Home
Docs
GitHub
Pricing
Blog
Log In

Run Sandworm Audit for your App

Get started
Hold on, we're currently generating a fresh version of this report
Generated on May 20, 2024 via pnpm

mqtt 3.0.0

A library for the MQTT protocol
Package summary
Share
2
issues
2
high severity
vulnerability
1
meta
1
4
licenses
61
MIT
18
ISC
1
BSD-3-Clause
1
BSD-2-Clause
Package created
12 Feb 2013
Version published
27 May 2019
Maintainers
7
Total deps
81
Direct deps
16
License
MIT

Issues

2

2 high severity issues

high
Recommendation: Upgrade to version 5.1.2 or later
via: help-me@1.1.0
via: es6-map@0.1.5
Collapse
Expand

Licenses

MIT License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
Cannot
hold-liable
Must
include-copyright
include-license
61 Packages, Including:
async-limiter@1.0.1
balanced-match@1.0.2
base64-js@1.5.1
bl@4.1.0
brace-expansion@1.1.11
buffer-from@1.1.2
buffer@5.7.1
callback-stream@1.1.0
commist@1.1.0
concat-map@0.0.1
concat-stream@1.6.2
core-util-is@1.0.3
debug@4.3.4
duplexify@3.7.1
duplexify@4.1.3
end-of-stream@1.4.4
es6-iterator@2.0.3
es6-map@0.1.5
event-emitter@0.3.5
extend@3.0.2
glob-stream@6.1.0
help-me@1.1.0
is-absolute@1.0.0
is-extglob@2.1.1
is-glob@3.1.0
is-negated-glob@1.0.0
is-relative@1.0.0
is-unc-path@1.0.0
is-windows@1.0.2
isarray@1.0.0
json-stable-stringify-without-jsonify@1.0.1
leven@2.1.0
minimist@1.2.8
mqtt-packet@6.10.0
mqtt@3.0.0
ms@2.1.2
ordered-read-streams@1.0.1
path-dirname@1.0.2
path-is-absolute@1.0.1
process-nextick-args@2.0.1
pump@2.0.1
pump@3.0.0
pumpify@1.5.1
readable-stream@2.3.8
readable-stream@3.6.2
reinterval@1.1.0
safe-buffer@5.1.2
safe-buffer@5.2.1
stream-shift@1.0.3
string_decoder@1.1.1

ISC License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
Cannot
hold-liable
Must
include-copyright
include-license
18 Packages, Including:
d@1.0.2
es5-ext@0.10.64
es6-set@0.1.6
es6-symbol@3.1.4
esniff@2.0.1
ext@1.7.0
fs.realpath@1.0.0
glob-parent@3.1.0
glob@7.2.3
inflight@1.0.6
inherits@2.0.4
minimatch@3.1.2
next-tick@1.1.0
once@1.4.0
remove-trailing-separator@1.1.0
split2@3.2.2
type@2.7.2
wrappy@1.0.2

BSD 3-Clause "New" or "Revised" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
use-trademark
hold-liable
Must
include-copyright
include-license
1 Packages, Including:
ieee754@1.2.1

BSD 2-Clause "Simplified" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
hold-liable
Must
include-copyright
include-license
1 Packages, Including:
websocket-stream@5.5.2
Disclaimer

This deed highlights only some of the key features and terms of the actual license. It is not a license and has no legal value. You should carefully review all of the terms and conditions of the actual license before using the licensed material.

Sandworm is not a law firm and does not provide legal services. Distributing, displaying, or linking to this deed or the license that it summarizes does not create a lawyer-client or any other relationship.

Direct Dependencies

16
All Dependencies CSV
β“˜ This is a list of mqtt 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.
NameVersionSizeLicenseTypeVulnerabilities
base64-js1.5.14.01 kBMIT
prod
commist1.1.03.24 kBMIT
prod
concat-stream1.6.23.72 kBMIT
prod
duplexify4.1.317.87 kBMIT
prod
end-of-stream1.4.42.33 kBMIT
prod
es6-map0.1.57.77 kBMIT
prod
1
help-me1.1.03.74 kBMIT
prod
1
inherits2.0.41.98 kBISC
prod
minimist1.2.815.16 kBMIT
prod
mqtt-packet6.10.027.45 kBMIT
prod
pump3.0.03.16 kBMIT
prod
readable-stream2.3.825.14 kBMIT
prod
reinterval1.1.03.15 kBMIT
prod
split23.2.24.58 kBISC
prod
websocket-stream5.5.28.01 kBBSD-2-Clause
prod
xtend4.0.22.47 kBMIT
prod

Visualizations

Frequently Asked Questions

What does mqtt do?

MQTT.js is a client library specifically designed for the MQTT protocol. Written in JavaScript, it's ideal for Node.js and browser environments. MQTT (Message Queuing Telemetry Transport) is a lightweight, publish-subscribe messaging protocol usually used for machine-to-machine (M2M) or Internet of Things applications where bandwidth and resource constraints often exist.

How do you use mqtt?

To use MQTT.js, you must first install the package using npm with the following command: npm install mqtt --save. Once installed, you can require it in your JavaScript file and use its functions to connect to a broker and publish or subscribe to topics. To give an example, the below code connects to a broker and publishes a message:

const mqtt = require("mqtt");
const client = mqtt.connect("mqtt://broker-url");

client.on("connect", () => {
  client.publish("topic-name", "Hello mqtt");
  client.end();
});

In this example, replace "mqtt://broker-url" with the URL of your MQTT broker, and "topic-name" with the name of your topic. The message "Hello mqtt" is published to this topic.

Where are the mqtt docs?

The documentation for the MQTT.js library can be found within its GitHub repository at https://github.com/mqttjs/MQTT.js. Here, you'll find details about the library's API, examples of how to use it, and other information, such as its upgrade notes, command line tools, and browser support.