Hold on, we're currently generating a fresh version of this report

Generated on Mar 29, 2024 via pnpm

mailin 1.0.0

Artisanal inbound emails for every web app

Package summary

106

issues

13

licenses

Package created

20 Mar 2014

Version published

5 Sep 2014

Maintainers

1

Total deps

319

Direct deps

15

License

MIT

Issues

106

30 critical severity issues

lodash@2.4.2

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.12 or later

via: cheerio@0.17.0 & others

minimist@0.0.10

Prototype Pollution in minimist

Recommendation: Upgrade to version 0.2.4 or later

via: forever-monitor@1.7.2 & others

aws-sign@0.2.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: winston@0.7.3

broadway@0.3.6

Package has no specified license

Recommendation: Check the package code and files for license information

via: forever-monitor@1.7.2

cheerio@0.17.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: cheerio@0.17.0

cliff@0.1.9

Package has no specified license

Recommendation: Check the package code and files for license information

via: forever-monitor@1.7.2

colors@0.6.2

Package has no specified license

Recommendation: Check the package code and files for license information

via: forever-monitor@1.7.2 & others

combined-stream@0.0.7

Package has no specified license

Recommendation: Check the package code and files for license information

via: form-data@0.1.4 & others

cookie-jar@0.2.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: winston@0.7.3

cycle@1.0.3

Package has no specified license

Recommendation: Check the package code and files for license information

via: forever-monitor@1.7.2 & others

delayed-stream@0.0.5

Package has no specified license

Recommendation: Check the package code and files for license information

via: form-data@0.1.4 & others

dom-serializer@0.0.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: cheerio@0.17.0

domelementtype@1.1.3

Package has no specified license

Recommendation: Check the package code and files for license information

via: cheerio@0.17.0

domhandler@2.2.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: cheerio@0.17.0

domutils@1.4.3

Package has no specified license

Recommendation: Check the package code and files for license information

via: cheerio@0.17.0

domutils@1.5.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: cheerio@0.17.0

event-stream@0.5.3

Package has no specified license

Recommendation: Check the package code and files for license information

via: forever-monitor@1.7.2

forever-agent@0.2.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: winston@0.7.3

form-data@0.0.10

Package has no specified license

Recommendation: Check the package code and files for license information

via: winston@0.7.3

mime@1.2.11

Package has no specified license

Recommendation: Check the package code and files for license information

via: form-data@0.1.4 & others

nconf@0.6.9

Package has no specified license

Recommendation: Check the package code and files for license information

via: forever-monitor@1.7.2

oauth-sign@0.2.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: winston@0.7.3

ps-tree@0.0.3

Package has no specified license

Recommendation: Check the package code and files for license information

via: forever-monitor@1.7.2

qs@0.5.6

Package has no specified license

Recommendation: Check the package code and files for license information

via: winston@0.7.3

request@2.16.6

Package has no specified license

Recommendation: Check the package code and files for license information

via: winston@0.7.3

spamc@0.0.3

Package has no specified license

Recommendation: Check the package code and files for license information

via: spamc@0.0.3

tunnel-agent@0.2.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: winston@0.7.3

utile@0.2.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: forever-monitor@1.7.2

utile@0.3.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: forever-monitor@1.7.2

uue@1.0.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: mailparser@0.4.9

49 high severity issues

qs@0.5.6

Prototype Pollution Protection Bypass in qs

Recommendation: Upgrade to version 6.0.4 or later

via: winston@0.7.3

nconf@0.6.9

Prototype Pollution in nconf

Recommendation: Upgrade to version 0.11.4 or later

via: forever-monitor@1.7.2

qs@0.5.6

Denial-of-Service Extended Event Loop Blocking in qs

Recommendation: Upgrade to version 1.0.0 or later

via: winston@0.7.3

hawk@0.10.2

Regular Expression Denial of Service in hawk

Recommendation: Upgrade to version 3.1.3 or later

via: winston@0.7.3

qs@0.5.6

Denial-of-Service Memory Exhaustion in qs

Recommendation: Upgrade to version 1.0.0 or later

via: winston@0.7.3

mime@1.2.11

mime Regular Expression Denial of Service when MIME lookup performed on untrusted user input

