Generated on Mar 28, 2024 via pnpm

Npm

Home

mammoth 1.4.10

Convert Word documents from docx to simple HTML and Markdown

docx

html

office

word

markdown

Package summary

issues

licenses

Package created

6 May 2013

Version published

15 Aug 2020

Maintainers

Total deps

Direct deps

License

BSD-2-Clause

Issues

1 critical severity issue

critical

underscore@1.8.3

Arbitrary Code Execution in underscore

Recommendation: Upgrade to version 1.12.1 or later

via: underscore@1.8.3

Collapse

Expand

3 high severity issues

high

jszip@2.5.0

JSZip contains Path Traversal via loadAsync

Recommendation: Upgrade to version 3.8.0 or later

via: jszip@2.5.0

duck@0.1.12

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: lop@0.4.1

jszip@2.5.0

Package uses an invalid SPDX license ("MIT or GPLv3")

Recommendation: Validate that the package complies with your license policy

via: jszip@2.5.0

Collapse

Expand

1 moderate severity issue

moderate

jszip@2.5.0

jszip Vulnerable to Prototype Pollution

Recommendation: Upgrade to version 2.7.0 or later

via: jszip@2.5.0

Collapse

Expand

1 low severity issue

low

duck@0.1.12

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: lop@0.4.1

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

7 Packages, Including:

argparse@1.0.10

bluebird@3.4.7

pako@0.2.9

path-is-absolute@1.0.1

underscore@1.13.6

underscore@1.8.3

xmlbuilder@10.1.1

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

3 Packages, Including:

lop@0.4.1

mammoth@1.4.10

option@0.2.4

BSD

Invalid

Not OSI Approved

1 Packages, Including:

duck@0.1.12

MIT or GPLv3

Invalid

1 Packages, Including:

jszip@2.5.0

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

1 Packages, Including:

sax@1.1.6

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

1 Packages, Including:

sprintf-js@1.0.3

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of mammoth 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
argparse	1.0.10	29.06 kB	MIT	prod
bluebird	3.4.7	131.12 kB	MIT	prod
jszip	2.5.0	48.56 kB	MIT or GPLv3	prod	2 1
lop	0.4.1	15.27 kB	BSD-2-Clause	prod	1 1
path-is-absolute	1.0.1	1.84 kB	MIT	prod
sax	1.1.6	18.37 kB	ISC	prod
underscore	1.8.3	33.37 kB	MIT	prod	1
xmlbuilder	10.1.1	19.03 kB	MIT	prod