This package has been deprecated with the following message: LoopBack 2 is no longer maintained, please upgrade to a newer version. Learn more at https://loopback.io

Generated on Apr 3, 2024 via pnpm

Repo

Npm

Home

loopback 2.42.0

LoopBack: Open Source Framework for Node.js

web

restful

rest

Package summary

issues

licenses

Package created

13 Sep 2013

Version published

4 Jun 2019

Maintainers

Total deps

362

Direct deps

License

MIT

Issues

10 critical severity issues

critical

ejs@2.7.4

ejs template injection vulnerability

Recommendation: Upgrade to version 3.1.7 or later

via: ejs@2.7.4

nodemailer@2.7.2

Command injection in nodemailer

Recommendation: Upgrade to version 6.4.16 or later

via: nodemailer@2.7.2

underscore@1.7.0

Arbitrary Code Execution in underscore

Recommendation: Upgrade to version 1.12.1 or later

via: nodemailer@2.7.2

base64-js@0.0.2

Package has no specified license

Recommendation: Check the package code and files for license information

via: loopback-connector-remote@1.3.3 & others

duplex@1.0.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: loopback-connector-remote@1.3.3 & others

msgpack-js@0.3.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: loopback-connector-remote@1.3.3 & others

mux-demux@3.7.9

Package has no specified license

Recommendation: Check the package code and files for license information

via: loopback-connector-remote@1.3.3 & others

options@0.0.6

Package has no specified license

Recommendation: Check the package code and files for license information

via: loopback-connector-remote@1.3.3 & others

sse@0.0.7

Package has no specified license

Recommendation: Check the package code and files for license information

via: loopback-connector-remote@1.3.3 & others

uid2@0.0.3

Package has no specified license

Recommendation: Check the package code and files for license information

via: uid2@0.0.3

Collapse

Expand

16 high severity issues

high

canonical-json@0.0.4

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: canonical-json@0.0.4

rc@1.2.8

Package uses a custom license expression: `(BSD-2-Clause OR MIT OR Apache-2.0)`

Recommendation: Validate that the license expression complies with your license policy

via: loopback-datasource-juggler@2.59.3 & others

buildmail@4.0.1

Deprecated package

via: nodemailer@2.7.2

core-js-pure@3.36.1

Package uses postinstall script: "node -e "try{require('./postinstall')}catch(e){}""

via: loopback-connector-remote@1.3.3 & others

ejs@2.7.4

Package uses postinstall script: "node ./postinstall.js"

via: ejs@2.7.4

har-validator@5.1.5

Deprecated package

via: loopback-connector-remote@1.3.3 & others

loopback-datasource-juggler@2.59.3

Deprecated package

via: loopback-connector-remote@1.3.3 & others

loopback@2.42.0

Deprecated package

via: loopback@2.42.0

mailcomposer@4.0.1

Deprecated package

via: nodemailer@2.7.2

nodemailer@2.7.2

Deprecated package

via: nodemailer@2.7.2

request@2.88.2

Deprecated package

via: loopback-connector-remote@1.3.3 & others

socks@1.1.9

Deprecated package

via: nodemailer@2.7.2

stable@0.1.8

Deprecated package

via: stable@0.1.8

strong-remoting@2.36.1

Deprecated package

via: loopback-connector-remote@1.3.3 & others

tree-sitter@0.20.4

Package uses install script: "prebuild-install || node-gyp rebuild"

