Home
Docs
GitHub
Pricing
Blog
Log In

Run Sandworm Audit for your App

Get started
Hold on, we're currently generating a fresh version of this report
Generated on May 18, 2024 via pnpm

newman 4.4.0

Command-line companion utility for Postman
Package summary
Share
36
issues
4
critical severity
vulnerability
3
license
1
16
high severity
vulnerability
7
license
4
meta
5
10
moderate severity
vulnerability
10
6
low severity
vulnerability
1
license
5
12
licenses
102
MIT
17
Apache-2.0
7
BSD-2-Clause
21
other licenses
BSD-3-Clause
6
ISC
6
MPLv2.0
2
MPL 2.0
2
+ 5 more
Package created
29 Apr 2014
Version published
20 Feb 2019
Maintainers
6
Total deps
147
Direct deps
20
License
Apache-2.0

Issues

36

4 critical severity issues

critical
Recommendation: Upgrade to version 1.12.1 or later
via: postman-runtime@7.9.1
Recommendation: Upgrade to version 0.2.4 or later
via: mkdirp@0.5.1
Recommendation: Upgrade to version 4.17.12 or later
via: async@2.6.1 & others
Recommendation: Check the package code and files for license information
via: postman-runtime@7.9.1 & others
Collapse
Expand

16 high severity issues

high
Recommendation: Upgrade to version 4.4.6 or later
via: csv-parse@4.0.1
Recommendation: Upgrade to version 4.0.10 or later
via: postman-collection@3.4.4 & others
Recommendation: Upgrade to version 4.0.10 or later
via: postman-collection@3.4.4 & others
Recommendation: Upgrade to version 4.17.19 or later
via: async@2.6.1 & others
Recommendation: Upgrade to version 2.6.4 or later
via: async@2.6.1 & others
Recommendation: Upgrade to version 4.17.21 or later
via: async@2.6.1 & others
Recommendation: Upgrade to version 2.7.1 or later
via: postman-collection@3.4.4 & others
Recommendation: Validate that the package complies with your license policy
via: postman-collection-transformer@3.0.0
Recommendation: Validate that the package complies with your license policy
via: postman-collection-transformer@3.0.0
Recommendation: Validate that the package complies with your license policy
via: postman-collection-transformer@3.0.0
Recommendation: Validate that the package complies with your license policy
via: postman-collection-transformer@3.0.0
via: postman-runtime@7.9.1
via: postman-request@2.88.1-postman.6 & others
via: mkdirp@0.5.1
via: postman-collection@3.4.4 & others
via: postman-request@2.88.1-postman.6 & others
Collapse
Expand

10 moderate severity issues

moderate
Recommendation: Upgrade to version 0.6.2 or later
via: postman-collection@3.4.4 & others
Recommendation: Upgrade to version 2.3.2 or later
via: postman-collection@3.4.4 & others
Recommendation: Upgrade to version 2.3.1 or later
via: postman-collection@3.4.4 & others
Recommendation: Upgrade to version 4.17.21 or later
via: async@2.6.1 & others
Recommendation: Upgrade to version 8.4.31 or later
via: postman-collection@3.4.4 & others
Recommendation: Upgrade to version 1.2.4 or later
via: word-wrap@1.2.3
Recommendation: Upgrade to version 0.2.1 or later
via: mkdirp@0.5.1
Recommendation: Upgrade to version 5.7.2 or later
via: postman-collection-transformer@3.0.0 & others
Recommendation: Upgrade to version 2.12.1 or later
via: postman-collection@3.4.4 & others
Recommendation: Upgrade to version 4.1.3 or later
via: postman-request@2.88.1-postman.6 & others
Collapse
Expand

6 low severity issues

low
Recommendation: Upgrade to version 0.7.0 or later
via: postman-collection@3.4.4 & others
Recommendation: Read and validate the license terms
via: postman-collection-transformer@3.0.0
Recommendation: Read and validate the license terms
via: postman-collection-transformer@3.0.0
Recommendation: Read and validate the license terms
via: postman-collection-transformer@3.0.0
Recommendation: Read and validate the license terms
via: postman-collection-transformer@3.0.0
Recommendation: Read and validate the license terms
via: postman-request@2.88.1-postman.6 & others
Collapse
Expand

Licenses

MIT License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
Cannot
hold-liable
Must
include-copyright
include-license
102 Packages, Including:
ajv@6.12.6
ansi-regex@2.1.1
ansi-regex@3.0.1
ansi-styles@2.2.1
ansi-styles@3.2.1
array-uniq@1.0.3
asn1@0.2.6
assert-plus@1.0.0
async@2.6.1
asynckit@0.4.0
aws4@1.12.0
aws4@1.8.0
bluebird@2.11.0
chalk@1.1.3
chalk@2.4.2
chardet@0.7.0
charset@1.0.1
circular-json@0.5.5
cli-progress@2.1.1
cli-table3@0.5.1
color-convert@1.9.3
color-name@1.1.3
colors@1.3.3
combined-stream@1.0.8
commander@2.19.0
core-util-is@1.0.2
crypto-js@3.1.9-1
dashdash@1.14.1
delayed-stream@1.0.0
dom-serializer@0.2.2
ecc-jsbn@0.1.2
escape-html@1.0.3
escape-string-regexp@1.0.5
eventemitter3@3.1.0
extend@3.0.2
extsprintf@1.3.0
fast-deep-equal@3.1.3
fast-json-stable-stringify@2.1.0
file-type@3.9.0
form-data@2.3.3
getpass@0.1.7
har-validator@5.1.5
has-ansi@2.0.0
has-flag@3.0.0
htmlparser2@3.10.1
http-signature@1.2.0
httpntlm@1.7.6
httpreq@1.1.1
iconv-lite@0.4.24
is-fullwidth-code-point@2.0.0

