Generated on May 4, 2024 via pnpm

Npm

Home

kafka-streams 2.1.0

kafka-streams for nodejs

kafka-streams

kafka

streams

Package summary

issues

licenses

Package created

6 Apr 2017

Version published

12 Jul 2017

Maintainers

Total deps

143

Direct deps

License

MIT

Issues

4 critical severity issues

critical

underscore@1.4.4

Arbitrary Code Execution in underscore

Recommendation: Upgrade to version 1.12.1 or later

via: sinek@5.0.1

buffers@0.1.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: sinek@5.0.1

murmurhash@0.0.2

Package has no specified license

Recommendation: Check the package code and files for license information

via: sinek@5.0.1

underscore@1.4.4

Package has no specified license

Recommendation: Check the package code and files for license information

via: sinek@5.0.1

Collapse

Expand

11 high severity issues

high

tar@2.2.2

Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization

Recommendation: Upgrade to version 3.2.2 or later

via: sinek@5.0.1

tar@2.2.2

Arbitrary File Creation/Overwrite on Windows via insufficient relative path sanitization

Recommendation: Upgrade to version 4.4.18 or later

via: sinek@5.0.1

async@2.5.0

Prototype Pollution in async

Recommendation: Upgrade to version 2.6.4 or later

via: sinek@5.0.1

chainsaw@0.1.0

Package uses an invalid SPDX license ("MIT/X11")

Recommendation: Validate that the package complies with your license policy

via: sinek@5.0.1

traverse@0.3.9

Package uses an invalid SPDX license ("MIT/X11")

Recommendation: Validate that the package complies with your license policy

via: sinek@5.0.1

es5-ext@0.10.64

Package uses postinstall script: " node -e "try{require('./_postinstall')}catch(e){}" || exit 0"

via: sinek@5.0.1

har-validator@5.1.5

Deprecated package

via: sinek@5.0.1

request@2.88.2

Deprecated package

via: sinek@5.0.1

tar@2.2.2

Deprecated package

via: sinek@5.0.1

uuid@3.1.0

Deprecated package

via: sinek@5.0.1

uuid@3.4.0

Deprecated package

via: sinek@5.0.1

Collapse

Expand

3 moderate severity issues

moderate

tough-cookie@2.5.0

tough-cookie Prototype Pollution vulnerability

Recommendation: Upgrade to version 4.1.3 or later

via: sinek@5.0.1

request@2.88.2

Server-Side Request Forgery in Request

Recommendation: None

via: sinek@5.0.1

tar@2.2.2

Denial of service while parsing a tar file due to lack of folders count validation

Recommendation: Upgrade to version 6.2.1 or later

via: sinek@5.0.1

Collapse

Expand

2 low severity issues

low

chainsaw@0.1.0

Package uses a license that is not OSI approved ("MIT/X11")

Recommendation: Read and validate the license terms

via: sinek@5.0.1

traverse@0.3.9

Package uses a license that is not OSI approved ("MIT/X11")

