Home
Docs
GitHub
Pricing
Blog
Log In

Run Sandworm Audit for your App

Get started
Hold on, we're currently generating a fresh version of this report
This package has been deprecated with the following message: This version of Metalsmith is no longer supported
Generated on Apr 16, 2024 via pnpm

metalsmith 1.1.1

An extremely simple, pluggable static site generator.
Package summary
Share
13
issues
1
critical severity
license
1
8
high severity
vulnerability
2
license
3
meta
3
4
low severity
license
4
8
licenses
78
MIT
14
ISC
2
BSD
5
other licenses
BSD-2-Clause
1
BSD-3-Clause
1
N/A
1
MIT/X11
1
+ 1 more
Package created
5 Feb 2014
Version published
26 Jan 2015
Maintainers
5
Total deps
99
Direct deps
16
License
MIT

Issues

13

1 critical severity issue

critical
Recommendation: Check the package code and files for license information
via: unyield@0.0.1
Collapse
Expand

8 high severity issues

high
Recommendation: Upgrade to version 3.0.2 or later
via: recursive-readdir@1.3.0
Recommendation: Upgrade to version 3.0.5 or later
via: recursive-readdir@1.3.0
Recommendation: Validate that the package complies with your license policy
via: gnode@0.1.2
Recommendation: Validate that the package complies with your license policy
via: gnode@0.1.2
Recommendation: Validate that the package complies with your license policy
via: gnode@0.1.2
via: metalsmith@1.1.1
via: recursive-readdir@1.3.0
via: gnode@0.1.2
Collapse
Expand

4 low severity issues

low
Recommendation: Read and validate the license terms
via: gnode@0.1.2
Recommendation: Read and validate the license terms
via: gnode@0.1.2
Recommendation: Read and validate the license terms
via: gnode@0.1.2
Recommendation: Read and validate the license terms
via: front-matter@0.2.3
Collapse
Expand

Licenses

MIT License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
Cannot
hold-liable
Must
include-copyright
include-license
78 Packages, Including:
acorn@5.7.4
align-text@0.1.4
alter@0.2.0
ansi-regex@0.2.1
ansi-styles@1.1.0
ast-traverse@0.1.1
ast-types@0.8.12
ast-types@0.9.6
async@0.9.2
balanced-match@1.0.2
brace-expansion@1.1.11
breakable@1.0.0
camelcase@1.2.1
center-align@0.1.3
chalk@0.5.1
clone@0.1.19
co-from-stream@0.0.0
co-fs-extra@0.0.2
co-fs@1.2.0
co-read@0.0.1
co@3.1.0
commander@2.20.3
commoner@0.10.8
concat-map@0.0.1
decamelize@1.2.0
defined@1.0.1
defs@1.1.1
detective@4.7.1
escape-string-regexp@1.0.5
front-matter@0.2.3
fs-extra@0.10.0
fs-extra@0.12.0
gnode@0.1.2
has-ansi@0.1.0
iconv-lite@0.4.24
invert-kv@1.0.0
is-buffer@1.1.6
is-utf8@0.2.1
is@2.2.1
jsonfile@1.2.0
jsonfile@2.4.0
kind-of@3.2.2
lazy-cache@1.0.4
lcid@1.0.0
longest@1.0.1
metalsmith@1.1.1
minimatch@0.3.0
minimist@1.2.8
mkdirp@0.5.6
ncp@0.5.1

ISC License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
Cannot
hold-liable
Must
include-copyright
include-license
14 Packages, Including:
cliui@2.1.0
fs.realpath@1.0.0
glob@5.0.15
glob@7.2.3
graceful-fs@4.2.11
inflight@1.0.6
inherits@2.0.4
lru-cache@2.7.3
minimatch@3.1.2
once@1.4.0
rimraf@2.7.1
sigmund@1.0.1
wrappy@1.0.2
y18n@3.2.2

BSD

Invalid
Not OSI Approved
2 Packages, Including:
esprima-fb@15001.1001.0-dev-harmony-fb
regenerator@0.8.46

BSD 2-Clause "Simplified" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
hold-liable
Must
include-copyright
include-license
1 Packages, Including:
esprima@3.1.3

BSD 3-Clause "New" or "Revised" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
use-trademark
hold-liable
Must
include-copyright
include-license
1 Packages, Including:
source-map@0.5.7

N/A

N/A
1 Packages, Including:
unyield@0.0.1

MIT/X11

Invalid
Not OSI Approved
1 Packages, Including:
wordwrap@0.0.2

Do What The F*ck You Want To Public License

Permissive
Not OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
sublicense
distribute
modify
Cannot
Must
rename
1 Packages, Including:
yaml-js@0.1.5
Disclaimer

This deed highlights only some of the key features and terms of the actual license. It is not a license and has no legal value. You should carefully review all of the terms and conditions of the actual license before using the licensed material.

Sandworm is not a law firm and does not provide legal services. Distributing, displaying, or linking to this deed or the license that it summarizes does not create a lawyer-client or any other relationship.

Direct Dependencies

16
All Dependencies CSV
β“˜ This is a list of metalsmith 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.
NameVersionSizeLicenseTypeVulnerabilities
async0.9.220.46 kBMIT
prod
chalk0.5.13.26 kBMIT
prod
clone0.1.195.31 kBMIT
prod
co-fs-extra0.0.21.45 kBMIT
prod
commander2.20.318.26 kBMIT
prod
front-matter0.2.34.47 kBMIT
prod
1
fs-extra0.10.08.36 kBMIT
prod
gnode0.1.28.28 kBMIT
prod
4
3
is-utf80.2.11.59 kBMIT
prod
is2.2.110.25 kBMIT
prod
recursive-readdir1.3.03.87 kBMIT
prod
3
rimraf2.7.15.53 kBISC
prod
stat-mode0.2.24.86 kBMIT
prod
thunkify2.1.21.73 kBMIT
prod
unyield0.0.11.65 kBUNKNOWN
prod
1
ware1.3.02.75 kBMIT
prod

Visualizations