Home
Docs
GitHub
Pricing
Blog
Log In

Run Sandworm Audit for your App

Get started
Hold on, we're currently generating a fresh version of this report
Generated on Mar 1, 2024 via pnpm

init-package-json 1.7.0

A node module to get your node module started
Package summary
Share
5
issues
2
high severity
license
1
meta
1
1
moderate severity
vulnerability
1
2
low severity
license
2
7
licenses
19
ISC
13
MIT
5
Apache-2.0
4
other licenses
BSD-2-Clause
1
CC-BY-3.0
1
Unlicense
1
CC0-1.0
1
Package created
17 Jun 2012
Version published
19 Jun 2015
Maintainers
5
Total deps
41
Direct deps
8
License
ISC

Issues

5

2 high severity issues

high
Recommendation: Read and validate the license terms
via: read-package-json@2.1.2
via: validate-npm-package-license@2.0.0
Collapse
Expand

1 moderate severity issue

moderate
Recommendation: Upgrade to version 5.7.2 or later
via: read-package-json@2.1.2 & others
Collapse
Expand

2 low severity issues

low
Recommendation: Read and validate the license terms
via: read-package-json@2.1.2
Recommendation: Read and validate the license terms
via: read-package-json@2.1.2
Collapse
Expand

Licenses

ISC License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
Cannot
hold-liable
Must
include-copyright
include-license
19 Packages, Including:
fs.realpath@1.0.0
glob@5.0.15
glob@7.2.3
hosted-git-info@2.8.9
inflight@1.0.6
inherits@2.0.4
init-package-json@1.7.0
minimatch@3.1.2
mute-stream@0.0.8
npm-normalize-package-bin@1.0.1
npm-package-arg@4.2.1
once@1.4.0
promzard@0.3.0
read-package-json@2.1.2
read@1.0.7
semver@4.3.6
semver@5.7.2
validate-npm-package-name@2.2.2
wrappy@1.0.2

MIT License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
Cannot
hold-liable
Must
include-copyright
include-license
13 Packages, Including:
balanced-match@1.0.2
brace-expansion@1.1.11
builtins@0.0.7
concat-map@0.0.1
function-bind@1.1.2
hasown@2.0.1
is-core-module@2.13.1
json-parse-even-better-errors@2.3.1
path-is-absolute@1.0.1
path-parse@1.0.7
resolve@1.22.8
spdx-expression-parse@3.0.1
supports-preserve-symlinks-flag@1.0.0

Apache License 2.0

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
use-patent-claims
place-warranty
Cannot
hold-liable
use-trademark
Must
include-copyright
include-license
state-changes
include-notice
5 Packages, Including:
spdx-correct@1.0.2
spdx-correct@3.2.0
spdx@0.4.3
validate-npm-package-license@2.0.0
validate-npm-package-license@3.0.4

BSD 2-Clause "Simplified" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
hold-liable
Must
include-copyright
include-license
1 Packages, Including:
normalize-package-data@2.5.0

Creative Commons Attribution 3.0 Unported

Uncategorized
Not OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
Cannot
Must
1 Packages, Including:
spdx-exceptions@2.5.0

The Unlicense

Public Domain
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
private-use
modify
Cannot
include-copyright
hold-liable
Must
1 Packages, Including:
spdx-license-ids@1.2.2

Creative Commons Zero v1.0 Universal

Public Domain
Not OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
Cannot
Must
1 Packages, Including:
spdx-license-ids@3.0.17
Disclaimer

This deed highlights only some of the key features and terms of the actual license. It is not a license and has no legal value. You should carefully review all of the terms and conditions of the actual license before using the licensed material.

Sandworm is not a law firm and does not provide legal services. Distributing, displaying, or linking to this deed or the license that it summarizes does not create a lawyer-client or any other relationship.

Direct Dependencies

8
All Dependencies CSV
β“˜ This is a list of init-package-json 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.
NameVersionSizeLicenseTypeVulnerabilities
glob5.0.1514.45 kBISC
prod
npm-package-arg4.2.14.33 kBISC
prod
promzard0.3.08.95 kBISC
prod
read-package-json2.1.26.58 kBISC
prod
1
1
2
read1.0.72.61 kBISC
prod
semver4.3.644.41 kBISC
prod
1
validate-npm-package-license2.0.04.86 kBApache-2.0
prod
1
validate-npm-package-name2.2.23.36 kBISC
prod

Visualizations