Recommendation: Read and validate the license terms

via: sinek@5.0.1

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

89 Packages, Including:

@most/multicast@1.3.0

@most/prelude@1.8.0

ajv@6.12.6

ansi-regex@2.1.1

array-index@1.0.0

asn1@0.2.6

assert-plus@1.0.0

async@0.2.10

async@1.5.2

async@2.5.0

asynckit@0.4.0

aws4@1.12.0

balanced-match@1.0.2

binary@0.3.0

bindings@1.2.1

bl@1.2.3

bluebird@3.5.5

brace-expansion@1.1.11

buffer-crc32@0.2.13

buffermaker@1.2.1

code-point-at@1.1.0

combined-stream@1.0.8

concat-map@0.0.1

core-util-is@1.0.2

core-util-is@1.0.3

dashdash@1.14.1

debug@2.6.9

delayed-stream@1.0.0

delegates@1.0.0

ecc-jsbn@0.1.2

es6-iterator@2.0.3

event-emitter@0.3.5

extend@3.0.2

extsprintf@1.3.0

fast-deep-equal@3.1.3

fast-json-stable-stringify@2.1.0

form-data@2.3.3

getpass@0.1.7

har-validator@5.1.5

has-color@0.1.7

http-signature@1.2.0

is-fullwidth-code-point@1.0.0

is-typedarray@1.0.0

isarray@1.0.0

isstream@0.1.2

jsbn@0.1.1

json-schema-traverse@0.4.1

jsprim@1.4.2

kafka-node@2.0.1

kafka-streams@2.1.0

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

36 Packages, Including:

abbrev@1.1.1

aproba@1.2.0

are-we-there-yet@1.1.7

block-stream@0.0.9

console-control-strings@1.1.0

d@1.0.2

es5-ext@0.10.64

es6-symbol@3.1.4

esniff@2.0.1

ext@1.7.0

fs.realpath@1.0.0

fstream@1.0.12

gauge@2.6.0

glob@7.2.3

graceful-fs@4.2.11

har-schema@2.0.0

has-unicode@2.0.1

inflight@1.0.6

inherits@2.0.4

isexe@2.0.0

json-stringify-safe@5.0.1

minimatch@3.1.2

next-tick@1.1.0

nopt@3.0.6

npmlog@3.1.2

once@1.4.0

osenv@0.1.5

rimraf@2.7.1

semver@5.7.2

set-blocking@2.0.0

signal-exit@3.0.7

tar@2.2.2

type@2.7.2

which@1.3.1

wide-align@1.1.5

wrappy@1.0.2

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

7 Packages, Including:

aws-sign2@0.7.0

caseless@0.12.0

forever-agent@0.6.1

long@1.1.2

oauth-sign@0.9.0

request@2.88.2

tunnel-agent@0.6.0

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

3 Packages, Including:

bcrypt-pbkdf@1.0.2

qs@6.5.3

tough-cookie@2.5.0

N/A

3 Packages, Including:

buffers@0.1.1

murmurhash@0.0.2

underscore@1.4.4

MIT/X11

Invalid

Not OSI Approved

2 Packages, Including:

chainsaw@0.1.0

traverse@0.3.9

(AFL-2.1 OR BSD-3-Clause)

Permissive

1 Packages, Including:

json-schema@0.4.0

The Unlicense

Public Domain

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

private-use

modify

Cannot

include-copyright

hold-liable

Must

1 Packages, Including:

tweetnacl@0.14.5

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

1 Packages, Including:

uri-js@4.4.1

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of kafka-streams 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
bluebird	3.5.5	133.31 kB	MIT	prod
most-subject	5.3.0	15.33 kB	MIT	prod
most	1.5.1	127.52 kB	MIT	prod peer
sinek	5.0.1	34.71 kB	MIT	prod	4 11 3 2

Tree

Treemap

Recent Versions

kafka-streams 2.1.0

Issues

4 critical severity issues

11 high severity issues

3 moderate severity issues

2 low severity issues

Licenses

MIT License

ISC License

Apache License 2.0

BSD 3-Clause "New" or "Revised" License

N/A

MIT/X11

(AFL-2.1 OR BSD-3-Clause)

The Unlicense

BSD 2-Clause "Simplified" License

Direct Dependencies

Visualizations

Recent Versions

Scan your app for security vulnerabilities and license issues

Log into your account

Create your account

kafka-streams 2.1.0

Issues

4 critical severity issues

11 high severity issues

3 moderate severity issues

2 low severity issues

Licenses

MIT License

ISC License

Apache License 2.0

BSD 3-Clause "New" or "Revised" License

N/A

MIT/X11

(AFL-2.1 OR BSD-3-Clause)

The Unlicense

BSD 2-Clause "Simplified" License

Direct Dependencies

Visualizations

Recent Versions

Scan your app for security vulnerabilities and license issues