Libreact Security & License Audit

Generated on Apr 26, 2024 via pnpm

Repo

Npm

Home

Package summary

issues

licenses

Package created

24 Jan 2018

Version published

15 Jun 2020

Maintainers

Total deps

Direct deps

License

UNKNOWN

Issues

5 critical severity issues

critical

fast-extend@1.0.2

Package has no specified license

Recommendation: Check the package code and files for license information

via: fast-af@0.1.0

fast-shallow-equal@0.1.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: fast-af@0.1.0

libreact@2.13.3

Package has no specified license

Recommendation: Check the package code and files for license information

via: libreact@2.13.3

nano-css@1.17.2

Package has no specified license

Recommendation: Check the package code and files for license information

via: nano-css@1.17.2

react-universal-interface@0.3.2

Package has no specified license

Recommendation: Check the package code and files for license information

via: react-universal-interface@0.3.2

Collapse

Expand

5 high severity issues

high

node-fetch@1.7.3

node-fetch forwards secure headers to untrusted sites

Recommendation: Upgrade to version 2.6.7 or later

via: react-focus-lock@1.6.5

core-js@1.2.7

Deprecated package

via: react-focus-lock@1.6.5

libreact@2.13.3

Package uses postinstall script: "opencollective-postinstall"

via: libreact@2.13.3

react-dom@16.14.0

Deprecated package

via: nano-css@1.17.2 & others

react@16.14.0

Deprecated package

via: nano-css@1.17.2 & others

Collapse

Expand

2 moderate severity issues

moderate

fast-af@0.1.0

Package has no specified source code repository

via: fast-af@0.1.0

fast-extend@1.0.2

Package has no specified source code repository

via: fast-af@0.1.0

Collapse

Expand

2 low severity issues

low

node-fetch@1.7.3

The `size` option isn't honored after following a redirect in node-fetch

Recommendation: Upgrade to version 2.6.1 or later

via: react-focus-lock@1.6.5

mdn-data@2.0.14

Package uses a license that is not OSI approved ("CC0-1.0")

Recommendation: Read and validate the license terms

via: nano-css@1.17.2

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

37 Packages, Including:

@babel/runtime@7.24.4

asap@2.0.6

bowser@1.9.4

core-js@1.2.7

css-in-js-utils@2.0.1

css-tree@1.1.3

encoding@0.1.13

fast-deep-equal@1.1.0

fastest-stable-stringify@1.0.1

fbjs@0.8.18

iconv-lite@0.6.3

inline-style-prefixer@4.0.2

is-stream@1.1.0

isobject@3.0.1

isomorphic-fetch@2.2.1

js-tokens@4.0.0

loose-envify@1.4.0

node-fetch@1.7.3

object-assign@4.1.1

opencollective-postinstall@2.0.3

promise@7.3.1

prop-types@15.8.1

react-dom@16.14.0

react-is@16.13.1

react-side-effect@1.2.0

react@16.14.0

regenerator-runtime@0.14.1

rtl-css-js@1.16.1

safer-buffer@2.1.2

scheduler@0.19.1

screenfull@3.3.3

setimmediate@1.0.5

shallowequal@1.1.0

stylis@3.5.0

throttle-debounce@2.3.0

ua-parser-js@0.7.37

whatwg-fetch@3.6.20

N/A

5 Packages, Including:

fast-extend@1.0.2

fast-shallow-equal@0.1.1

libreact@2.13.3

nano-css@1.17.2

react-universal-interface@0.3.2

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

3 Packages, Including:

fast-af@0.1.0

focus-lock@0.1.0

react-focus-lock@1.6.5

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

3 Packages, Including:

hyphenate-style-name@1.0.4

prop-types@15.5.10

source-map@0.6.1

Creative Commons Zero v1.0 Universal

Public Domain

Not OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

Cannot

Must

1 Packages, Including:

mdn-data@2.0.14

BSD Zero Clause License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

include-copyright

include-license

include-original

Cannot

hold-liable

Must

1 Packages, Including:

tslib@2.6.2

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of libreact 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
fast-af	0.1.0	650 B	ISC	prod	2 2
nano-css	1.17.2	29.24 kB	UNKNOWN	prod	1 2 1
opencollective-postinstall	2.0.3	1.9 kB	MIT	prod
prop-types	15.8.1	22.12 kB	MIT	prod peer
react-dom	16.14.0	722.53 kB	MIT	prod peer	2
react-focus-lock	1.6.5	8.15 kB	ISC	prod	3 1
react-universal-interface	0.3.2	6.56 kB	UNKNOWN	prod	1 1
react	16.14.0	59.16 kB	MIT	prod peer	1
screenfull	3.3.3	4.55 kB	MIT	prod
throttle-debounce	2.3.0	13.27 kB	MIT	prod
tslib	2.6.2	15.59 kB	0BSD	prod peer