Generated on Jun 1, 2024 via pnpm

Npm

Home

imagemin-optipng 1.0.0

optipng image-min plugin

compress

image

imageminplugin

Package summary

issues

licenses

Package created

23 Apr 2014

Version published

21 Aug 2014

Maintainers

Total deps

249

Direct deps

License

MIT

Issues

5 critical severity issues

critical

deep-extend@0.2.11

Prototype Pollution in deep-extend

Recommendation: Upgrade to version 0.5.1 or later

via: optipng-bin@1.0.1

minimist@0.0.10

Prototype Pollution in minimist

Recommendation: Upgrade to version 0.2.4 or later

via: optipng-bin@1.0.1

lodash@1.0.2

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.12 or later

via: optipng-bin@1.0.1

inherits@1.0.2

Package has no specified license

Recommendation: Check the package code and files for license information

via: optipng-bin@1.0.1

progress@1.1.8

Package has no specified license

Recommendation: Check the package code and files for license information

via: optipng-bin@1.0.1

Collapse

Expand

25 high severity issues

high

url-regex@2.1.3

Regular expression denial of service in url-regex

Recommendation: None

via: optipng-bin@1.0.1

semver@3.0.1

Regular Expression Denial of Service in semver

Recommendation: Upgrade to version 4.3.2 or later

via: optipng-bin@1.0.1

semver-regex@1.0.0

semver-regex Regular Expression Denial of Service (ReDOS)

Recommendation: Upgrade to version 3.1.3 or later

via: optipng-bin@1.0.1

minimatch@2.0.10

Regular Expression Denial of Service in minimatch

Recommendation: Upgrade to version 3.0.2 or later

via: optipng-bin@1.0.1

lodash@1.0.2

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.11 or later

via: optipng-bin@1.0.1

trim-newlines@1.0.0

Uncontrolled Resource Consumption in trim-newlines

Recommendation: Upgrade to version 3.0.1 or later

via: optipng-bin@1.0.1

minimatch@2.0.10

minimatch ReDoS vulnerability

Recommendation: Upgrade to version 3.0.5 or later

via: optipng-bin@1.0.1

lodash@1.0.2

Command Injection in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: optipng-bin@1.0.1

glob@3.1.21

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: optipng-bin@1.0.1

graceful-fs@1.2.3

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: optipng-bin@1.0.1

semver@3.0.1

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: optipng-bin@1.0.1

unique-stream@1.0.0

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: optipng-bin@1.0.1

rc@0.5.5

Package uses a custom license expression: `(BSD OR MIT OR Apache2)`

Recommendation: Validate that the license expression complies with your license policy

via: optipng-bin@1.0.1

spdx-exceptions@2.5.0

Package uses an atypical license ("CC-BY-3.0")

Recommendation: Read and validate the license terms

via: optipng-bin@1.0.1

find-file@1.0.1

Deprecated package

via: optipng-bin@1.0.1

graceful-fs@1.2.3

Deprecated package

via: optipng-bin@1.0.1

har-validator@5.1.5

Deprecated package

via: optipng-bin@1.0.1

minimatch@0.2.14

Deprecated package

via: optipng-bin@1.0.1

minimatch@2.0.10

Deprecated package

via: optipng-bin@1.0.1

natives@1.1.6

Deprecated package

via: optipng-bin@1.0.1

optipng-bin@1.0.1

Package uses postinstall script: "node lib/install.js"

via: optipng-bin@1.0.1

request@2.88.2

Deprecated package

via: optipng-bin@1.0.1

spawn-sync@1.0.15

Package uses postinstall script: "node postinstall"

via: optipng-bin@1.0.1

uuid@2.0.3

Deprecated package

via: exec-buffer@1.1.2 & others

uuid@3.4.0

Deprecated package

via: optipng-bin@1.0.1

Collapse

Expand

8 moderate severity issues

moderate

lodash@1.0.2

Regular Expression Denial of Service (ReDoS) in lodash

Recommendation: Upgrade to version 4.17.11 or later

via: optipng-bin@1.0.1

bl@0.9.5

Remote Memory Exposure in bl

Recommendation: Upgrade to version 1.2.3 or later

via: optipng-bin@1.0.1

lodash@1.0.2

Regular Expression Denial of Service (ReDoS) in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: optipng-bin@1.0.1

minimist@0.0.10

Prototype Pollution in minimist

Recommendation: Upgrade to version 0.2.1 or later

via: optipng-bin@1.0.1

semver@3.0.1

semver vulnerable to Regular Expression Denial of Service

Recommendation: Upgrade to version 5.7.2 or later

via: optipng-bin@1.0.1

tough-cookie@2.5.0

tough-cookie Prototype Pollution vulnerability

Recommendation: Upgrade to version 4.1.3 or later

via: optipng-bin@1.0.1

request@2.88.2

Server-Side Request Forgery in Request

Recommendation: None

via: optipng-bin@1.0.1

lodash@1.0.2

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.5 or later

via: optipng-bin@1.0.1

Collapse

Expand

7 low severity issues

low

semver-regex@1.0.0

Regular expression denial of service in semver-regex

Recommendation: Upgrade to version 3.1.4 or later

via: optipng-bin@1.0.1

glob@3.1.21

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: optipng-bin@1.0.1

graceful-fs@1.2.3

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: optipng-bin@1.0.1

semver@3.0.1

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: optipng-bin@1.0.1

unique-stream@1.0.0

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: optipng-bin@1.0.1

spdx-exceptions@2.5.0

Package uses a license that is not OSI approved ("CC-BY-3.0")