Recommendation: Upgrade to version 1.4.1 or later

via: form-data@0.1.4 & others

hoek@0.7.6

Prototype Pollution in hoek

Recommendation: Upgrade to version 4.2.1 or later

via: winston@0.7.3

lodash@2.4.2

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.11 or later

via: cheerio@0.17.0 & others

glob-parent@2.0.0

glob-parent vulnerable to Regular Expression Denial of Service in enclosure regex

Recommendation: Upgrade to version 5.1.2 or later

via: forever-monitor@1.7.2

hawk@0.10.2

Uncontrolled Resource Consumption in Hawk

Recommendation: Upgrade to version 9.0.1 or later

via: winston@0.7.3

shelljs@0.3.0

Improper Privilege Management in shelljs

Recommendation: Upgrade to version 0.8.5 or later

via: shelljs@0.3.0

hoek@0.7.6

hoek subject to prototype pollution via the clone function.

Recommendation: None

via: winston@0.7.3

qs@0.5.6

qs vulnerable to Prototype Pollution

Recommendation: Upgrade to version 6.2.4 or later

via: winston@0.7.3

lodash@2.4.2

Command Injection in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: cheerio@0.17.0 & others

boom@0.3.8

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: winston@0.7.3

cryptiles@0.1.3

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: winston@0.7.3

hawk@0.10.2

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: winston@0.7.3

hoek@0.7.6

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: winston@0.7.3

json-stringify-safe@3.0.0

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: winston@0.7.3

languagedetect@1.3.0

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: languagedetect@1.3.0

sntp@0.1.4

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: winston@0.7.3

CSSselect@0.4.1

Package uses an invalid SPDX license ("BSD-like")

Recommendation: Validate that the package complies with your license policy

via: cheerio@0.17.0

CSSwhat@0.4.7

Package uses an invalid SPDX license ("BSD-like")

Recommendation: Validate that the package complies with your license policy

via: cheerio@0.17.0

entities@1.0.0

Package uses an invalid SPDX license ("BSD-like")

Recommendation: Validate that the package complies with your license policy

via: cheerio@0.17.0

optimist@0.2.8

Package uses an invalid SPDX license ("MIT/X11")

Recommendation: Validate that the package complies with your license policy

via: forever-monitor@1.7.2

optimist@0.6.0

Package uses an invalid SPDX license ("MIT/X11")

Recommendation: Validate that the package complies with your license policy

via: forever-monitor@1.7.2

optimist@0.6.1

Package uses an invalid SPDX license ("MIT/X11")

Recommendation: Validate that the package complies with your license policy

via: html-to-text@0.1.0

shelljs@0.3.0

Package uses an invalid SPDX license ("BSD*")

Recommendation: Validate that the package complies with your license policy

via: shelljs@0.3.0

CSSselect@0.4.1

Deprecated package

via: cheerio@0.17.0

CSSwhat@0.4.7

Deprecated package

via: cheerio@0.17.0

boom@0.3.8

Deprecated package

via: winston@0.7.3

chokidar@1.7.0

Deprecated package

via: forever-monitor@1.7.2

cryptiles@0.1.3

Deprecated package

via: winston@0.7.3

fsevents@1.2.13

Deprecated package

via: forever-monitor@1.7.2

fsevents@1.2.13

Package uses install script: "node install.js"

