Home
Docs
GitHub
Pricing
Blog
Log In

Run Sandworm Audit for your App

Get started
Hold on, we're currently generating a fresh version of this report
Generated on May 26, 2024 via pnpm

keychain-manager 1.4.1

A key system based around accounts that each have hierarchical deterministic (HD) keychains with ECDSA public/private keypairs (the ones Bitcoin uses).
Package summary
Share
11
issues
3
critical severity
vulnerability
1
license
2
4
high severity
vulnerability
4
4
moderate severity
vulnerability
4
3
licenses
8
MIT
3
ISC
2
N/A
Package created
3 Sep 2015
Version published
27 Jan 2016
Maintainers
3
Total deps
13
Direct deps
2
License
MIT

Issues

11

3 critical severity issues

critical
Recommendation: Upgrade to version 4.17.12 or later
via: bitcore-lib@0.13.19
Recommendation: Check the package code and files for license information
via: bitcore-lib@0.13.19
Recommendation: Check the package code and files for license information
via: bitcore-lib@0.13.19
Collapse
Expand

4 high severity issues

high
Recommendation: Upgrade to version 4.17.11 or later
via: bitcore-lib@0.13.19
Recommendation: Upgrade to version 6.5.3 or later
via: bitcore-lib@0.13.19
Recommendation: Upgrade to version 4.17.19 or later
via: bitcore-lib@0.13.19
Recommendation: Upgrade to version 4.17.21 or later
via: bitcore-lib@0.13.19
Collapse
Expand

4 moderate severity issues

moderate
Recommendation: Upgrade to version 4.17.11 or later
via: bitcore-lib@0.13.19
Recommendation: Upgrade to version 6.5.4 or later
via: bitcore-lib@0.13.19
Recommendation: Upgrade to version 4.17.21 or later
via: bitcore-lib@0.13.19
Recommendation: Upgrade to version 4.17.5 or later
via: bitcore-lib@0.13.19
Collapse
Expand

Licenses

MIT License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
Cannot
hold-liable
Must
include-copyright
include-license
8 Packages, Including:
bitcore-lib@0.13.19
bn.js@2.0.4
bn.js@3.3.0
brorand@1.1.0
elliptic@3.0.3
hash.js@1.1.7
keychain-manager@1.4.1
lodash@3.10.1

ISC License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
Cannot
hold-liable
Must
include-copyright
include-license
3 Packages, Including:
inherits@2.0.1
inherits@2.0.4
minimalistic-assert@1.0.1

N/A

N/A
2 Packages, Including:
bs58@2.0.0
buffer-compare@1.0.0
Disclaimer

This deed highlights only some of the key features and terms of the actual license. It is not a license and has no legal value. You should carefully review all of the terms and conditions of the actual license before using the licensed material.

Sandworm is not a law firm and does not provide legal services. Distributing, displaying, or linking to this deed or the license that it summarizes does not create a lawyer-client or any other relationship.

Direct Dependencies

2
All Dependencies CSV
β“˜ This is a list of keychain-manager 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.
NameVersionSizeLicenseTypeVulnerabilities
bitcore-lib0.13.191.15 MBMIT
prod
3
4
4
bn.js3.3.033.63 kBMIT
prod

Visualizations