Recommendation: Read and validate the license terms

via: optipng-bin@1.0.1

spdx-license-ids@3.0.18

Package uses a license that is not OSI approved ("CC0-1.0")

Recommendation: Read and validate the license terms

via: optipng-bin@1.0.1

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

201 Packages, Including:

ajv@6.12.6

ansi-regex@0.2.1

ansi-regex@2.1.1

ansi-styles@1.1.0

ansi-styles@2.2.1

array-find-index@1.0.2

array-uniq@1.0.3

asn1@0.2.6

assert-plus@1.0.0

asynckit@0.4.0

aws4@1.13.0

balanced-match@1.0.2

bin-build@1.1.0

bin-check@1.1.0

bin-version-check@1.0.0

bin-version@1.0.4

bin-wrapper@1.0.5

bl@0.9.5

bl@1.2.3

brace-expansion@1.1.11

buffer-alloc-unsafe@1.1.0

buffer-alloc@1.2.0

buffer-crc32@0.2.13

buffer-fill@1.0.0

buffer-from@1.1.2

camelcase-keys@1.0.0

camelcase-keys@2.1.0

camelcase@1.2.1

camelcase@2.1.1

chalk@0.5.1

chalk@1.1.3

clone-stats@0.0.1

clone@0.2.0

clone@1.0.4

co@3.1.0

combined-stream@1.0.8

commander@2.20.3

concat-map@0.0.1

concat-stream@1.6.2

core-util-is@1.0.2

core-util-is@1.0.3

currently-unhandled@0.4.1

dashdash@1.14.1

decamelize@1.2.0

decompress-tar@2.0.2

decompress-tarbz2@2.0.2

decompress-targz@2.1.0

decompress-unzip@2.1.2

deep-extend@0.2.11

defaults@1.0.4

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

23 Packages, Including:

fs.realpath@1.0.0

glob@4.5.3

glob@7.2.3

graceful-fs@3.0.12

graceful-fs@4.2.11

har-schema@2.0.0

hosted-git-info@2.8.9

inflight@1.0.6

inherits@2.0.4

ini@1.3.8

isexe@2.0.0

json-stringify-safe@5.0.1

lru-cache@2.7.3

minimatch@2.0.10

minimatch@3.1.2

natives@1.1.6

once@1.4.0

rimraf@2.7.1

semver@5.7.2

sigmund@1.0.1

signal-exit@3.0.7

which@1.3.1

wrappy@1.0.2

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

8 Packages, Including:

aws-sign2@0.7.0

caseless@0.12.0

forever-agent@0.6.1

oauth-sign@0.9.0

request@2.88.2

spdx-correct@3.2.0

tunnel-agent@0.6.0

validate-npm-package-license@3.0.4

BSD

Invalid

Not OSI Approved

4 Packages, Including:

glob@3.1.21

graceful-fs@1.2.3

semver@3.0.1

unique-stream@1.0.0

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

3 Packages, Including:

bcrypt-pbkdf@1.0.2

qs@6.5.3

tough-cookie@2.5.0

N/A

2 Packages, Including:

inherits@1.0.2

progress@1.1.8

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

2 Packages, Including:

normalize-package-data@2.5.0

uri-js@4.4.1

WTFPL OR ISC

Permissive

1 Packages, Including:

is-integer@1.0.7

(AFL-2.1 OR BSD-3-Clause)

Permissive

1 Packages, Including:

json-schema@0.4.0

(BSD OR MIT OR Apache2)

Expression

1 Packages, Including:

rc@0.5.5

Creative Commons Attribution 3.0 Unported

Uncategorized

Not OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

Cannot

Must

1 Packages, Including:

spdx-exceptions@2.5.0

Creative Commons Zero v1.0 Universal

Public Domain

Not OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

Cannot

Must

1 Packages, Including:

spdx-license-ids@3.0.18

The Unlicense

Public Domain

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

private-use

modify

Cannot

include-copyright

hold-liable

Must

1 Packages, Including:

tweetnacl@0.14.5

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of imagemin-optipng 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
exec-buffer	1.1.2	1.58 kB	MIT	prod	1
is-png	1.1.0	1.74 kB	MIT	prod
optipng-bin	1.0.1	1.89 kB	MIT	prod	5 25 8 7

Tree

Treemap

All Versions

imagemin-optipng 1.0.0

Issues

5 critical severity issues

25 high severity issues

8 moderate severity issues

7 low severity issues

Licenses

MIT License

ISC License

Apache License 2.0

BSD

BSD 3-Clause "New" or "Revised" License

N/A

BSD 2-Clause "Simplified" License

WTFPL OR ISC

(AFL-2.1 OR BSD-3-Clause)

(BSD OR MIT OR Apache2)

Creative Commons Attribution 3.0 Unported

Creative Commons Zero v1.0 Universal

The Unlicense

Direct Dependencies

Visualizations

All Versions

Scan your app for security vulnerabilities and license issues

Log into your account

Create your account

imagemin-optipng 1.0.0

Issues

5 critical severity issues

25 high severity issues

8 moderate severity issues

7 low severity issues

Licenses

MIT License

ISC License

Apache License 2.0

BSD

BSD 3-Clause "New" or "Revised" License

N/A

BSD 2-Clause "Simplified" License

WTFPL OR ISC

(AFL-2.1 OR BSD-3-Clause)

(BSD OR MIT OR Apache2)

Creative Commons Attribution 3.0 Unported

Creative Commons Zero v1.0 Universal

The Unlicense

Direct Dependencies

Visualizations

All Versions

Scan your app for security vulnerabilities and license issues