Home
Docs
GitHub
Pricing
Blog
Log In

Run Sandworm Audit for your App

Get started
Hold on, we're currently generating a fresh version of this report
Generated on Feb 20, 2024 via pnpm

login-mongo 1.1.0

Simple authentication/users back-end using MongoDB
Package summary
Share
34
issues
12
critical severity
vulnerability
2
license
10
13
high severity
vulnerability
5
license
3
meta
5
6
moderate severity
vulnerability
6
3
low severity
vulnerability
1
license
2
8
licenses
52
MIT
29
ISC
10
N/A
7
other licenses
BSD-3-Clause
2
BSD
2
Apache-2.0
1
(MIT OR GPL)
1
+ 1 more
Package created
25 Oct 2013
Version published
4 Oct 2015
Maintainers
1
Total deps
98
Direct deps
8
License
MIT

Issues

34

12 critical severity issues

critical
Recommendation: Upgrade to version 6.4.16 or later
via: nodemailer@0.5.15
Recommendation: Upgrade to version 4.17.12 or later
via: lodash@2.2.1
Recommendation: Check the package code and files for license information
via: mongolian@0.1.18
Recommendation: Check the package code and files for license information
via: sinon@1.7.3
Recommendation: Check the package code and files for license information
via: sinon@1.7.3
Recommendation: Check the package code and files for license information
via: nodemailer@0.5.15
Recommendation: Check the package code and files for license information
via: mongolian@0.1.18
Recommendation: Check the package code and files for license information
via: mustache@0.7.3
Recommendation: Check the package code and files for license information
via: randpass@0.1.0
Recommendation: Check the package code and files for license information
via: mongolian@0.1.18
Recommendation: Check the package code and files for license information
via: mongolian@0.1.18
Recommendation: Check the package code and files for license information
via: mongolian@0.1.18
Collapse
Expand

13 high severity issues

high
Recommendation: Upgrade to version 2.2.1 or later
via: mustache@0.7.3
Recommendation: Upgrade to version 1.4.1 or later
via: nodemailer@0.5.15
Recommendation: Upgrade to version 4.17.11 or later
via: lodash@2.2.1
Recommendation: Upgrade to version 1.14.7 or later
via: nodemailer@0.5.15
Recommendation: Upgrade to version 4.17.21 or later
via: lodash@2.2.1
Recommendation: Validate that the package complies with your license policy
via: nodemailer@0.5.15
Recommendation: Validate that the package complies with your license policy
via: sinon@1.7.3
Recommendation: Validate that the package complies with your license policy
via: nodemailer@0.5.15
via: bcrypt@5.1.1
via: sinon@1.7.3
via: nodemailer@0.5.15
via: nodemailer@0.5.15
via: nodemailer@0.5.15
Collapse
Expand

6 moderate severity issues

moderate
Recommendation: Upgrade to version 4.17.11 or later
via: lodash@2.2.1
Recommendation: Upgrade to version 6.6.1 or later
via: nodemailer@0.5.15
Recommendation: Upgrade to version 1.14.8 or later
via: nodemailer@0.5.15
Recommendation: Upgrade to version 4.17.21 or later
via: lodash@2.2.1
Recommendation: Upgrade to version 1.15.4 or later
via: nodemailer@0.5.15
Recommendation: Upgrade to version 6.9.9 or later
via: nodemailer@0.5.15
Collapse
Expand

3 low severity issues

low
Recommendation: Upgrade to version 4.17.5 or later
via: lodash@2.2.1
Recommendation: Read and validate the license terms
via: nodemailer@0.5.15
Recommendation: Read and validate the license terms
via: sinon@1.7.3
Collapse
Expand