via: loopback-connector-remote@1.3.3 & others

uuid@3.4.0

Deprecated package

via: loopback-connector-remote@1.3.3 & others

Collapse

Expand

8 moderate severity issues

moderate

mem@1.1.0

Denial of Service in mem

Recommendation: Upgrade to version 4.0.0 or later

via: loopback-connector-remote@1.3.3 & others

nodemailer@2.7.2

Header injection in nodemailer

Recommendation: Upgrade to version 6.6.1 or later

via: nodemailer@2.7.2

nodemailer@2.7.2

nodemailer ReDoS when trying to send a specially crafted email

Recommendation: Upgrade to version 6.9.9 or later

via: nodemailer@2.7.2

tough-cookie@2.5.0

tough-cookie Prototype Pollution vulnerability

Recommendation: Upgrade to version 4.1.3 or later

via: loopback-connector-remote@1.3.3 & others

xml2js@0.4.23

xml2js is vulnerable to prototype pollution

Recommendation: Upgrade to version 0.5.0 or later

via: loopback-connector-remote@1.3.3 & others

request@2.88.2

Server-Side Request Forgery in Request

Recommendation: None

via: loopback-connector-remote@1.3.3 & others

eyes@0.1.8

Package has no specified source code repository

via: loopback-connector-remote@1.3.3 & others

uid2@0.0.3

Package has no specified source code repository

via: uid2@0.0.3

Collapse

Expand

1 low severity issue

low

canonical-json@0.0.4

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: canonical-json@0.0.4

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

255 Packages, Including:

@babel/runtime-corejs3@7.24.1

@types/node@10.17.60

@types/ramda@0.29.12

accepts@1.3.8

addressparser@1.0.1

ajv@6.12.6

argparse@1.0.10

array-flatten@1.1.1

asn1@0.2.6

assert-plus@1.0.0

async@0.9.2

async@1.0.0

async@1.5.2

async@2.6.4

asynckit@0.4.0

aws4@1.12.0

axios@1.6.8

balanced-match@1.0.2

base64-js@1.0.2

base64-js@1.5.1

bcryptjs@2.4.3

bl@1.2.3

bl@4.1.0

bluebird@3.7.2

body-parser@1.20.2

bops@0.0.7

bops@1.0.0

brace-expansion@1.1.11

brace-expansion@2.0.1

buffer@5.7.1

buildmail@4.0.1

bytes@3.1.2

call-bind@1.0.7

combined-stream@1.0.8

commander@2.20.3

concat-map@0.0.1

content-disposition@0.5.4

content-type@1.0.5

cookie-parser@1.4.6

cookie-signature@1.0.6

cookie@0.4.1

cookie@0.6.0

core-js-pure@3.36.1

core-util-is@1.0.2

core-util-is@1.0.3

cors@2.8.5

cross-spawn@5.1.0

dashdash@1.14.1

debug@2.6.9

debug@3.2.7

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

41 Packages, Including:

@swagger-api/apidom-ast@0.99.0

@swagger-api/apidom-core@0.99.0

@swagger-api/apidom-error@0.99.0

@swagger-api/apidom-json-pointer@0.99.0

@swagger-api/apidom-ns-api-design-systems@0.99.0

@swagger-api/apidom-ns-asyncapi-2@0.99.0

@swagger-api/apidom-ns-json-schema-draft-4@0.99.0

@swagger-api/apidom-ns-json-schema-draft-6@0.99.0

@swagger-api/apidom-ns-json-schema-draft-7@0.99.0

@swagger-api/apidom-ns-openapi-2@0.99.0

@swagger-api/apidom-ns-openapi-3-0@0.99.0

@swagger-api/apidom-ns-openapi-3-1@0.99.0

@swagger-api/apidom-ns-workflows-1@0.99.0

@swagger-api/apidom-parser-adapter-api-design-systems-json@0.99.0

@swagger-api/apidom-parser-adapter-api-design-systems-yaml@0.99.0

@swagger-api/apidom-parser-adapter-asyncapi-json-2@0.99.0

@swagger-api/apidom-parser-adapter-asyncapi-yaml-2@0.99.0

@swagger-api/apidom-parser-adapter-json@0.99.0

@swagger-api/apidom-parser-adapter-openapi-json-2@0.99.0

@swagger-api/apidom-parser-adapter-openapi-json-3-0@0.99.0

@swagger-api/apidom-parser-adapter-openapi-json-3-1@0.99.0

@swagger-api/apidom-parser-adapter-openapi-yaml-2@0.99.0

@swagger-api/apidom-parser-adapter-openapi-yaml-3-0@0.99.0

@swagger-api/apidom-parser-adapter-openapi-yaml-3-1@0.99.0

@swagger-api/apidom-parser-adapter-workflows-json-1@0.99.0

