Hold on, we're currently generating a fresh version of this report

Generated on May 23, 2024 via pnpm

ldapauth-fork 2.3.0

Authenticate against an LDAP server

Package summary

21

issues

5

licenses

Package created

21 Aug 2013

Version published

24 Feb 2015

Maintainers

1

Total deps

20

Direct deps

3

License

MIT

Issues

21

12 critical severity issues

json-schema@0.2.2

json-schema is vulnerable to Prototype Pollution

Recommendation: Upgrade to version 0.4.0 or later

via: ldapjs@0.7.1

asn1@0.2.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: ldapjs@0.7.1

assert-plus@0.1.5

Package has no specified license

Recommendation: Check the package code and files for license information

via: ldapjs@0.7.1

bindings@1.0.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: bcrypt@0.7.8

bunyan@0.22.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: ldapjs@0.7.1

dtrace-provider@0.2.8

Package has no specified license

Recommendation: Check the package code and files for license information

via: ldapjs@0.7.1

extsprintf@1.0.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: ldapjs@0.7.1

jsprim@0.3.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: ldapjs@0.7.1

ldapjs@0.7.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: ldapjs@0.7.1

pooling@0.4.6

Package has no specified license

Recommendation: Check the package code and files for license information

via: ldapjs@0.7.1

verror@1.1.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: ldapjs@0.7.1

verror@1.3.3

Package has no specified license

Recommendation: Check the package code and files for license information

via: ldapjs@0.7.1

6 high severity issues

ldapauth-fork@2.3.0

LDAP Injection in ldapauth

Recommendation: Upgrade to version 2.3.3 or later

via: ldapauth-fork@2.3.0

ldapauth-fork@2.3.0

LDAP Injection in ldapauth

Recommendation: Upgrade to version 2.3.3 or later

via: ldapauth-fork@2.3.0

mv@0.0.5

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: ldapjs@0.7.1

once@1.3.0

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: ldapjs@0.7.1

json-schema@0.2.2

Package uses an invalid SPDX license ("(AFLv2.1 OR BSD)")

Recommendation: Validate that the package complies with your license policy

via: ldapjs@0.7.1

bcrypt@0.7.8

Deprecated package

via: bcrypt@0.7.8

1 moderate severity issue

bcrypt@0.7.8

Integer Overflow or Wraparound and Use of a Broken or Risky Cryptographic Algorithm in bcrypt

Recommendation: Upgrade to version 5.0.0 or later

via: bcrypt@0.7.8

2 low severity issues

mv@0.0.5

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: ldapjs@0.7.1

once@1.3.0

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: ldapjs@0.7.1

Licenses

N/A

N/A

11 Packages, Including:

asn1@0.2.1

assert-plus@0.1.5

bindings@1.0.0

bunyan@0.22.1

dtrace-provider@0.2.8

extsprintf@1.0.0

jsprim@0.3.0

ldapjs@0.7.1

pooling@0.4.6

verror@1.1.0

verror@1.3.3

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

5 Packages, Including:

bcrypt@0.7.8

ldapauth-fork@2.3.0

lru-cache@2.5.0

nopt@2.1.1

vasync@1.4.0

BSD

Invalid

Not OSI Approved

2 Packages, Including:

mv@0.0.5

once@1.3.0

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

1 Packages, Including:

abbrev@1.1.1

(AFLv2.1 OR BSD)

Invalid

1 Packages, Including:

json-schema@0.2.2

Direct Dependencies

3

All Dependencies CSV

ⓘ This is a list of ldapauth-fork 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
bcrypt	0.7.8	23.54 kB	MIT	prod optional	1 1 1
ldapjs	0.7.1	44.55 kB	UNKNOWN	prod	11 3 2
lru-cache	2.5.0	6.49 kB	MIT	prod

Recent Versions