via: forever-monitor@1.7.2

har-validator@5.1.5

Deprecated package

via: request@2.88.2

hawk@0.10.2

Deprecated package

via: winston@0.7.3

hoek@0.7.6

Deprecated package

via: winston@0.7.3

mailparser@0.4.9

Deprecated package

via: mailparser@0.4.9

mimelib@0.2.19

Deprecated package

via: mailparser@0.4.9 & others

node-uuid@1.4.8

Deprecated package

via: winston@0.7.3

request@2.16.6

Deprecated package

via: winston@0.7.3

request@2.88.2

Deprecated package

via: request@2.88.2

resolve-url@0.2.1

Deprecated package

via: forever-monitor@1.7.2

sntp@0.1.4

Deprecated package

via: winston@0.7.3

source-map-resolve@0.5.3

Deprecated package

via: forever-monitor@1.7.2

source-map-url@0.4.1

Deprecated package

via: forever-monitor@1.7.2

urix@0.1.0

Deprecated package

via: forever-monitor@1.7.2

uuid@3.4.0

Deprecated package

via: request@2.88.2

10 moderate severity issues

lodash@2.4.2

Regular Expression Denial of Service (ReDoS) in lodash

Recommendation: Upgrade to version 4.17.11 or later

via: cheerio@0.17.0 & others

underscore.string@2.4.0

Regular Expression Denial of Service in underscore.string

Recommendation: Upgrade to version 3.3.5 or later

via: html-to-text@0.1.0

tunnel-agent@0.2.0

Memory Exposure in tunnel-agent

Recommendation: Upgrade to version 0.6.0 or later

via: winston@0.7.3

shelljs@0.3.0

Improper Privilege Management in shelljs

Recommendation: Upgrade to version 0.8.5 or later

via: shelljs@0.3.0

request@2.16.6

Remote Memory Exposure in request

Recommendation: Upgrade to version 2.68.0 or later

via: winston@0.7.3

lodash@2.4.2

Regular Expression Denial of Service (ReDoS) in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: cheerio@0.17.0 & others

minimist@0.0.10

Prototype Pollution in minimist

Recommendation: Upgrade to version 0.2.1 or later

via: forever-monitor@1.7.2 & others

tough-cookie@2.5.0

tough-cookie Prototype Pollution vulnerability

Recommendation: Upgrade to version 4.1.3 or later

via: request@2.88.2

request@2.88.2

Server-Side Request Forgery in Request

Recommendation: None

via: request@2.88.2 & others

eyes@0.1.8

Package has no specified source code repository

via: forever-monitor@1.7.2 & others

17 low severity issues

braces@1.8.5

Regular Expression Denial of Service in braces

Recommendation: Upgrade to version 2.3.1 or later

via: forever-monitor@1.7.2

lodash@2.4.2

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.5 or later

via: cheerio@0.17.0 & others

braces@1.8.5

Regular Expression Denial of Service (ReDoS) in braces

Recommendation: Upgrade to version 2.3.1 or later

via: forever-monitor@1.7.2

boom@0.3.8

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: winston@0.7.3

cryptiles@0.1.3

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: winston@0.7.3

hawk@0.10.2

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: winston@0.7.3

hoek@0.7.6

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: winston@0.7.3

json-stringify-safe@3.0.0

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: winston@0.7.3

languagedetect@1.3.0

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: languagedetect@1.3.0

sntp@0.1.4

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: winston@0.7.3

CSSselect@0.4.1

Package uses a license that is not OSI approved ("BSD-like")

Recommendation: Read and validate the license terms

via: cheerio@0.17.0

CSSwhat@0.4.7

Package uses a license that is not OSI approved ("BSD-like")

Recommendation: Read and validate the license terms

via: cheerio@0.17.0

entities@1.0.0

Package uses a license that is not OSI approved ("BSD-like")

Recommendation: Read and validate the license terms

via: cheerio@0.17.0

optimist@0.2.8

Package uses a license that is not OSI approved ("MIT/X11")

Recommendation: Read and validate the license terms

via: forever-monitor@1.7.2

optimist@0.6.0

Package uses a license that is not OSI approved ("MIT/X11")

Recommendation: Read and validate the license terms

via: forever-monitor@1.7.2

optimist@0.6.1

Package uses a license that is not OSI approved ("MIT/X11")

Recommendation: Read and validate the license terms

via: html-to-text@0.1.0

shelljs@0.3.0

Package uses a license that is not OSI approved ("BSD*")

