Home
Docs
GitHub
Pricing
Blog
Log In

Run Sandworm Audit for your App

Get started
Hold on, we're currently generating a fresh version of this report
Generated on May 8, 2024 via pnpm
Package summary
Share
11
issues
2
critical severity
license
2
6
high severity
license
3
meta
3
3
low severity
vulnerability
1
license
2
7
licenses
83
MIT
17
ISC
5
Apache-2.0
6
other licenses
N/A
2
MIT/X11
2
(MIT OR WTFPL)
1
(BSD-2-Clause OR MIT OR Apache-2.0)
1
Package created
6 Apr 2017
Version published
24 Feb 2020
Maintainers
1
Total deps
111
Direct deps
8
License
MIT

Issues

11

2 critical severity issues

critical
Recommendation: Check the package code and files for license information
via: sinek@9.0.0
Recommendation: Check the package code and files for license information
via: sinek@9.0.0
Collapse
Expand

6 high severity issues

high
Recommendation: Validate that the package complies with your license policy
via: sinek@9.0.0
Recommendation: Validate that the package complies with your license policy
via: sinek@9.0.0
Recommendation: Validate that the license expression complies with your license policy
via: sinek@9.0.0
via: debug@4.1.1 & others
via: sinek@9.0.0
via: sinek@9.0.0
Collapse
Expand

3 low severity issues

low
Recommendation: Upgrade to version 4.3.1 or later
via: debug@4.1.1 & others
Recommendation: Read and validate the license terms
via: sinek@9.0.0
Recommendation: Read and validate the license terms
via: sinek@9.0.0
Collapse
Expand

Licenses

MIT License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
Cannot
hold-liable
Must
include-copyright
include-license
83 Packages, Including:
@most/multicast@1.3.0
@most/prelude@1.8.0
ansi-regex@2.1.1
async@2.6.4
async@3.2.5
balanced-match@1.0.2
binary@0.3.0
bindings@1.5.0
bl@1.2.3
bl@2.2.1
bluebird@3.7.2
brace-expansion@1.1.11
buffer-alloc-unsafe@1.1.0
buffer-alloc@1.2.0
buffer-crc32@0.2.13
buffer-fill@1.0.0
buffermaker@1.2.1
code-point-at@1.1.0
concat-map@0.0.1
core-util-is@1.0.3
debug@2.6.9
debug@4.1.1
decompress-response@3.3.0
deep-extend@0.6.0
delegates@1.0.0
dom-walk@0.1.2
end-of-stream@1.4.4
file-uri-to-path@1.0.0
fs-constants@1.0.0
github-from-package@0.0.0
global@4.4.0
is-fullwidth-code-point@1.0.0
isarray@1.0.0
kafka-node@5.0.0
kafka-streams@5.0.0
kafkajs@1.12.0
lodash.clone@4.5.0
lodash.clonedeep@4.5.0
lodash.merge@4.6.2
lodash@4.17.21
mimic-response@1.0.1
min-document@2.19.0
minimist@1.2.8
mkdirp@0.5.6
most-subject@5.3.0
most@1.7.3
ms@2.0.0
ms@2.1.3
murmur-hash-js@1.0.0
nan@2.19.0

ISC License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
Cannot
hold-liable
Must
include-copyright
include-license
17 Packages, Including:
aproba@1.2.0
are-we-there-yet@1.1.7
chownr@1.1.4
console-control-strings@1.1.0
gauge@2.7.4
has-unicode@2.0.1
inherits@2.0.4
ini@1.3.8
minimatch@3.1.2
murmur2-partitioner@1.0.0
npmlog@4.1.2
once@1.4.0
semver@5.7.2
set-blocking@2.0.0
signal-exit@3.0.7
wide-align@1.1.5
wrappy@1.0.2

Apache License 2.0

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
use-patent-claims
place-warranty
Cannot
hold-liable
use-trademark
Must
include-copyright
include-license
state-changes
include-notice
5 Packages, Including:
denque@1.5.1
detect-libc@1.0.3
long@1.1.2
long@4.0.0
tunnel-agent@0.6.0

N/A

N/A
2 Packages, Including:
buffers@0.1.1
murmurhash@0.0.2

MIT/X11

Invalid
Not OSI Approved
2 Packages, Including:
chainsaw@0.1.0
traverse@0.3.9

(MIT OR WTFPL)

Permissive
1 Packages, Including:
expand-template@2.0.3

(BSD-2-Clause OR MIT OR Apache-2.0)

Expression
1 Packages, Including:
rc@1.2.8
Disclaimer

This deed highlights only some of the key features and terms of the actual license. It is not a license and has no legal value. You should carefully review all of the terms and conditions of the actual license before using the licensed material.

Sandworm is not a law firm and does not provide legal services. Distributing, displaying, or linking to this deed or the license that it summarizes does not create a lawyer-client or any other relationship.

Direct Dependencies

8
All Dependencies CSV
β“˜ This is a list of kafka-streams 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.
NameVersionSizeLicenseTypeVulnerabilities
bluebird3.7.2136.03 kBMIT
prod
debug4.1.121.26 kBMIT
prod
1
1
global4.4.01.85 kBMIT
prod
lodash.clone4.5.011.5 kBMIT
prod
lodash.clonedeep4.5.011.36 kBMIT
prod
most-subject5.3.015.33 kBMIT
prod
most1.7.3132.23 kBMIT
prod peer
sinek9.0.047.78 kBMIT
prod
2
6
3

Visualizations