@swagger-api/apidom-parser-adapter-workflows-yaml-1@0.99.0

@swagger-api/apidom-parser-adapter-yaml-1-2@0.99.0

@swagger-api/apidom-reference@0.99.0

aws-sign2@0.7.0

caseless@0.12.0

detect-libc@2.0.3

ejs@2.7.4

forever-agent@0.6.1

g11n-pipeline@2.0.6

js2xmlparser@1.0.0

oauth-sign@0.9.0

request@2.88.2

short-unique-id@5.0.3

swagger-client@3.26.4

ts-toolbelt@9.6.0

tunnel-agent@0.6.0

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

24 Packages, Including:

chownr@1.1.4

fs.realpath@1.0.0

glob@7.2.3

har-schema@2.0.0

inflight@1.0.6

inherits@2.0.4

ini@1.3.8

isexe@2.0.0

json-stringify-safe@5.0.1

lru-cache@4.1.5

lru-cache@6.0.0

minimatch@3.1.2

minimatch@7.4.6

once@1.4.0

pseudomap@1.0.2

sax@1.3.0

semver@5.7.2

semver@7.6.0

setprototypeof@1.2.0

signal-exit@3.0.7

which@1.3.1

wrappy@1.0.2

yallist@2.1.2

yallist@4.0.0

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

14 Packages, Including:

async-listener@0.6.10

continuation-local-storage@3.2.1

domelementtype@1.3.1

domelementtype@2.3.0

domhandler@2.4.2

domutils@1.7.0

emitter-listener@1.1.2

entities@1.1.2

entities@2.2.0

esprima@4.0.1

estraverse@4.3.0

isemail@1.2.0

shimmer@1.2.1

uri-js@4.4.1

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

12 Packages, Including:

bcrypt-pbkdf@1.0.2

charenc@0.0.2

crypt@0.0.2

ieee754@1.2.1

md5@2.3.0

qs@6.11.0

qs@6.12.0

qs@6.5.3

ramda-adjunct@4.1.1

sprintf-js@1.0.3

sprintf-js@1.1.3

tough-cookie@2.5.0

N/A

7 Packages, Including:

base64-js@0.0.2

duplex@1.0.0

msgpack-js@0.3.0

mux-demux@3.7.9

options@0.0.6

sse@0.0.7

uid2@0.0.3

Artistic License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

use-trademark

hold-liable

Must

rename

state-changes

include-original

include-install-instructions

2 Packages, Including:

strong-globalize@2.10.0

strong-remoting@2.36.1

(MIT OR Apache-2.0)

Permissive

1 Packages, Including:

JSONStream@1.3.5

Python License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

state-changes

1 Packages, Including:

argparse@2.0.1

BSD

Invalid

Not OSI Approved

1 Packages, Including:

canonical-json@0.0.4

(MIT OR WTFPL)

Permissive

1 Packages, Including:

expand-template@2.0.3

(AFL-2.1 OR BSD-3-Clause)

Permissive

1 Packages, Including:

json-schema@0.4.0

(BSD-2-Clause OR MIT OR Apache-2.0)

Expression

1 Packages, Including:

rc@1.2.8

The Unlicense

Public Domain

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

private-use

modify

Cannot

include-copyright

hold-liable

Must

1 Packages, Including:

tweetnacl@0.14.5

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of loopback 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
async	2.6.4	120.04 kB	MIT	prod
bcryptjs	2.4.3	76.21 kB	MIT	prod
body-parser	1.20.2	14.75 kB	MIT	prod
canonical-json	0.0.4	4.27 kB	BSD	prod	1 1
cookie-parser	1.4.6	4.2 kB	MIT	prod
debug	2.6.9	16.13 kB	MIT	prod peer
depd	1.1.2	8.81 kB	MIT	prod
ejs	2.7.4	37.03 kB	Apache-2.0	prod	1 1
errorhandler	1.5.1	5.75 kB	MIT	prod
express	4.19.2	209.73 kB	MIT	prod
inflection	1.13.4	11.51 kB	MIT	prod
isemail	1.2.0	16.26 kB	BSD-2-Clause	prod
loopback-connector-remote	1.3.3	10.21 kB	MIT	prod	6 7 5
loopback-context	1.0.0	5.64 kB	MIT	prod
loopback-datasource-juggler	2.59.3	592.85 kB	MIT	prod peer	5 1
loopback-phase	1.4.1	11.52 kB	MIT	prod	3 1
nodemailer-stub-transport	1.1.0	3.56 kB	MIT	prod
nodemailer	2.7.2	13.08 kB	MIT	prod	2 4 2
serve-favicon	2.5.0	6.67 kB	MIT	prod
stable	0.1.8	3.59 kB	MIT	prod	1
strong-globalize	2.10.0	522.88 kB	Artistic-2.0	prod	3 1
strong-remoting	2.36.1	58.05 kB	Artistic-2.0	prod	6 7 5
uid2	0.0.3	1.41 kB	UNKNOWN	prod	1 1
underscore.string	3.3.6	37.81 kB	MIT	prod