total deps

315

Direct deps

License

MIT

Issues

3 critical severity issues

critical

buffers@0.1.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: unzipper@0.10.14

pause@0.0.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: @nestjs/passport@10.0.2 & others

thirty-two@1.0.2

Package has no specified license

Recommendation: Check the package code and files for license information

via: otplib@12.0.1

Collapse

Expand

8 high severity issues

high

chainsaw@0.1.0

Package uses an invalid SPDX license ("MIT/X11")

Recommendation: Validate that the package complies with your license policy

via: unzipper@0.10.14

traverse@0.3.9

Package uses an invalid SPDX license ("MIT/X11")

Recommendation: Validate that the package complies with your license policy

via: unzipper@0.10.14

@oznu/hap-client@1.9.0

Package uses a problematic Strongly Protective license ("GPL-3.0")

Recommendation: Validate that the package complies with your license policy

via: @oznu/hap-client@1.9.0

rc@1.2.8

Package uses a custom license expression: `(BSD-2-Clause OR MIT OR Apache-2.0)`

Recommendation: Validate that the license expression complies with your license policy

via: @homebridge/node-pty-prebuilt-multiarch@0.11.12

@homebridge/node-pty-prebuilt-multiarch@0.11.12

Package uses install script: "node scripts/check-prebuild.js || prebuild-install --verbose || node scripts/install.js"

via: @homebridge/node-pty-prebuilt-multiarch@0.11.12

@homebridge/node-pty-prebuilt-multiarch@0.11.12

Package uses postinstall script: "node scripts/post-install.js"

via: @homebridge/node-pty-prebuilt-multiarch@0.11.12

@nestjs/core@10.2.10

Package uses postinstall script: "opencollective || exit 0"

via: @nestjs/core@10.2.10 & others

core-js-pure@3.34.0

Package uses postinstall script: "node -e "try{require('./postinstall')}catch(e){}""

via: @oznu/hap-client@1.9.0

Collapse

Expand

2 moderate severity issues

moderate

axios@0.27.2

Axios Cross-Site Request Forgery Vulnerability

Recommendation: Upgrade to version 1.6.0 or later

via: @oznu/hap-client@1.9.0

pause@0.0.1

Package has no specified source code repository

via: @nestjs/passport@10.0.2 & others

Collapse

Expand

3 low severity issues

low

chainsaw@0.1.0

Package uses a license that is not OSI approved ("MIT/X11")

Recommendation: Read and validate the license terms

via: unzipper@0.10.14

traverse@0.3.9

Package uses a license that is not OSI approved ("MIT/X11")

Recommendation: Read and validate the license terms

via: unzipper@0.10.14

@oznu/hap-client@1.9.0

Package uses a deprecated license ("GPL-3.0")

