Generated on May 4, 2024 via pnpm

Npm

Home

migrate-mongoose 1.6.0

A mongoose based migration framework for node

migrate

migration

mongoose

schema

mongodb

Package summary

issues

licenses

Package created

6 Mar 2016

Version published

14 Apr 2016

Maintainers

Total deps

347

Direct deps

License

MIT

Issues

4 critical severity issues

critical

bson@1.0.9

Deserialization of Untrusted Data in bson

Recommendation: Upgrade to version 1.1.4 or later

via: mongoose@4.13.21

mongoose@4.13.21

Mongoose Prototype Pollution vulnerability

Recommendation: Upgrade to version 5.13.20 or later

via: mongoose@4.13.21

babel-traverse@6.26.0

Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code

Recommendation: None

via: babel-cli@6.26.0 & others

mongoose@4.13.21

Mongoose Vulnerable to Prototype Pollution in Schema Object

Recommendation: Upgrade to version 5.13.15 or later

via: mongoose@4.13.21

Collapse

Expand

21 high severity issues

high

mongodb@2.2.34

Denial of Service in mongodb

Recommendation: Upgrade to version 3.1.13 or later

via: mongoose@4.13.21

glob-parent@2.0.0

glob-parent vulnerable to Regular Expression Denial of Service in enclosure regex

Recommendation: Upgrade to version 5.1.2 or later

via: babel-cli@6.26.0

mongoose@4.13.21

automattic/mongoose vulnerable to Prototype pollution via Schema.path

Recommendation: Upgrade to version 5.13.15 or later

via: mongoose@4.13.21

async@2.6.0

Prototype Pollution in async

Recommendation: Upgrade to version 2.6.4 or later

via: mongoose@4.13.21

json5@0.5.1

Prototype Pollution in JSON5 via Parse Method

Recommendation: Upgrade to version 1.0.2 or later

via: babel-cli@6.26.0 & others

regenerator-transform@0.10.1

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: babel-preset-es2015@6.24.1

regjsparser@0.1.5

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: babel-preset-es2015@6.24.1

kareem@1.5.0

Package uses an invalid SPDX license ("Apache 2.0")

Recommendation: Validate that the package complies with your license policy

via: mongoose@4.13.21

rx-lite@3.1.2

Package uses an invalid SPDX license ("Apache License, Version 2.0")

Recommendation: Validate that the package complies with your license policy

via: inquirer@0.12.0

spdx-exceptions@2.5.0

Package uses an atypical license ("CC-BY-3.0")

Recommendation: Read and validate the license terms

via: yargs@4.8.1

babel-preset-es2015@6.24.1

Deprecated package

via: babel-preset-es2015@6.24.1

bson@1.0.9

Deprecated package

via: mongoose@4.13.21

chokidar@1.7.0

Deprecated package

via: babel-cli@6.26.0

core-js@2.6.12

Deprecated package

via: babel-cli@6.26.0 & others

core-js@2.6.12

Package uses postinstall script: "node -e "try{require('./postinstall')}catch(e){}""

via: babel-cli@6.26.0 & others

fsevents@1.2.13

Deprecated package

via: babel-cli@6.26.0

fsevents@1.2.13

Package uses install script: "node install.js"

via: babel-cli@6.26.0

resolve-url@0.2.1

Deprecated package

via: babel-cli@6.26.0

source-map-resolve@0.5.3

Deprecated package

via: babel-cli@6.26.0

source-map-url@0.4.1

Deprecated package

via: babel-cli@6.26.0

urix@0.1.0

Deprecated package

via: babel-cli@6.26.0

Collapse

Expand

4 moderate severity issues

moderate

mquery@2.3.3

Code Injection in mquery

Recommendation: Upgrade to version 3.2.3 or later

via: mongoose@4.13.21

yargs-parser@2.4.1

yargs-parser Vulnerable to Prototype Pollution

Recommendation: Upgrade to version 5.0.1 or later

via: yargs@4.8.1

bson@1.0.9

Deserialization of Untrusted Data in bson

Recommendation: Upgrade to version 1.1.4 or later

via: mongoose@4.13.21

mpath@0.5.1

Type confusion in mpath

Recommendation: Upgrade to version 0.8.4 or later

via: mongoose@4.13.21

Collapse

Expand

8 low severity issues

low

braces@1.8.5

Regular Expression Denial of Service in braces

Recommendation: Upgrade to version 2.3.1 or later

via: babel-cli@6.26.0

braces@1.8.5

Regular Expression Denial of Service (ReDoS) in braces

Recommendation: Upgrade to version 2.3.1 or later

via: babel-cli@6.26.0

regenerator-transform@0.10.1

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: babel-preset-es2015@6.24.1

regjsparser@0.1.5

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: babel-preset-es2015@6.24.1

kareem@1.5.0

Package uses a license that is not OSI approved ("Apache 2.0")

Recommendation: Read and validate the license terms

via: mongoose@4.13.21

rx-lite@3.1.2

Package uses a license that is not OSI approved ("Apache License, Version 2.0")

Recommendation: Read and validate the license terms

via: inquirer@0.12.0

spdx-exceptions@2.5.0

Package uses a license that is not OSI approved ("CC-BY-3.0")

