Hold on, we're currently generating a fresh version of this report

Generated on Apr 29, 2024 via pnpm

ldapauth 2.3.0

Authenticate against an LDAP server

Package summary

19

issues

5

licenses

Package created

13 Dec 2011

Version published

26 Apr 2019

Maintainers

1

Total deps

23

Direct deps

6

License

MIT

Issues

19

12 critical severity issues

json-schema@0.2.2

json-schema is vulnerable to Prototype Pollution

Recommendation: Upgrade to version 0.4.0 or later

via: ldapjs@0.7.1

asn1@0.2.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: ldapjs@0.7.1

assert-plus@0.1.4

Package has no specified license

Recommendation: Check the package code and files for license information

via: assert-plus@0.1.4

assert-plus@0.1.5

Package has no specified license

Recommendation: Check the package code and files for license information

via: ldapjs@0.7.1

bunyan@0.22.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: ldapjs@0.7.1

dtrace-provider@0.2.8

Package has no specified license

Recommendation: Check the package code and files for license information

via: ldapjs@0.7.1

extsprintf@1.0.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: ldapjs@0.7.1

jsprim@0.3.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: ldapjs@0.7.1

ldapjs@0.7.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: ldapjs@0.7.1

pooling@0.4.6

Package has no specified license

Recommendation: Check the package code and files for license information

via: ldapjs@0.7.1

verror@1.1.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: ldapjs@0.7.1

verror@1.3.3

Package has no specified license

Recommendation: Check the package code and files for license information

via: ldapjs@0.7.1

4 high severity issues

mv@0.0.5

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: ldapjs@0.7.1

once@1.3.0

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: ldapjs@0.7.1 & others

json-schema@0.2.2

Package uses an invalid SPDX license ("(AFLv2.1 OR BSD)")

Recommendation: Validate that the package complies with your license policy

via: ldapjs@0.7.1

bcrypt@0.8.7

Deprecated package

via: bcrypt@0.8.7

1 moderate severity issue

bcrypt@0.8.7

Integer Overflow or Wraparound and Use of a Broken or Risky Cryptographic Algorithm in bcrypt

Recommendation: Upgrade to version 5.0.0 or later

via: bcrypt@0.8.7

2 low severity issues

mv@0.0.5

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: ldapjs@0.7.1

once@1.3.0

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: ldapjs@0.7.1 & others

Licenses

N/A

N/A

11 Packages, Including:

asn1@0.2.1

assert-plus@0.1.4

assert-plus@0.1.5

bunyan@0.22.1

dtrace-provider@0.2.8

extsprintf@1.0.0

jsprim@0.3.0

ldapjs@0.7.1

pooling@0.4.6

verror@1.1.0

verror@1.3.3

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

8 Packages, Including:

backoff@2.3.0

bcrypt@0.8.7

bindings@1.2.1

ldapauth@2.3.0

lru-cache@2.0.4

nan@2.3.5

nopt@2.1.1

vasync@1.4.0

BSD

Invalid

Not OSI Approved

2 Packages, Including:

mv@0.0.5

once@1.3.0

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

1 Packages, Including:

abbrev@1.1.1

(AFLv2.1 OR BSD)

Invalid

1 Packages, Including:

json-schema@0.2.2

Direct Dependencies

6

All Dependencies CSV

ⓘ This is a list of ldapauth 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
assert-plus	0.1.4	3.09 kB	UNKNOWN	prod	1
backoff	2.3.0	53.04 kB	MIT	prod
bcrypt	0.8.7	24.87 kB	MIT	prod	1 1
ldapjs	0.7.1	44.55 kB	UNKNOWN	prod	11 3 2
lru-cache	2.0.4	4.58 kB	MIT	prod
once	1.3.0	1.89 kB	BSD	prod	1 1

All Versions