Hold on, we're currently generating a fresh version of this report

Generated on Apr 23, 2024 via pnpm

koa-middlewares 1.5.0

easy way to require some useful koa middlewares

Package summary

45

issues

6

licenses

Package created

25 Feb 2014

Version published

7 Nov 2014

Maintainers

1

Total deps

95

Direct deps

18

License

MIT

Issues

45

11 critical severity issues

ejs@1.0.0

ejs template injection vulnerability

Recommendation: Upgrade to version 3.1.7 or later

via: koa-ejs@1.1.3

ejs@1.0.0

ejs is vulnerable to remote code execution due to weak input validation

Recommendation: Upgrade to version 2.5.5 or later

via: koa-ejs@1.1.3

minimist@0.0.10

Prototype Pollution in minimist

Recommendation: Upgrade to version 0.2.4 or later

via: koa-onerror@1.2.1

bytes@1.0.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: koa-bodyparser@1.2.0 & others

debug@0.7.4

Package has no specified license

Recommendation: Check the package code and files for license information

via: koa-resource-router@0.3.3

debug@1.0.5

Package has no specified license

Recommendation: Check the package code and files for license information

via: koa-redis@0.1.1

ejs@1.0.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: koa-ejs@1.1.3

humanize-number@0.0.2

Package has no specified license

Recommendation: Check the package code and files for license information

via: koa-logger@1.2.2

lingo@0.0.5

Package has no specified license

Recommendation: Check the package code and files for license information

via: koa-resource-router@0.3.3

path-to-regexp@0.0.2

Package has no specified license

Recommendation: Check the package code and files for license information

via: koa-resource-router@0.3.3

redis@0.10.3

Package has no specified license

Recommendation: Check the package code and files for license information

via: koa-redis@0.1.1

22 high severity issues

qs@1.0.2

Prototype Pollution Protection Bypass in qs

Recommendation: Upgrade to version 6.0.4 or later

via: koa-bodyparser@1.2.0

base64-url@1.2.1

Out-of-bounds Read in base64-url

Recommendation: Upgrade to version 2.0.0 or later

via: koa-csrf@2.1.3 & others

swig@1.4.2

Arbitrary local file read vulnerability during template rendering

Recommendation: None

via: koa-onerror@1.2.1

uglify-js@2.4.24

Regular Expression Denial of Service in uglify-js

Recommendation: Upgrade to version 2.6.0 or later

via: koa-onerror@1.2.1

ejs@1.0.0

ejs vulnerable to DoS due to weak input validation

Recommendation: Upgrade to version 2.5.5 or later

via: koa-ejs@1.1.3

debug@1.0.5

debug Inefficient Regular Expression Complexity vulnerability

Recommendation: Upgrade to version 2.6.9 or later

via: koa-redis@0.1.1 & others

qs@1.0.2

qs vulnerable to Prototype Pollution

Recommendation: Upgrade to version 6.2.4 or later

via: koa-bodyparser@1.2.0

qs@1.0.2

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: koa-bodyparser@1.2.0

scmp@1.0.0

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: koa-csrf@2.1.3

source-map@0.1.34

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: koa-onerror@1.2.1

uglify-js@2.4.24

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: koa-onerror@1.2.1

optimist@0.6.1

Package uses an invalid SPDX license ("MIT/X11")

Recommendation: Validate that the package complies with your license policy

via: koa-onerror@1.2.1

wordwrap@0.0.2

Package uses an invalid SPDX license ("MIT/X11")

Recommendation: Validate that the package complies with your license policy

via: koa-onerror@1.2.1

yargs@3.5.4

Package uses an invalid SPDX license ("MIT/X11")

Recommendation: Validate that the package complies with your license policy

via: koa-onerror@1.2.1

ejs@1.0.0

Deprecated package

via: koa-ejs@1.1.3

koa-csrf@2.1.3

Deprecated package

via: koa-csrf@2.1.3

koa-static-cache@1.2.0

Deprecated package

via: koa-static-cache@1.2.0

lingo@0.0.5

Deprecated package

via: koa-resource-router@0.3.3

native-or-bluebird@1.1.2

Deprecated package

via: koa-csrf@2.1.3 & others

native-or-bluebird@1.2.0

Deprecated package

via: koa-etag@2.0.0

scmp@1.0.0

Deprecated package

via: koa-csrf@2.1.3

swig@1.4.2

Deprecated package

via: koa-onerror@1.2.1

4 moderate severity issues

ejs@1.0.0

mde ejs vulnerable to XSS

Recommendation: Upgrade to version 2.5.5 or later

via: koa-ejs@1.1.3

minimist@0.0.10

Prototype Pollution in minimist

Recommendation: Upgrade to version 0.2.1 or later

via: koa-onerror@1.2.1

lingo@0.0.5

Package has no specified source code repository

via: koa-resource-router@0.3.3

path-to-regexp@0.0.2

Package has no specified source code repository

via: koa-resource-router@0.3.3

8 low severity issues

debug@1.0.5

Regular Expression Denial of Service in debug

Recommendation: Upgrade to version 2.6.9 or later

via: koa-redis@0.1.1 & others

qs@1.0.2

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: koa-bodyparser@1.2.0

scmp@1.0.0

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: koa-csrf@2.1.3

source-map@0.1.34

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: koa-onerror@1.2.1

uglify-js@2.4.24

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: koa-onerror@1.2.1

optimist@0.6.1

Package uses a license that is not OSI approved ("MIT/X11")

