Hold on, we're currently generating a fresh version of this report

Generated on Feb 21, 2024 via pnpm

koa-middlewares 5.0.0

easy way to require some useful koa middlewares

Package summary

24

issues

8

licenses

Package created

25 Feb 2014

Version published

11 Apr 2016

Maintainers

1

Total deps

139

Direct deps

18

License

MIT

Issues

24

4 critical severity issues

ejs@2.7.4

ejs template injection vulnerability

Recommendation: Upgrade to version 3.1.7 or later

via: koa-ejs@3.0.0

minimist@0.0.10

Prototype Pollution in minimist

Recommendation: Upgrade to version 0.2.4 or later

via: koa-onerror@1.3.1

bytes@1.0.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: koa-logger@1.3.1

humanize-number@0.0.2

Package has no specified license

Recommendation: Check the package code and files for license information

via: koa-logger@1.3.1

12 high severity issues

redis@2.6.5

Node-Redis potential exponential regex in monitor mode

Recommendation: Upgrade to version 3.1.1 or later

via: koa-redis@2.1.3

swig@1.4.2

Arbitrary local file read vulnerability during template rendering

Recommendation: None

via: koa-onerror@1.3.1

uglify-js@2.4.24

Regular Expression Denial of Service in uglify-js

Recommendation: Upgrade to version 2.6.0 or later

via: koa-onerror@1.3.1

debug@2.3.3

debug Inefficient Regular Expression Complexity vulnerability

Recommendation: Upgrade to version 2.6.9 or later

via: koa-redis@2.1.3

optimist@0.6.1

Package uses an invalid SPDX license ("MIT/X11")

Recommendation: Validate that the package complies with your license policy

via: koa-onerror@1.3.1

wordwrap@0.0.2

Package uses an invalid SPDX license ("MIT/X11")

Recommendation: Validate that the package complies with your license policy

via: koa-onerror@1.3.1

yargs@3.5.4

Package uses an invalid SPDX license ("MIT/X11")

Recommendation: Validate that the package complies with your license policy

via: koa-onerror@1.3.1

source-map@0.1.34

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: koa-onerror@1.3.1

uglify-js@2.4.24

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: koa-onerror@1.3.1

ejs@2.7.4

Package uses postinstall script: "node ./postinstall.js"

via: koa-ejs@3.0.0

koa-csrf@2.5.0

Deprecated package

via: koa-csrf@2.5.0

swig@1.4.2

Deprecated package

via: koa-onerror@1.3.1

3 moderate severity issues

debug@2.3.3

Regular Expression Denial of Service in debug

Recommendation: Upgrade to version 2.6.9 or later

via: koa-redis@2.1.3

ms@0.7.2

Vercel ms Inefficient Regular Expression Complexity vulnerability

Recommendation: Upgrade to version 2.0.0 or later

via: koa-redis@2.1.3

minimist@0.0.10

Prototype Pollution in minimist

Recommendation: Upgrade to version 0.2.1 or later

via: koa-onerror@1.3.1

5 low severity issues

optimist@0.6.1

Package uses a license that is not OSI approved ("MIT/X11")

Recommendation: Read and validate the license terms

via: koa-onerror@1.3.1

wordwrap@0.0.2

Package uses a license that is not OSI approved ("MIT/X11")

Recommendation: Read and validate the license terms

via: koa-onerror@1.3.1

yargs@3.5.4

Package uses a license that is not OSI approved ("MIT/X11")

Recommendation: Read and validate the license terms

via: koa-onerror@1.3.1

source-map@0.1.34

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: koa-onerror@1.3.1

uglify-js@2.4.24

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: koa-onerror@1.3.1

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

126 Packages, Including:

ansi-regex@2.1.1

ansi-styles@2.2.1

any-promise@1.3.0

async@0.2.10

bindings@1.5.0

bytes@2.5.0

bytes@3.1.2

call-bind@1.0.7

camelcase@1.2.1

chalk@1.1.3

clone@1.0.4

co-body@5.2.0

co-from-stream@0.0.0

co-fs@1.2.0

co-read@0.0.1

co-redis@2.1.1

co@4.6.0

compressible@2.0.18

copy-to@2.0.1

crc@3.4.4

csrf@3.1.0

debug@2.3.3

debug@2.6.9

debug@3.2.7

decamelize@1.2.0

deep-equal@1.1.2

defaults@1.0.4

define-data-property@1.1.4

define-properties@1.2.1

depd@1.1.2

depd@2.0.0

double-ended-queue@2.1.0-0

es-define-property@1.0.0

es-errors@1.3.0

es6-promise@3.3.1

es6-promisify@4.1.0

escape-string-regexp@1.0.5

etag@1.8.1

file-uri-to-path@1.0.0

fs-readdir-recursive@1.0.0

function-bind@1.1.2

functions-have-names@1.2.3

get-intrinsic@1.2.4

gopd@1.0.1

has-ansi@2.0.0

has-property-descriptors@1.0.2

has-proto@1.0.3

has-symbols@1.0.3

has-tostringtag@1.0.2

hasown@2.0.1

MIT/X11

Invalid

Not OSI Approved

3 Packages, Including:

optimist@0.6.1

wordwrap@0.0.2

yargs@3.5.4

N/A

N/A

2 Packages, Including:

bytes@1.0.0

humanize-number@0.0.2

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

2 Packages, Including:

hiredis@0.5.0

qs@6.11.2

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

2 Packages, Including:

inherits@2.0.4

setprototypeof@1.2.0

BSD

Invalid

Not OSI Approved

2 Packages, Including:

source-map@0.1.34

uglify-js@2.4.24

BSD-3-Clause OR MIT

Permissive

1 Packages, Including:

amdefine@1.0.1

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

1 Packages, Including:

ejs@2.7.4

Direct Dependencies

18

All Dependencies CSV

ⓘ This is a list of koa-middlewares 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
koa-bodyparser	2.5.0	4.01 kB	MIT	prod
koa-compress	1.0.9	2.58 kB	MIT	prod
koa-conditional-get	1.0.4	1.14 kB	MIT	prod
koa-csrf	2.5.0	3.17 kB	MIT	prod	1
koa-ejs	3.0.0	3.52 kB	MIT	prod	1 1
koa-etag	2.1.2	2.11 kB	MIT	prod
koa-favicon	1.2.1	1.34 kB	MIT	prod
koa-generic-session	1.11.7	8.93 kB	MIT	prod
koa-logger	1.3.1	2.25 kB	MIT	prod	2
koa-onerror	1.3.1	3.74 kB	MIT	prod	1 8 1 5
koa-redis	2.1.3	5.71 kB	MIT	prod	2 2
koa-resource-router	0.4.0	4.43 kB	MIT	prod
koa-rewrite	1.1.2	1.85 kB	MIT	prod
koa-router	5.4.2	10.88 kB	MIT	prod
koa-rt	0.0.2	984 B	MIT	prod
koa-safe-jsonp	0.3.1	2.53 kB	MIT	prod
koa-session	3.4.0	4.7 kB	MIT	prod
koa-static-cache	3.2.1	5.43 kB	MIT	prod

Recent Versions