Recommendation: Read and validate the license terms

via: shelljs@0.3.0

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

245 Packages, Including:

addressparser@0.3.2

ajv@6.12.6

arr-diff@2.0.0

arr-diff@4.0.0

arr-flatten@1.1.0

arr-union@3.1.0

array-buffer-byte-length@1.0.1

array-unique@0.2.1

array-unique@0.3.2

asn1@0.2.6

assert-plus@1.0.0

assign-symbols@1.0.0

async-each@1.0.6

async@0.2.10

async@0.2.9

async@0.9.2

asynckit@0.4.0

available-typed-arrays@1.0.7

aws4@1.12.0

balanced-match@1.0.2

base@0.11.2

binary-extensions@1.13.1

bindings@1.5.0

brace-expansion@1.1.11

braces@1.8.5

braces@2.3.2

cache-base@1.0.1

call-bind@1.0.7

chokidar@1.7.0

class-utils@0.3.6

collection-visit@1.0.0

combined-stream@1.0.8

commander@2.20.3

component-emitter@1.3.1

concat-map@0.0.1

copy-descriptor@0.1.1

core-util-is@1.0.2

core-util-is@1.0.3

dashdash@1.14.1

debug@2.6.9

decode-uri-component@0.2.2

deep-equal@0.2.2

deep-equal@2.2.3

define-data-property@1.1.4

define-properties@1.2.1

define-property@0.2.5

define-property@1.0.0

define-property@2.0.2

delayed-stream@1.0.0

ecc-jsbn@0.1.2

N/A

N/A

28 Packages, Including:

aws-sign@0.2.0

broadway@0.3.6

cheerio@0.17.0

cliff@0.1.9

colors@0.6.2

combined-stream@0.0.7

cookie-jar@0.2.0

cycle@1.0.3

delayed-stream@0.0.5

dom-serializer@0.0.1

domelementtype@1.1.3

domhandler@2.2.1

domutils@1.4.3

domutils@1.5.1

event-stream@0.5.3

forever-agent@0.2.0

form-data@0.0.10

mime@1.2.11

nconf@0.6.9

oauth-sign@0.2.0

ps-tree@0.0.3

qs@0.5.6

request@2.16.6

spamc@0.0.3

tunnel-agent@0.2.0

utile@0.2.1

utile@0.3.0

uue@1.0.0

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

16 Packages, Including:

anymatch@1.3.2

fs.realpath@1.0.0

glob-parent@2.0.0

glob@7.2.3

graceful-fs@4.2.11

har-schema@2.0.0

inflight@1.0.6

inherits@2.0.4

ini@1.3.8

json-stringify-safe@5.0.1

minimatch@3.0.8

minimatch@3.1.2

once@1.4.0

remove-trailing-separator@1.1.0

rimraf@2.7.1

wrappy@1.0.2

BSD

Invalid

Not OSI Approved

7 Packages, Including:

boom@0.3.8

cryptiles@0.1.3

hawk@0.10.2

hoek@0.7.6

json-stringify-safe@3.0.0

languagedetect@1.3.0

sntp@0.1.4

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

6 Packages, Including:

aws-sign2@0.7.0

caseless@0.12.0

forever-agent@0.6.1

oauth-sign@0.9.0

request@2.88.2

tunnel-agent@0.6.0

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

4 Packages, Including:

bcrypt-pbkdf@1.0.2

qs@6.5.3

source-map@0.5.7

tough-cookie@2.5.0

BSD-like

Invalid

Not OSI Approved

3 Packages, Including:

CSSselect@0.4.1

CSSwhat@0.4.7

entities@1.0.0

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

3 Packages, Including:

domelementtype@1.3.1

entities@1.1.2

uri-js@4.4.1

MIT/X11

Invalid

Not OSI Approved

3 Packages, Including:

optimist@0.2.8

optimist@0.6.0

optimist@0.6.1

(MIT OR Apache-2.0)

Permissive

1 Packages, Including:

atob@2.1.2

(AFL-2.1 OR BSD-3-Clause)

Permissive

1 Packages, Including:

json-schema@0.4.0

BSD*

Invalid

Not OSI Approved

1 Packages, Including:

shelljs@0.3.0

The Unlicense

Public Domain

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

private-use

modify

Cannot

include-copyright

hold-liable

Must

1 Packages, Including:

tweetnacl@0.14.5

Direct Dependencies

15

All Dependencies CSV

ⓘ This is a list of mailin 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
async	0.9.2	20.46 kB	MIT	prod
cheerio	0.17.0	42.51 kB	UNKNOWN	prod	7 7 2 4
commander	2.20.3	18.26 kB	MIT	prod
forever-monitor	1.7.2	16.17 kB	MIT	prod	10 11 2 4
form-data	0.1.4	5.79 kB	MIT	prod	3 1
html-to-text	0.1.0	8.79 kB	MIT	prod	1 1 2 1
languagedetect	1.3.0	91.64 kB	BSD	prod	1 1
lodash	2.4.2	192.11 kB	MIT	prod	1 2 2 1
mailparser	0.4.9	25.77 kB	MIT	prod	1 2
mimelib	0.2.19	7.9 kB	MIT	prod	1
request	2.88.2	57.83 kB	Apache-2.0	prod	3 2
shelljs	0.3.0	23.47 kB	BSD*	prod	2 1 1
simplesmtp	0.3.35	23.96 kB	MIT	prod
spamc	0.0.3	3.76 kB	UNKNOWN	prod	1
winston	0.7.3	41.7 kB	MIT	prod	13 22 4 6

All Versions