Generated on May 9, 2024 via pnpm

Npm

Home

koa-jwt 2.2.3

Koa JWT authentication middleware.

auth

authn

authentication

Package summary

issues

licenses

Package created

29 Jan 2014

Version published

1 Mar 2017

Maintainers

Total deps

Direct deps

License

MIT

Issues

5 high severity issues

high

hoek@2.16.3

Prototype Pollution in hoek

Recommendation: Upgrade to version 4.2.1 or later

via: jsonwebtoken@7.4.3

hoek@2.16.3

hoek subject to prototype pollution via the clone function.

Recommendation: None

via: jsonwebtoken@7.4.3

hoek@2.16.3

Deprecated package

via: jsonwebtoken@7.4.3

joi@6.10.1

Deprecated package

via: jsonwebtoken@7.4.3

topo@1.1.0

Deprecated package

via: jsonwebtoken@7.4.3

Collapse

Expand

3 moderate severity issues

moderate

jsonwebtoken@7.4.3

jsonwebtoken unrestricted key type could lead to legacy keys usage

Recommendation: Upgrade to version 9.0.0 or later

via: jsonwebtoken@7.4.3

jsonwebtoken@7.4.3

jsonwebtoken's insecure implementation of key retrieval function could lead to Forgeable Public/Private Tokens from RSA to HMAC

Recommendation: Upgrade to version 9.0.0 or later

via: jsonwebtoken@7.4.3

jsonwebtoken@7.4.3

jsonwebtoken vulnerable to signature validation bypass due to insecure default algorithm in jwt.verify()

Recommendation: Upgrade to version 9.0.0 or later

via: jsonwebtoken@7.4.3

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

11 Packages, Including:

bluebird@3.7.2

jsonwebtoken@7.4.3

jwa@1.4.1

jws@3.2.2

koa-jwt@2.2.3

koa-unless@1.0.7

lodash.once@4.1.1

moment@2.30.1

ms@2.1.3

safe-buffer@5.2.1

xtend@4.0.2

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

4 Packages, Including:

buffer-equal-constant-time@1.0.1

hoek@2.16.3

joi@6.10.1

topo@1.1.0

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

1 Packages, Including:

ecdsa-sig-formatter@1.0.11

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

1 Packages, Including:

isemail@1.2.0

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of koa-jwt 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
bluebird	3.7.2	136.03 kB	MIT	prod
jsonwebtoken	7.4.3	86.72 kB	MIT	prod	5 3
koa-unless	1.0.7	3.83 kB	MIT	prod

Tree

Treemap

Recent Versions

koa-jwt 2.2.3