Generated on Apr 17, 2024 via pnpm

Npm

Home

imagemin-pngquant 0.1.1

pngquant image-min plugin

compress

image

imageminplugin

Package summary

issues

licenses

Package created

23 Apr 2014

Version published

25 Apr 2014

Maintainers

Total deps

117

Direct deps

License

MIT

Issues

2 critical severity issues

critical

decompress@0.2.5

Path Traversal in decompress

Recommendation: Upgrade to version 4.2.1 or later

via: pngquant-bin@0.2.0

uuid@1.4.2

Package has no specified license

Recommendation: Check the package code and files for license information

via: exec-buffer@0.1.1 & others

Collapse

Expand

18 high severity issues

high

mout@0.9.1

Prototype Pollution in mout

Recommendation: Upgrade to version 1.2.3 or later

via: pngquant-bin@0.2.0

mout@0.9.1

Prototype Pollution in mout

Recommendation: Upgrade to version 1.2.4 or later

via: pngquant-bin@0.2.0

tar@0.1.20

Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization

Recommendation: Upgrade to version 3.2.2 or later

via: pngquant-bin@0.2.0

tar@0.1.20

Symlink Arbitrary File Overwrite in tar

Recommendation: Upgrade to version 2.0.0 or later

via: pngquant-bin@0.2.0

fstream@0.1.31

Arbitrary File Overwrite in fstream

Recommendation: Upgrade to version 1.0.12 or later

via: pngquant-bin@0.2.0

tar@0.1.20

Arbitrary File Creation/Overwrite on Windows via insufficient relative path sanitization

Recommendation: Upgrade to version 4.4.18 or later

via: pngquant-bin@0.2.0

tar@0.1.20

Arbitrary File Overwrite in tar

Recommendation: Upgrade to version 2.2.2 or later

via: pngquant-bin@0.2.0

fstream@0.1.31

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: pngquant-bin@0.2.0

tar@0.1.20

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: pngquant-bin@0.2.0

find-file@0.1.4

Deprecated package

via: pngquant-bin@0.2.0

har-validator@5.1.5

Deprecated package

via: pngquant-bin@0.2.0

mkdirp@0.3.5

Deprecated package

via: pngquant-bin@0.2.0

natives@1.1.6

Deprecated package

via: pngquant-bin@0.2.0

pngquant-bin@0.2.0

Package uses postinstall script: "node index.js"

via: pngquant-bin@0.2.0

request@2.88.2

Deprecated package

via: pngquant-bin@0.2.0

tar@0.1.20

Deprecated package

via: pngquant-bin@0.2.0

uuid@1.4.2

Deprecated package

via: exec-buffer@0.1.1 & others

uuid@3.4.0

Deprecated package

via: pngquant-bin@0.2.0

Collapse

Expand

5 moderate severity issues

moderate

underscore.string@2.3.3

Regular Expression Denial of Service in underscore.string

Recommendation: Upgrade to version 3.3.5 or later

via: pngquant-bin@0.2.0

got@0.2.0

Got allows a redirect to a UNIX socket

Recommendation: Upgrade to version 11.8.5 or later

via: pngquant-bin@0.2.0

tough-cookie@2.5.0

tough-cookie Prototype Pollution vulnerability

Recommendation: Upgrade to version 4.1.3 or later

via: pngquant-bin@0.2.0

request@2.88.2

Server-Side Request Forgery in Request

Recommendation: None

via: pngquant-bin@0.2.0

tar@0.1.20

Denial of service while parsing a tar file due to lack of folders count validation