via: @oznu/hap-client@1.9.0

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

261 Packages, Including:

@babel/runtime-corejs3@7.23.5

@fastify/accept-negotiator@1.1.0

@fastify/ajv-compiler@3.5.0

@fastify/busboy@1.2.1

@fastify/cors@8.4.1

@fastify/deepmerge@1.3.0

@fastify/error@3.4.1

@fastify/fast-json-stringify-compiler@4.3.0

@fastify/formbody@7.4.0

@fastify/helmet@11.1.1

@fastify/middie@8.3.0

@fastify/multipart@8.0.0

@fastify/send@2.1.0

@fastify/static@6.12.0

@fastify/swagger-ui@1.10.2

@fastify/swagger@8.12.0

@homebridge/node-pty-prebuilt-multiarch@0.11.12

@leichtgewicht/ip-codec@2.0.4

@lukeed/csprng@1.1.0

@lukeed/ms@2.0.2

@nestjs/axios@3.0.1

@nestjs/common@10.2.10

@nestjs/core@10.2.10

@nestjs/jwt@10.2.0

@nestjs/mapped-types@2.0.3

@nestjs/passport@10.0.2

@nestjs/platform-fastify@10.2.10

@nestjs/platform-socket.io@10.2.10

@nestjs/swagger@7.1.16

@nestjs/websockets@10.2.10

@nuxtjs/opencollective@0.3.2

@otplib/core@12.0.1

@otplib/plugin-crypto@12.0.1

@otplib/plugin-thirty-two@12.0.1

@otplib/preset-default@12.0.1

@otplib/preset-v11@12.0.1

@socket.io/component-emitter@3.1.0

@types/cookie@0.4.1

@types/cors@2.8.17

@types/jsonwebtoken@9.0.5

@types/node@20.10.3

@types/validator@13.11.7

abort-controller@3.0.0

abstract-logging@2.0.1

accepts@1.3.8

ajv-formats@2.1.1

ajv@8.12.0

ansi-regex@5.0.1

ansi-styles@4.3.0

archy@1.0.0

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

29 Packages, Including:

chownr@1.1.4

chownr@2.0.0

fastq@1.15.0

fs-minipass@2.1.0

fs.realpath@1.0.0

fstream@1.0.12

glob@7.2.3

glob@8.1.0

graceful-fs@4.2.11

inflight@1.0.6

inherits@2.0.4

ini@1.3.8

iterare@1.2.1

listenercount@1.0.1

lru-cache@6.0.0

minimatch@3.1.2

minimatch@5.1.6

minipass@3.3.6

minipass@5.0.0

once@1.4.0

rimraf@2.7.1

semver@7.5.4

setprototypeof@1.2.0

signal-exit@3.0.7

split2@4.2.0

tar@6.2.0

wrappy@1.0.2

yallist@4.0.0

yaml@2.3.4

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

6 Packages, Including:

buffer-equal-constant-time@1.0.1

duplexer2@0.1.4

ieee754@1.2.1

light-my-request@5.11.0

secure-json-parse@2.7.0

source-map@0.6.1

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

6 Packages, Including:

detect-libc@2.0.2

ecdsa-sig-formatter@1.0.11

reflect-metadata@0.1.13

rxjs@7.8.1

swagger-ui-dist@5.9.1

tunnel-agent@0.6.0

N/A

3 Packages, Including:

buffers@0.1.1

pause@0.0.1

thirty-two@1.0.2

MIT/X11

Invalid

Not OSI Approved

2 Packages, Including:

chainsaw@0.1.0

traverse@0.3.9

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

2 Packages, Including:

uri-js@4.4.1

webidl-conversions@3.0.1

GNU General Public License v3.0 only

Strongly Protective

OSI Approved

Deprecated

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

use-patent-claims

Cannot

sublicense

hold-liable

Must

include-original

state-changes

disclose-source

include-license

include-copyright

include-install-instructions

1 Packages, Including:

@oznu/hap-client@1.9.0

Python License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

state-changes

1 Packages, Including:

argparse@2.0.1

The Unlicense

Public Domain

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

private-use

modify

Cannot

include-copyright

hold-liable

Must

1 Packages, Including:

big-integer@1.6.52

(MIT OR WTFPL)

Permissive

1 Packages, Including:

expand-template@2.0.3

(BSD-2-Clause OR MIT OR Apache-2.0)

Expression

1 Packages, Including:

rc@1.2.8

BSD Zero Clause License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

include-copyright

include-license

include-original

Cannot

hold-liable

Must

1 Packages, Including:

tslib@2.6.2

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of homebridge-config-ui-x 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
@fastify/helmet	11.1.1	10.05 kB	MIT	prod
@fastify/multipart	8.0.0	23.97 kB	MIT	prod
@fastify/static	6.12.0	241.92 kB	MIT	prod peer
@fastify/swagger	8.12.0	42.93 kB	MIT	prod
@homebridge/node-pty-prebuilt-multiarch	0.11.12	1.18 MB	MIT	prod	3
@nestjs/axios	3.0.1	5.77 kB	MIT	prod
@nestjs/common	10.2.10	86.52 kB	MIT	prod peer
@nestjs/core	10.2.10	107.95 kB	MIT	prod peer	1
@nestjs/jwt	10.2.0	15.53 kB	MIT	prod
@nestjs/passport	10.0.2	6.32 kB	MIT	prod	1 1
@nestjs/platform-fastify	10.2.10	12.59 kB	MIT	prod	1
@nestjs/platform-socket.io	10.2.10	5.76 kB	MIT	prod peer	1
@nestjs/swagger	7.1.16	60.05 kB	MIT	prod	1
@nestjs/websockets	10.2.10	19.92 kB	MIT	prod peer	1
@oznu/hap-client	1.9.0	38.96 kB	GPL-3.0	prod	2 1 1
axios	1.6.2	443.95 kB	MIT	prod peer
bash-color	0.0.4	3.26 kB	MIT	prod
buffer-shims	1.0.0	2.11 kB	MIT	prod
class-transformer	0.5.1	108.56 kB	MIT	prod peer
class-validator	0.14.0	711.23 kB	MIT	prod peer
commander	11.1.0	44.69 kB	MIT	prod
dayjs	1.11.10	137.62 kB	MIT	prod
fastify	4.24.3	412.12 kB	MIT	prod
fs-extra	11.1.1	15.45 kB	MIT	prod
jsonwebtoken	9.0.2	11.94 kB	MIT	prod
lodash	4.17.21	311.49 kB	MIT	prod
node-cache	5.1.2	15.62 kB	MIT	prod
node-schedule	2.1.1	11.07 kB	MIT	prod
ora	5.4.1	6.74 kB	MIT	prod
otplib	12.0.1	8.3 kB	MIT	prod	1
p-limit	3.1.0	3.19 kB	MIT	prod
passport-jwt	4.0.1	11.66 kB	MIT	prod
passport	0.6.0	42.39 kB	MIT	prod peer	1 1
reflect-metadata	0.1.13	44.83 kB	Apache-2.0	prod peer
rxjs	7.8.1	734.42 kB	Apache-2.0	prod peer
semver	7.5.4	26.25 kB	ISC	prod
systeminformation	5.21.18	124.19 kB	MIT	prod
tail	2.2.6	11.03 kB	MIT	prod
tar	6.2.0	41.43 kB	ISC	prod
tcp-port-used	1.0.2	6.15 kB	MIT	prod
unzipper	0.10.14	14.56 kB	MIT	prod	1 2 2