Generated on Apr 8, 2024 via pnpm

insight 0.5.0

Understand how your tool is being used by anonymously reporting usage metrics to an analtyics vendor, e.g. Google Analytics.

npm

package

stats

Package summary

issues

licenses

Package created

6 Apr 2013

Version published

12 Jan 2015

Maintainers

Total deps

112

Direct deps

License

BSD

Issues

1 critical severity issue

critical

lodash@2.4.2

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.12 or later

via: inquirer@0.7.3

Collapse

Expand

13 high severity issues

high

lodash@2.4.2

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.11 or later

via: inquirer@0.7.3

tough-cookie@0.12.1

Regular Expression Denial of Service in tough-cookie

Recommendation: Upgrade to version 2.3.3 or later

via: tough-cookie@0.12.1

lodash@2.4.2

Command Injection in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: inquirer@0.7.3

configstore@0.3.2

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: configstore@0.3.2

insight@0.5.0

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: insight@0.5.0

mute-stream@0.0.4

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: inquirer@0.7.3

es5-ext@0.10.64

Package uses postinstall script: " node -e "try{require('./_postinstall')}catch(e){}" || exit 0"

via: inquirer@0.7.3

har-validator@5.1.5

Deprecated package

via: request@2.88.2

natives@1.1.6

Deprecated package

via: configstore@0.3.2

request@2.88.2

Deprecated package

via: request@2.88.2

tough-cookie@0.12.1

Deprecated package

via: tough-cookie@0.12.1

uuid@2.0.3

Deprecated package

via: configstore@0.3.2

uuid@3.4.0

Deprecated package

via: request@2.88.2

Collapse

Expand

5 moderate severity issues

moderate

lodash@2.4.2

Regular Expression Denial of Service (ReDoS) in lodash

Recommendation: Upgrade to version 4.17.11 or later

via: inquirer@0.7.3

tough-cookie@0.12.1

ReDoS via long string of semicolons in tough-cookie

Recommendation: Upgrade to version 2.3.0 or later

via: tough-cookie@0.12.1

lodash@2.4.2

Regular Expression Denial of Service (ReDoS) in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: inquirer@0.7.3

tough-cookie@2.5.0

tough-cookie Prototype Pollution vulnerability

Recommendation: Upgrade to version 4.1.3 or later

via: request@2.88.2 & others

request@2.88.2

Server-Side Request Forgery in Request

Recommendation: None

via: request@2.88.2

Collapse

Expand

4 low severity issues

low

lodash@2.4.2

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.5 or later

via: inquirer@0.7.3

configstore@0.3.2

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: configstore@0.3.2

insight@0.5.0

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: insight@0.5.0

mute-stream@0.0.4

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: inquirer@0.7.3

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

80 Packages, Including:

ajv@6.12.6

ansi-regex@0.2.1

ansi-regex@1.1.1

ansi-styles@1.1.0

argparse@1.0.10

asn1@0.2.6

assert-plus@1.0.0

async@0.9.2

asynckit@0.4.0

aws4@1.12.0

chalk@0.5.1

cli-color@0.3.3

combined-stream@1.0.8

core-util-is@1.0.2

d@0.1.1

dashdash@1.14.1

delayed-stream@1.0.0

ecc-jsbn@0.1.2

es6-iterator@0.1.3

es6-iterator@2.0.3

es6-symbol@2.0.1

es6-weak-map@0.1.4

escape-string-regexp@1.0.5

event-emitter@0.3.5

extend@3.0.2

extsprintf@1.3.0

fast-deep-equal@3.1.3

fast-json-stable-stringify@2.1.0

figures@1.7.0

form-data@2.3.3

getpass@0.1.7

har-validator@5.1.5

has-ansi@0.1.0

http-signature@1.2.0

inquirer@0.7.3

is-typedarray@1.0.0

isstream@0.1.2

js-yaml@3.14.1

jsbn@0.1.1

json-schema-traverse@0.4.1

jsprim@1.4.2

lodash._isnative@2.4.1

lodash._objecttypes@2.4.1

lodash.debounce@2.4.1

lodash.isfunction@2.4.1

lodash.isobject@2.4.1

lodash.now@2.4.1

lodash@2.4.2

lru-queue@0.1.0

memoizee@0.3.10

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

14 Packages, Including:

d@1.0.2

es5-ext@0.10.64

es6-symbol@3.1.4

esniff@2.0.1

ext@1.7.0

graceful-fs@3.0.12

har-schema@2.0.0

json-stringify-safe@5.0.1

natives@1.1.6

next-tick@1.1.0

osenv@0.1.5

semver@5.7.2

timers-ext@0.1.7

type@2.7.2

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

7 Packages, Including:

aws-sign2@0.7.0

caseless@0.12.0

forever-agent@0.6.1

oauth-sign@0.9.0

request@2.88.2

rx@2.5.3

tunnel-agent@0.6.0

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

4 Packages, Including:

bcrypt-pbkdf@1.0.2

qs@6.5.3

sprintf-js@1.0.3

tough-cookie@2.5.0

BSD

Invalid

Not OSI Approved

3 Packages, Including:

configstore@0.3.2

insight@0.5.0

mute-stream@0.0.4

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

2 Packages, Including:

esprima@4.0.1

uri-js@4.4.1

(AFL-2.1 OR BSD-3-Clause)

Permissive

1 Packages, Including:

json-schema@0.4.0

The Unlicense

Public Domain

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

private-use

modify

Cannot

include-copyright

hold-liable

Must

1 Packages, Including:

tweetnacl@0.14.5

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of insight 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
async	0.9.2	20.46 kB	MIT	prod
chalk	0.5.1	3.26 kB	MIT	prod
configstore	0.3.2	2.09 kB	BSD	prod	3 1
inquirer	0.7.3	16.23 kB	MIT	prod	1 4 2 2
lodash.debounce	2.4.1	3.27 kB	MIT	prod
object-assign	1.0.0	1.22 kB	MIT	prod
os-name	1.0.3	1.57 kB	MIT	prod
request	2.88.2	57.83 kB	Apache-2.0	prod	3 2
tough-cookie	0.12.1	77.44 kB	MIT	prod	2 2