Recommendation: Read and validate the license terms

via: yargs@4.8.1

spdx-license-ids@3.0.17

Package uses a license that is not OSI approved ("CC0-1.0")

Recommendation: Read and validate the license terms

via: yargs@4.8.1

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

309 Packages, Including:

ansi-escapes@1.4.0

ansi-regex@2.1.1

ansi-styles@2.2.1

arr-diff@2.0.0

arr-diff@4.0.0

arr-flatten@1.1.0

arr-union@3.1.0

array-unique@0.2.1

array-unique@0.3.2

assign-symbols@1.0.0

async-each@1.0.6

async@2.6.0

babel-cli@6.26.0

babel-code-frame@6.26.0

babel-core@6.26.3

babel-generator@6.26.1

babel-helper-bindify-decorators@6.24.1

babel-helper-builder-binary-assignment-operator-visitor@6.24.1

babel-helper-call-delegate@6.24.1

babel-helper-define-map@6.26.0

babel-helper-explode-assignable-expression@6.24.1

babel-helper-explode-class@6.24.1

babel-helper-function-name@6.24.1

babel-helper-get-function-arity@6.24.1

babel-helper-hoist-variables@6.24.1

babel-helper-optimise-call-expression@6.24.1

babel-helper-regex@6.26.0

babel-helper-remap-async-to-generator@6.24.1

babel-helper-replace-supers@6.24.1

babel-helpers@6.24.1

babel-messages@6.23.0

babel-plugin-check-es2015-constants@6.22.0

babel-plugin-syntax-async-functions@6.13.0

babel-plugin-syntax-async-generators@6.13.0

babel-plugin-syntax-class-constructor-call@6.18.0

babel-plugin-syntax-class-properties@6.13.0

babel-plugin-syntax-decorators@6.13.0

babel-plugin-syntax-do-expressions@6.13.0

babel-plugin-syntax-dynamic-import@6.18.0

babel-plugin-syntax-exponentiation-operator@6.13.0

babel-plugin-syntax-export-extensions@6.13.0

babel-plugin-syntax-function-bind@6.13.0

babel-plugin-syntax-object-rest-spread@6.13.0

babel-plugin-syntax-trailing-function-commas@6.22.0

babel-plugin-transform-async-generator-functions@6.24.1

babel-plugin-transform-async-to-generator@6.24.1

babel-plugin-transform-class-constructor-call@6.24.1

babel-plugin-transform-class-properties@6.24.1

babel-plugin-transform-decorators@6.24.1

babel-plugin-transform-do-expressions@6.22.0

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

22 Packages, Including:

anymatch@1.3.2

cli-width@2.2.1

cliui@3.2.0

fs.realpath@1.0.0

get-caller-file@1.0.3

glob-parent@2.0.0

glob@7.2.3

graceful-fs@4.2.11

hosted-git-info@2.8.9

inflight@1.0.6

inherits@2.0.4

minimatch@3.1.2

mute-stream@0.0.5

once@1.4.0

remove-trailing-separator@1.1.0

require-main-filename@1.0.1

semver@5.7.2

set-blocking@2.0.0

which-module@1.0.0

wrappy@1.0.2

y18n@3.2.2

yargs-parser@2.4.1

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

6 Packages, Including:

bson@1.0.9

mongodb-core@2.1.18

mongodb@2.2.34

require_optional@1.0.1

spdx-correct@3.2.0

validate-npm-package-license@3.0.4

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

2 Packages, Including:

esutils@2.0.3

normalize-package-data@2.5.0

BSD

Invalid

Not OSI Approved

2 Packages, Including:

regenerator-transform@0.10.1

regjsparser@0.1.5

(MIT OR Apache-2.0)

Permissive

1 Packages, Including:

atob@2.1.2

Apache 2.0

Invalid

Not OSI Approved

1 Packages, Including:

kareem@1.5.0

Apache License, Version 2.0

Invalid

Not OSI Approved

1 Packages, Including:

rx-lite@3.1.2

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

1 Packages, Including:

source-map@0.5.7

Creative Commons Attribution 3.0 Unported

Uncategorized

Not OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

Cannot

Must

1 Packages, Including:

spdx-exceptions@2.5.0

Creative Commons Zero v1.0 Universal

Public Domain

Not OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

Cannot

Must

1 Packages, Including:

spdx-license-ids@3.0.17

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of migrate-mongoose 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
babel-cli	6.26.0	8.43 kB	MIT	prod	1 11 2
babel-core	6.26.3	23.21 kB	MIT	prod	1 3
babel-plugin-transform-runtime	6.23.0	5.23 kB	MIT	prod	2
babel-polyfill	6.26.0	129.23 kB	MIT	prod	2
babel-preset-es2015	6.24.1	2.25 kB	MIT	prod	1 5 2
babel-preset-stage-0	6.24.1	907 B	MIT	prod	1 2
babel-register	6.26.0	4.24 kB	MIT	prod	1 3
bluebird	3.7.2	136.03 kB	MIT	prod
colors	1.4.0	11 kB	MIT	prod
inquirer	0.12.0	16.12 kB	MIT	prod	1 1
mkdirp	0.5.6	2.95 kB	MIT	prod
mongoose	4.13.21	366.84 kB	MIT	prod	3 5 3 1
yargs	4.8.1	51.85 kB	MIT	prod	1 1 2