Licenses

MIT License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
Cannot
hold-liable
Must
include-copyright
include-license
52 Packages, Including:
abort-controller@3.0.0
addressparser@0.3.2
agent-base@6.0.2
ansi-regex@5.0.1
balanced-match@1.0.2
base64-js@1.5.1
bcrypt@5.1.1
brace-expansion@1.1.11
buffer@6.0.3
concat-map@0.0.1
debug@4.3.4
delegates@1.0.0
directmail@0.1.8
dkim-signer@0.1.2
emoji-regex@8.0.0
encoding@0.1.13
event-target-shim@5.0.1
events@3.3.0
he@0.3.6
https-proxy-agent@5.0.1
iconv-lite@0.6.3
is-fullwidth-code-point@3.0.0
lodash@2.2.1
login-mongo@1.1.0
mailcomposer@0.2.12
make-dir@3.1.0
mimelib@0.2.19
minizlib@2.1.2
mkdirp@1.0.4
ms@2.1.2
node-addon-api@5.1.0
node-fetch@2.7.0
nodemailer@0.5.15
object-assign@4.1.1
path-is-absolute@1.0.1
process@0.11.10
public-address@0.1.2
rai@0.1.12
readable-stream@3.6.2
readable-stream@4.5.2
safe-buffer@5.2.1
safer-buffer@2.1.2
simplesmtp@0.3.35
string-width@4.2.3
string_decoder@1.3.0
strip-ansi@6.0.1
timed@0.1.1
tr46@0.0.3
underscore@1.13.6
util-deprecate@1.0.2

ISC License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
Cannot
hold-liable
Must
include-copyright
include-license
29 Packages, Including:
abbrev@1.1.1
aproba@2.0.0
are-we-there-yet@2.0.0
chownr@2.0.0
color-support@1.1.3
console-control-strings@1.1.0
fs-minipass@2.1.0
fs.realpath@1.0.0
gauge@3.0.2
glob@7.2.3
has-unicode@2.0.1
inflight@1.0.6
inherits@2.0.4
lru-cache@6.0.0
minimatch@3.1.2
minipass@3.3.6
minipass@5.0.0
nopt@5.0.0
npmlog@5.0.1
once@1.4.0
rimraf@3.0.2
semver@6.3.1
semver@7.6.0
set-blocking@2.0.0
signal-exit@3.0.7
tar@6.2.0
wide-align@1.1.5
wrappy@1.0.2
yallist@4.0.0

N/A

N/A
10 Packages, Including:
buffalo@0.1.3
buster-core@0.6.4
buster-format@0.5.6
mime@1.2.11
mongolian@0.1.18
mustache@0.7.3
randpass@0.1.0
taxman@0.1.1
tosource@0.1.1
waiter@0.1.1

BSD 3-Clause "New" or "Revised" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
use-trademark
hold-liable
Must
include-copyright
include-license
2 Packages, Including:
@mapbox/node-pre-gyp@1.0.11
ieee754@1.2.1

BSD

Invalid
Not OSI Approved
2 Packages, Including:
follow-redirects@0.0.3
sinon@1.7.3

Apache License 2.0

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
use-patent-claims
place-warranty
Cannot
hold-liable
use-trademark
Must
include-copyright
include-license
state-changes
include-notice
1 Packages, Including:
detect-libc@2.0.2

(MIT OR GPL)

Invalid
1 Packages, Including:
punycode@1.2.4

BSD 2-Clause "Simplified" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
hold-liable
Must
include-copyright
include-license
1 Packages, Including:
webidl-conversions@3.0.1
Disclaimer

This deed highlights only some of the key features and terms of the actual license. It is not a license and has no legal value. You should carefully review all of the terms and conditions of the actual license before using the licensed material.

Sandworm is not a law firm and does not provide legal services. Distributing, displaying, or linking to this deed or the license that it summarizes does not create a lawyer-client or any other relationship.

Direct Dependencies

8
All Dependencies CSV
β“˜ This is a list of login-mongo 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.
NameVersionSizeLicenseTypeVulnerabilities
bcrypt5.1.132.53 kBMIT
prod
1
lodash2.2.1182.38 kBMIT
prod
1
2
2
1
mongolian0.1.1823.21 kBUNKNOWN
prod
5
mustache0.7.340.25 kBUNKNOWN
prod
1
1
nodemailer0.5.1559.3 kBMIT
prod
2
7
4
1
randpass0.1.02.38 kBUNKNOWN
prod
1
sinon1.7.3298.76 kBBSD
prod
2
2
1
timed0.1.11.53 kBMIT
prod

Visualizations