Hold on, we're currently generating a fresh version of this report

Generated on Apr 29, 2024 via pnpm

ldapauth 2.2.2

Authenticate against an LDAP server

Package summary

16

issues

3

licenses

Package created

13 Dec 2011

Version published

14 Apr 2013

Maintainers

1

Total deps

16

Direct deps

3

License

MIT

Issues

16

11 critical severity issues

asn1@0.1.11

Package has no specified license

Recommendation: Check the package code and files for license information

via: ldapjs@0.5.6

assert-plus@0.1.2

Package has no specified license

Recommendation: Check the package code and files for license information

via: ldapjs@0.5.6

bindings@1.0.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: bcrypt@0.7.5

buffertools@1.1.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: ldapjs@0.5.6

bunyan@0.14.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: ldapjs@0.5.6

dtrace-provider@0.2.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: ldapjs@0.5.6

extsprintf@1.0.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: ldapjs@0.5.6

ldapjs@0.5.6

Package has no specified license

Recommendation: Check the package code and files for license information

via: ldapjs@0.5.6

pooling@0.3.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: ldapjs@0.5.6

vasync@1.3.2

Package has no specified license

Recommendation: Check the package code and files for license information

via: ldapjs@0.5.6

verror@1.1.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: ldapjs@0.5.6

3 high severity issues

ldapauth@2.2.2

LDAP Injection in ldapauth

Recommendation: None

via: ldapauth@2.2.2

ldapauth@2.2.2

LDAP Injection in ldapauth

Recommendation: None

via: ldapauth@2.2.2

bcrypt@0.7.5

Deprecated package

via: bcrypt@0.7.5

2 moderate severity issues

bcrypt@0.7.5

Integer Overflow or Wraparound and Use of a Broken or Risky Cryptographic Algorithm in bcrypt

Recommendation: Upgrade to version 5.0.0 or later

via: bcrypt@0.7.5

assert-plus@0.1.2

Package has no specified source code repository

via: ldapjs@0.5.6

Licenses

N/A

N/A

11 Packages, Including:

asn1@0.1.11

assert-plus@0.1.2

bindings@1.0.0

buffertools@1.1.0

bunyan@0.14.0

dtrace-provider@0.2.1

extsprintf@1.0.0

ldapjs@0.5.6

pooling@0.3.1

vasync@1.3.2

verror@1.1.0

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

4 Packages, Including:

bcrypt@0.7.5

ldapauth@2.2.2

lru-cache@2.0.4

nopt@1.0.10

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

1 Packages, Including:

abbrev@1.1.1

Direct Dependencies

3

All Dependencies CSV

ⓘ This is a list of ldapauth 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
bcrypt	0.7.5	25.46 kB	MIT	prod	1 1 1
ldapjs	0.5.6	960.57 kB	UNKNOWN	prod	10 1
lru-cache	2.0.4	4.58 kB	MIT	prod

All Versions