Generated on Apr 18, 2024 via pnpm

Npm

Home

login-with 1.3.2

Stateless microservice for authentication with OAuth etc.

oauth

authentication

Package summary

issues

licenses

Package created

6 Jul 2017

Version published

8 Aug 2018

Maintainers

Total deps

117

Direct deps

License

MIT

Issues

3 critical severity issues

critical

xmldom@0.1.31

xmldom allows multiple root nodes in a DOM

Recommendation: None

via: passport-twitter@1.0.4

pause@0.0.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: passport-strava@0.2.0 & others

pkginfo@0.2.3

Package has no specified license

Recommendation: Check the package code and files for license information

via: passport-mixer@1.0.2 & others

Collapse

Expand

1 high severity issue

high

xmldom@0.1.31

Deprecated package

via: passport-twitter@1.0.4

Collapse

Expand

7 moderate severity issues

moderate

jsonwebtoken@8.5.1

jsonwebtoken unrestricted key type could lead to legacy keys usage

Recommendation: Upgrade to version 9.0.0 or later

via: jsonwebtoken@8.5.1

xmldom@0.1.31

Misinterpretation of malicious XML input

Recommendation: Upgrade to version 0.5.0 or later

via: passport-twitter@1.0.4

jsonwebtoken@8.5.1

jsonwebtoken's insecure implementation of key retrieval function could lead to Forgeable Public/Private Tokens from RSA to HMAC

Recommendation: Upgrade to version 9.0.0 or later

via: jsonwebtoken@8.5.1

jsonwebtoken@8.5.1

jsonwebtoken vulnerable to signature validation bypass due to insecure default algorithm in jwt.verify()

Recommendation: Upgrade to version 9.0.0 or later

via: jsonwebtoken@8.5.1

passport@0.1.18

Passport vulnerable to session regeneration when a users logs in or out

Recommendation: Upgrade to version 0.6.0 or later

via: passport-strava@0.2.0 & others

xmldom@0.1.31

Misinterpretation of malicious XML input

Recommendation: None

via: passport-twitter@1.0.4

pause@0.0.1

Package has no specified source code repository

via: passport-strava@0.2.0 & others

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

105 Packages, Including:

accepts@1.3.8

array-flatten@1.1.1

base64url@3.0.1

body-parser@1.20.2

bytes@3.1.2

call-bind@1.0.7

content-disposition@0.5.4

content-type@1.0.5

cookie-parser@1.4.6

cookie-signature@1.0.6

cookie-signature@1.0.7

cookie@0.4.1

cookie@0.6.0

debug@2.6.9

debug@4.3.4

define-data-property@1.1.4

depd@2.0.0

destroy@1.2.0

ee-first@1.1.1

encodeurl@1.0.2

es-define-property@1.0.0

es-errors@1.3.0

escape-html@1.0.3

etag@1.8.1

express-session@1.18.0

express@4.19.2

finalhandler@1.2.0

forwarded@0.2.0

fresh@0.5.2

function-bind@1.1.2

get-intrinsic@1.2.4

gopd@1.0.1

has-property-descriptors@1.0.2

has-proto@1.0.3

has-symbols@1.0.3

hasown@2.0.2

http-errors@2.0.0

iconv-lite@0.4.24

ipaddr.js@1.9.1

jsonwebtoken@8.5.1

jwa@1.4.1

jws@3.2.2

lodash.includes@4.3.0

lodash.isboolean@3.0.3

lodash.isinteger@4.0.4

lodash.isnumber@3.0.3

lodash.isplainobject@4.0.6

lodash.isstring@4.0.1

lodash.once@4.1.1

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

6 Packages, Including:

inherits@2.0.4

lru-cache@4.1.5

pseudomap@1.0.2

semver@5.7.2

setprototypeof@1.2.0

yallist@2.1.2

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

2 Packages, Including:

buffer-equal-constant-time@1.0.1

qs@6.11.0

N/A

2 Packages, Including:

pause@0.0.1

pkginfo@0.2.3

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

1 Packages, Including:

ecdsa-sig-formatter@1.0.11

(LGPL-2.0 or MIT)

Permissive

1 Packages, Including:

xmldom@0.1.31

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of login-with 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
cookie-parser	1.4.6	4.2 kB	MIT	prod
express-session	1.18.0	22.25 kB	MIT	prod
express	4.19.2	209.73 kB	MIT	prod
jsonwebtoken	8.5.1	21.01 kB	MIT	prod	3
memorystore	1.6.7	6.27 kB	MIT	prod
passport-facebook	2.1.1	6.88 kB	MIT	prod
passport-github2	0.1.12	4.21 kB	MIT	prod
passport-google-oauth20	1.0.0	5.86 kB	MIT	prod
passport-instagram	1.0.0	3.38 kB	MIT	prod
passport-linkedin-oauth2	1.6.1	7.22 kB	MIT	prod
passport-mixer	1.0.2	2.97 kB	MIT	prod	1
passport-reddit	0.2.4	4.73 kB	MIT	prod
passport-strategy	1.0.0	2.42 kB	MIT	prod
passport-strava	0.2.0	3.29 kB	MIT	prod	2 2
passport-twitter	1.0.4	5.5 kB	MIT	prod	1 1 2
passport	0.3.2	10 kB	MIT	prod	1 2