Recommendation: Read and validate the license terms

via: koa-onerror@1.2.1

wordwrap@0.0.2

Package uses a license that is not OSI approved ("MIT/X11")

Recommendation: Read and validate the license terms

via: koa-onerror@1.2.1

yargs@3.5.4

Package uses a license that is not OSI approved ("MIT/X11")

Recommendation: Read and validate the license terms

via: koa-onerror@1.2.1

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

77 Packages, Including:

any-promise@1.3.0

async@0.2.10

bytes@2.5.0

camelcase@1.2.1

clone@1.0.4

co-body@1.0.0

co-from-stream@0.0.0

co-fs@1.2.0

co-read@0.0.1

co-redis@1.1.1

compressible@2.0.18

copy-to@2.0.1

core-util-is@1.0.3

crc@3.2.1

csrf@2.0.7

debug@2.6.9

debug@3.2.7

debug@4.3.4

decamelize@1.2.0

defaults@1.0.4

etag@1.8.1

fs-readdir-recursive@1.1.0

is-type-of@0.2.1

isarray@0.0.1

isstream@0.1.2

jsonp-body@1.0.0

koa-bodyparser@1.2.0

koa-compose@2.2.0

koa-compose@2.5.1

koa-compress@1.0.9

koa-conditional-get@1.0.4

koa-csrf@2.1.3

koa-ejs@1.1.3

koa-etag@2.0.0

koa-favicon@1.2.1

koa-generic-session@1.2.3

koa-is-json@1.0.0

koa-logger@1.2.2

koa-middlewares@1.5.0

koa-onerror@1.2.1

koa-redis@0.1.1

koa-resource-router@0.3.3

koa-rewrite@1.1.2

koa-router@3.5.0

koa-rt@0.0.2

koa-safe-jsonp@0.3.1

koa-session@2.0.1

koa-static-cache@1.2.0

methods@1.1.2

mime-db@1.12.0

N/A

N/A

8 Packages, Including:

bytes@1.0.0

debug@0.7.4

debug@1.0.5

ejs@1.0.0

humanize-number@0.0.2

lingo@0.0.5

path-to-regexp@0.0.2

redis@0.10.3

BSD

Invalid

Not OSI Approved

4 Packages, Including:

qs@1.0.2

scmp@1.0.0

source-map@0.1.34

uglify-js@2.4.24

MIT/X11

Invalid

Not OSI Approved

3 Packages, Including:

optimist@0.6.1

wordwrap@0.0.2

yargs@3.5.4

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

2 Packages, Including:

base64-url@1.2.0

base64-url@1.2.1

BSD-3-Clause OR MIT

Permissive

1 Packages, Including:

amdefine@1.0.1

Direct Dependencies

18

All Dependencies CSV

ⓘ This is a list of koa-middlewares 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
koa-bodyparser	1.2.0	2.23 kB	MIT	prod	1 3 1
koa-compress	1.0.9	2.58 kB	MIT	prod
koa-conditional-get	1.0.4	1.14 kB	MIT	prod
koa-csrf	2.1.3	2.22 kB	MIT	prod	5 1
koa-ejs	1.1.3	3.83 kB	MIT	prod	3 2 1
koa-etag	2.0.0	1.47 kB	MIT	prod	1
koa-favicon	1.2.1	1.34 kB	MIT	prod
koa-generic-session	1.2.3	9.84 kB	MIT	prod	2
koa-logger	1.2.2	1.7 kB	MIT	prod	2
koa-onerror	1.2.1	3.61 kB	MIT	prod	1 8 1 5
koa-redis	0.1.1	3.28 kB	MIT	prod	2 1 1
koa-resource-router	0.3.3	4.46 kB	MIT	prod	3 2 2 1
koa-rewrite	1.1.2	1.85 kB	MIT	prod
koa-router	3.5.0	8.4 kB	MIT	prod
koa-rt	0.0.2	984 B	MIT	prod
koa-safe-jsonp	0.3.1	2.53 kB	MIT	prod
koa-session	2.0.1	2.9 kB	MIT	prod
koa-static-cache	1.2.0	3.88 kB	MIT	prod	1

Recent Versions