Home
Docs
GitHub
Pricing
Blog
Log In

Run Sandworm Audit for your App

Get started
Hold on, we're currently generating a fresh version of this report
Generated on May 4, 2024 via pnpm
Package summary
Share
12
issues
4
critical severity
vulnerability
1
license
3
6
high severity
license
3
meta
3
2
low severity
license
2
7
licenses
80
MIT
17
ISC
3
N/A
7
other licenses
Apache-2.0
3
MIT/X11
2
(MIT OR WTFPL)
1
(BSD-2-Clause OR MIT OR Apache-2.0)
1
Package created
6 Apr 2017
Version published
31 May 2018
Maintainers
1
Total deps
107
Direct deps
5
License
MIT

Issues

12

4 critical severity issues

critical
Recommendation: Upgrade to version 1.12.1 or later
via: sinek@6.15.2
Recommendation: Check the package code and files for license information
via: sinek@6.15.2
Recommendation: Check the package code and files for license information
via: sinek@6.15.2
Recommendation: Check the package code and files for license information
via: sinek@6.15.2
Collapse
Expand

6 high severity issues

high
Recommendation: Validate that the package complies with your license policy
via: sinek@6.15.2
Recommendation: Validate that the package complies with your license policy
via: sinek@6.15.2
Recommendation: Validate that the license expression complies with your license policy
via: sinek@6.15.2
via: sinek@6.15.2
via: sinek@6.15.2
via: sinek@6.15.2
Collapse
Expand

2 low severity issues

low
Recommendation: Read and validate the license terms
via: sinek@6.15.2
Recommendation: Read and validate the license terms
via: sinek@6.15.2
Collapse
Expand

Licenses

MIT License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
Cannot
hold-liable
Must
include-copyright
include-license
80 Packages, Including:
@most/core@0.14.0
@most/disposable@0.13.1
@most/multicast@1.3.0
@most/prelude@1.6.4
@most/prelude@1.8.0
@most/scheduler@0.13.1
@most/types@0.11.1
ansi-regex@2.1.1
async@0.2.10
async@2.6.4
balanced-match@1.0.2
binary@0.3.0
bindings@1.5.0
bl@1.2.3
bluebird@3.5.5
brace-expansion@1.1.11
buffer-alloc-unsafe@1.1.0
buffer-alloc@1.2.0
buffer-crc32@0.2.13
buffer-fill@1.0.0
buffermaker@1.2.1
code-point-at@1.1.0
concat-map@0.0.1
core-util-is@1.0.3
debug@2.6.9
debug@3.1.0
decompress-response@3.3.0
deep-extend@0.6.0
delegates@1.0.0
end-of-stream@1.4.4
file-uri-to-path@1.0.0
fs-constants@1.0.0
github-from-package@0.0.0
is-fullwidth-code-point@1.0.0
isarray@1.0.0
kafka-node@2.4.1
kafka-streams@4.3.0
lodash@4.17.21
mimic-response@1.0.1
minimist@1.2.8
mkdirp@0.5.6
most-subject@6.0.0
most@1.7.3
ms@2.0.0
murmur-hash-js@1.0.0
nan@2.19.0
napi-build-utils@1.0.2
nested-error-stacks@2.1.1
node-abi@2.30.1
node-rdkafka@2.2.3

ISC License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
Cannot
hold-liable
Must
include-copyright
include-license
17 Packages, Including:
aproba@1.2.0
are-we-there-yet@1.1.7
chownr@1.1.4
console-control-strings@1.1.0
gauge@2.7.4
has-unicode@2.0.1
inherits@2.0.4
ini@1.3.8
minimatch@3.1.2
murmur2-partitioner@1.0.0
npmlog@4.1.2
once@1.4.0
semver@5.7.2
set-blocking@2.0.0
signal-exit@3.0.7
wide-align@1.1.5
wrappy@1.0.2

N/A

N/A
3 Packages, Including:
buffers@0.1.1
murmurhash@0.0.2
underscore@1.4.4

Apache License 2.0

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
use-patent-claims
place-warranty
Cannot
hold-liable
use-trademark
Must
include-copyright
include-license
state-changes
include-notice
3 Packages, Including:
detect-libc@1.0.3
long@1.1.2
tunnel-agent@0.6.0

MIT/X11

Invalid
Not OSI Approved
2 Packages, Including:
chainsaw@0.1.0
traverse@0.3.9

(MIT OR WTFPL)

Permissive
1 Packages, Including:
expand-template@2.0.3

(BSD-2-Clause OR MIT OR Apache-2.0)

Expression
1 Packages, Including:
rc@1.2.8
Disclaimer

This deed highlights only some of the key features and terms of the actual license. It is not a license and has no legal value. You should carefully review all of the terms and conditions of the actual license before using the licensed material.

Sandworm is not a law firm and does not provide legal services. Distributing, displaying, or linking to this deed or the license that it summarizes does not create a lawyer-client or any other relationship.

Direct Dependencies

5
All Dependencies CSV
β“˜ This is a list of kafka-streams 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.
NameVersionSizeLicenseTypeVulnerabilities
bluebird3.5.5133.31 kBMIT
prod
debug3.1.016.78 kBMIT
prod
most-subject6.0.045.57 kBMIT
prod
most1.7.3132.23 kBMIT
prod peer
sinek6.15.266.25 kBMIT
prod
4
6
2

Visualizations