Generated on Apr 21, 2024 via pnpm

Npm

Home

kubernetes-client 8.3.2

Simplified Kubernetes API client.

kubernetes

kubectl

containers

Package summary

issues

licenses

Package created

2 Jun 2016

Version published

23 Jul 2019

Maintainers

Total deps

196

Direct deps

License

MIT

Issues

8 high severity issues

high

node-jose@1.1.4

Improper calculations in ECC implementation can trigger a Denial-of-Service (DoS)

Recommendation: Upgrade to version 2.2.0 or later

via: openid-client@2.5.0

http-cache-semantics@3.8.1

http-cache-semantics vulnerable to Regular Expression Denial of Service

Recommendation: Upgrade to version 4.1.1 or later

via: openid-client@2.5.0

node-forge@0.8.5

Prototype Pollution in node-forge

Recommendation: Upgrade to version 0.10.0 or later

via: openid-client@2.5.0

node-forge@0.8.5

Improper Verification of Cryptographic Signature in node-forge

Recommendation: Upgrade to version 1.3.0 or later

via: openid-client@2.5.0

node-forge@0.8.5

Improper Verification of Cryptographic Signature in node-forge

Recommendation: Upgrade to version 1.3.0 or later

via: openid-client@2.5.0

har-validator@5.1.5

Deprecated package

via: @kubernetes/client-node@0.10.2 & others

request@2.88.2

Deprecated package

via: @kubernetes/client-node@0.10.2 & others

uuid@3.4.0

Deprecated package

via: @kubernetes/client-node@0.10.2 & others

Collapse

Expand

5 moderate severity issues

moderate

node-forge@0.8.5

Improper Verification of Cryptographic Signature in `node-forge`

Recommendation: Upgrade to version 1.3.0 or later

via: openid-client@2.5.0

got@8.3.2

Got allows a redirect to a UNIX socket

Recommendation: Upgrade to version 11.8.5 or later

via: openid-client@2.5.0

node-forge@0.8.5

Open Redirect in node-forge

Recommendation: Upgrade to version 1.0.0 or later

via: openid-client@2.5.0

tough-cookie@2.5.0

tough-cookie Prototype Pollution vulnerability

Recommendation: Upgrade to version 4.1.3 or later

via: @kubernetes/client-node@0.10.2 & others

request@2.88.2

Server-Side Request Forgery in Request

Recommendation: None

via: @kubernetes/client-node@0.10.2 & others

Collapse

Expand

3 low severity issues

low

node-forge@0.8.5

Prototype Pollution in node-forge debug API.

Recommendation: Upgrade to version 1.0.0 or later

via: openid-client@2.5.0

node-forge@0.8.5

Prototype Pollution in node-forge util.setPath API

Recommendation: Upgrade to version 0.10.0 or later

via: openid-client@2.5.0

node-forge@0.8.5

URL parsing in node-forge could lead to undesired behavior.

Recommendation: Upgrade to version 1.0.0 or later

via: openid-client@2.5.0

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

160 Packages, Including:

@sindresorhus/is@0.7.0

@types/caseless@0.12.5

@types/js-yaml@3.12.10

@types/keyv@3.1.4

@types/node@10.17.60

@types/node@20.12.7

@types/request@2.48.12

@types/responselike@1.0.3

@types/tough-cookie@4.0.5

@types/underscore@1.11.15

@types/ws@6.0.4

aggregate-error@1.0.0

ajv@6.12.6

argparse@1.0.10

arr-union@3.1.0

asn1@0.2.6

assert-plus@1.0.0

async-limiter@1.0.1

asynckit@0.4.0

aws4@1.12.0

balanced-match@1.0.2

base64-js@1.5.1

base64url@3.0.1

brace-expansion@1.1.11

browserify-zlib@0.2.0

buffer@5.7.1

cacheable-request@2.1.4

call-bind@1.0.7

camelcase@5.3.1

clean-stack@1.3.0

clone-deep@0.2.4

clone-response@1.0.2

combined-stream@1.0.8

concat-map@0.0.1

core-util-is@1.0.2

core-util-is@1.0.3

dashdash@1.14.1

decode-uri-component@0.2.2

decompress-response@3.3.0

deepmerge@4.3.1

define-data-property@1.1.4

delayed-stream@1.0.0

depd@2.0.0

ecc-jsbn@0.1.2

end-of-stream@1.4.4

es-define-property@1.0.0

es-errors@1.3.0

es6-promise@4.2.8

extend@3.0.2

extsprintf@1.3.0

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

11 Packages, Including:

fs.realpath@1.0.0

glob@7.2.3

har-schema@2.0.0

inflight@1.0.6

inherits@2.0.4

json-stringify-safe@5.0.1

lru-cache@5.1.1

minimatch@3.1.2

once@1.4.0

wrappy@1.0.2

yallist@3.1.1

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

9 Packages, Including:

@kubernetes/client-node@0.10.2

aws-sign2@0.7.0

caseless@0.12.0

forever-agent@0.6.1

long@4.0.0

node-jose@1.1.4

oauth-sign@0.9.0

request@2.88.2

tunnel-agent@0.6.0

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

8 Packages, Including:

bcrypt-pbkdf@1.0.2

duplexer3@0.1.5

ieee754@1.2.1

qs@6.12.1

qs@6.5.3

shelljs@0.8.5

sprintf-js@1.0.3

tough-cookie@2.5.0

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

3 Packages, Including:

esprima@4.0.1

http-cache-semantics@3.8.1

uri-js@4.4.1

(AFL-2.1 OR BSD-3-Clause)

Permissive

1 Packages, Including:

json-schema@0.4.0

(BSD-3-Clause OR GPL-2.0)

Permissive

1 Packages, Including:

node-forge@0.8.5

(MIT AND Zlib)

Permissive

1 Packages, Including:

pako@1.0.11

BSD Zero Clause License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

include-copyright

include-license

include-original

Cannot

hold-liable

Must

1 Packages, Including:

tslib@1.14.1

The Unlicense

Public Domain

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

private-use

modify

Cannot

include-copyright

hold-liable

Must

1 Packages, Including:

tweetnacl@0.14.5

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of kubernetes-client 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
@kubernetes/client-node	0.10.2	372.59 kB	Apache-2.0	prod	3 2
camelcase	5.3.1	2.96 kB	MIT	prod
deepmerge	4.3.1	8.25 kB	MIT	prod
depd	2.0.0	8.18 kB	MIT	prod
js-yaml	3.14.1	75.07 kB	MIT	prod
json-stream	1.0.0	2.61 kB	MIT	prod
openid-client	2.5.0	28.02 kB	MIT	prod	6 3 3
pump	3.0.0	3.16 kB	MIT	prod
qs	6.12.1	241.26 kB	BSD-3-Clause	prod
request	2.88.2	57.83 kB	Apache-2.0	prod	3 2
swagger-fluent	3.2.1	7.01 kB	MIT	prod	3 2
url-join	4.0.1	5.64 kB	MIT	prod
ws	7.5.9	28.37 kB	MIT	prod