Generated on May 31, 2024 via pnpm

Npm

knox 0.7.1

Amazon S3 client

aws

amazon

Package summary

issues

licenses

Package created

11 Jan 2011

Version published

2 May 2013

Maintainers

Total deps

Direct deps

License

MIT

Issues

2 critical severity issues

critical

debug@0.7.4

Package has no specified license

Recommendation: Check the package code and files for license information

via: debug@0.7.4

xml2js@0.2.8

Package has no specified license

Recommendation: Check the package code and files for license information

via: xml2js@0.2.8

Collapse

Expand

3 high severity issues

high

debug@0.7.4

debug Inefficient Regular Expression Complexity vulnerability

Recommendation: Upgrade to version 2.6.9 or later

via: debug@0.7.4

sax@0.5.8

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: xml2js@0.2.8

stream-counter@0.1.0

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: stream-counter@0.1.0

Collapse

Expand

1 moderate severity issue

moderate

xml2js@0.2.8

xml2js is vulnerable to prototype pollution

Recommendation: Upgrade to version 0.5.0 or later

via: xml2js@0.2.8

Collapse

Expand

3 low severity issues

low

debug@0.7.4

Regular Expression Denial of Service in debug

Recommendation: Upgrade to version 2.6.9 or later

via: debug@0.7.4

sax@0.5.8

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: xml2js@0.2.8

stream-counter@0.1.0

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: stream-counter@0.1.0

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

6 Packages, Including:

core-util-is@1.0.3

isarray@0.0.1

knox@0.7.1

mime@4.0.3

readable-stream@1.0.34

string_decoder@0.10.31

N/A

2 Packages, Including:

debug@0.7.4

xml2js@0.2.8

BSD

Invalid

Not OSI Approved

2 Packages, Including:

sax@0.5.8

stream-counter@0.1.0

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

1 Packages, Including:

inherits@2.0.4

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of knox 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
debug	0.7.4	4.11 kB	UNKNOWN	prod	1 1 1
mime	4.0.3	133.48 kB	MIT	prod
stream-counter	0.1.0	1008 B	BSD	prod	1 1
xml2js	0.2.8	22.69 kB	UNKNOWN	prod	1 1 1 1

Tree

Treemap

Recent Versions

knox 0.7.1