Recommendation: Upgrade to version 6.2.1 or later

via: pngquant-bin@0.2.0

Collapse

Expand

2 low severity issues

low

fstream@0.1.31

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: pngquant-bin@0.2.0

tar@0.1.20

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: pngquant-bin@0.2.0

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

88 Packages, Including:

@types/keyv@3.1.4

@types/node@20.12.7

@types/responselike@1.0.3

adm-zip@0.4.16

ajv@6.12.6

ansi-styles@1.0.0

asn1@0.2.6

assert-plus@1.0.0

asynckit@0.4.0

aws4@1.12.0

balanced-match@1.0.2

bin-check@0.1.5

bin-wrapper@0.2.4

brace-expansion@1.1.11

chalk@0.4.0

combined-stream@1.0.8

concat-map@0.0.1

core-util-is@1.0.2

core-util-is@1.0.3

dashdash@1.14.1

decompress@0.2.5

delayed-stream@1.0.0

download@0.1.19

duplexer@0.1.2

each-async@0.1.3

ecc-jsbn@0.1.2

exec-buffer@0.1.1

executable@0.1.3

ext-list@0.2.0

ext-name@1.0.1

extend@3.0.2

extsprintf@1.3.0

fast-deep-equal@3.1.3

fast-json-stable-stringify@2.1.0

find-file@0.1.4

form-data@2.3.3

get-stdin@0.1.0

get-urls@0.1.2

getpass@0.1.7

got@0.2.0

har-validator@5.1.5

has-color@0.1.7

http-signature@1.2.0

image-type@0.1.4

imagemin-pngquant@0.1.1

is-bmp@0.1.1

is-gif@0.1.1

is-jpg@0.1.2

is-jxr@0.1.1

is-png@0.1.1

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

14 Packages, Including:

abbrev@1.1.1

block-stream@0.0.9

fs.realpath@1.0.0

glob@7.2.3

graceful-fs@3.0.12

har-schema@2.0.0

inflight@1.0.6

inherits@2.0.4

json-stringify-safe@5.0.1

minimatch@3.1.2

natives@1.1.6

once@1.4.0

rimraf@2.7.1

wrappy@1.0.2

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

6 Packages, Including:

aws-sign2@0.7.0

caseless@0.12.0

forever-agent@0.6.1

oauth-sign@0.9.0

request@2.88.2

tunnel-agent@0.6.0

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

3 Packages, Including:

bcrypt-pbkdf@1.0.2

qs@6.5.3

tough-cookie@2.5.0

BSD

Invalid

Not OSI Approved

2 Packages, Including:

fstream@0.1.31

tar@0.1.20

(AFL-2.1 OR BSD-3-Clause)

Permissive

1 Packages, Including:

json-schema@0.4.0

The Unlicense

Public Domain

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

private-use

modify

Cannot

include-copyright

hold-liable

Must

1 Packages, Including:

tweetnacl@0.14.5

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

1 Packages, Including:

uri-js@4.4.1

N/A

1 Packages, Including:

uuid@1.4.2

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of imagemin-pngquant 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
exec-buffer	0.1.1	1.43 kB	MIT	prod	1 1
image-type	0.1.4	1.71 kB	MIT	prod
pngquant-bin	0.2.0	1.99 kB	MIT	prod	2 18 5 2

Tree

Treemap

All Versions

imagemin-pngquant 0.1.1

Issues

2 critical severity issues

18 high severity issues

5 moderate severity issues

2 low severity issues

Licenses

MIT License

ISC License

Apache License 2.0

BSD 3-Clause "New" or "Revised" License

BSD

(AFL-2.1 OR BSD-3-Clause)

The Unlicense

BSD 2-Clause "Simplified" License

N/A

Direct Dependencies

Visualizations

All Versions

Scan your app for security vulnerabilities and license issues

Log into your account

Create your account

imagemin-pngquant 0.1.1

Issues

2 critical severity issues

18 high severity issues

5 moderate severity issues

2 low severity issues

Licenses

MIT License

ISC License

Apache License 2.0

BSD 3-Clause "New" or "Revised" License

BSD

(AFL-2.1 OR BSD-3-Clause)

The Unlicense

BSD 2-Clause "Simplified" License

N/A

Direct Dependencies

Visualizations

All Versions

Scan your app for security vulnerabilities and license issues