Apache License 2.0

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
use-patent-claims
place-warranty
Cannot
hold-liable
use-trademark
Must
include-copyright
include-license
state-changes
include-notice
17 Packages, Including:
aws-sign2@0.7.0
caseless@0.12.0
forever-agent@0.6.1
http-reasons@0.1.0
liquid-json@0.3.1
mime-format@2.0.0
newman@4.4.0
node-oauth1@1.2.2
oauth-sign@0.9.0
postman-collection-transformer@3.0.0
postman-collection@3.4.4
postman-request@2.88.1-postman.6
postman-runtime@7.9.1
postman-sandbox@3.2.4
serialised-error@1.1.3
tunnel-agent@0.6.0
uvm@1.7.4

BSD 2-Clause "Simplified" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
hold-liable
Must
include-copyright
include-license
7 Packages, Including:
domelementtype@1.3.1
domelementtype@2.3.0
domhandler@2.4.2
domutils@1.7.0
entities@1.1.2
entities@2.2.0
uri-js@4.4.1

BSD 3-Clause "New" or "Revised" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
use-trademark
hold-liable
Must
include-copyright
include-license
6 Packages, Including:
bcrypt-pbkdf@1.0.2
csv-parse@4.0.1
filesize@4.1.2
qs@6.5.3
source-map@0.6.1
tough-cookie@2.5.0

ISC License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
Cannot
hold-liable
Must
include-copyright
include-license
6 Packages, Including:
har-schema@2.0.0
inherits@2.0.3
inherits@2.0.4
json-stringify-safe@5.0.1
picocolors@0.2.1
semver@5.6.0

MPLv2.0

Invalid
Not OSI Approved
2 Packages, Including:
dbug@0.4.2
symbol@0.3.1

MPL 2.0

Invalid
Not OSI Approved
2 Packages, Including:
intel@1.2.0
utcstring@0.1.0

(MIT OR Apache-2.0)

Permissive
1 Packages, Including:
btoa@1.2.1

(AFL-2.1 OR BSD-3-Clause)

Permissive
1 Packages, Including:
json-schema@0.4.0

N/A

N/A
1 Packages, Including:
stack-trace@0.0.9

Do What The F*ck You Want To Public License

Permissive
Not OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
sublicense
distribute
modify
Cannot
Must
rename
1 Packages, Including:
stream-length@1.0.2

The Unlicense

Public Domain
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
private-use
modify
Cannot
include-copyright
hold-liable
Must
1 Packages, Including:
tweetnacl@0.14.5
Disclaimer

This deed highlights only some of the key features and terms of the actual license. It is not a license and has no legal value. You should carefully review all of the terms and conditions of the actual license before using the licensed material.

Sandworm is not a law firm and does not provide legal services. Distributing, displaying, or linking to this deed or the license that it summarizes does not create a lawyer-client or any other relationship.

Direct Dependencies

20
All Dependencies CSV
β“˜ This is a list of newman 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.
NameVersionSizeLicenseTypeVulnerabilities
async2.6.1120.35 kBMIT
prod
1
3
1
chardet0.7.016.52 kBMIT
prod
cli-progress2.1.18.97 kBMIT
prod
cli-table30.5.112.28 kBMIT
prod
colors1.3.310.47 kBMIT
prod optional
commander2.19.017.94 kBMIT
prod
csv-parse4.0.122.51 kBBSD-3-Clause
prod
1
eventemitter33.1.09.08 kBMIT
prod
filesize4.1.24.89 kBBSD-3-Clause
prod
lodash4.17.11298.42 kBMIT
prod
1
2
1
mkdirp0.5.14.87 kBMIT
prod
1
1
1
postman-collection-transformer3.0.0131.83 kBApache-2.0
prod
1
6
2
4
postman-collection3.4.4109.33 kBApache-2.0
prod
1
6
7
1
postman-request2.88.1-postman.660.24 kBApache-2.0
prod
2
1
1
postman-runtime7.9.1284.31 kBApache-2.0
prod
3
10
8
2
pretty-ms4.0.02.89 kBMIT
prod
semver5.6.016.16 kBISC
prod
1
serialised-error1.1.39.33 kBApache-2.0
prod
1
1
word-wrap1.2.34 kBMIT
prod
1
xmlbuilder11.0.079.61 kBMIT
prod

Visualizations

Frequently Asked Questions

What does newman do?

Newman is a command-line collection runner for Postman that lets you effortlessly run and test a Postman collection straight from the command-line interface. It is designed with extensibility at its core, so it can be seamlessly integrated with your continuous integration servers and build systems.

How do you use newman?

Using Newman is relatively straightforward. To start, ensure that you have Node.js of version 16 or higher installed on your system. Newman can be installed using npm, using the command npm install -g newman. This globally installs Newman, allowing usage from anywhere. For a local installation, skip the -g flag. Moreover, Newman can be installed globally using Homebrew, via brew install newman.

To use Newman, run a command like newman run examples/sample-collection.json to specify a collection to be run. This can be a local or remote resource (like a URL from Postman's Cloud API service).

To use Newman as a library in your JavaScript projects, simply require Newman in your project:

const newman = require('newman');
newman.run({
    collection: require('./sample-collection.json'),
    reporters: 'cli'
}, function (err) {
	if (err) { throw err; }
    console.log('collection run complete!');
});

This will execute your Postman collection and log 'collection run complete!' once finished.

Both Newman's CLI and programmatic capabilities are comprehensive, and include various configurations for reporters (like cli, json, junit), timeouts, delays, bailling, and more. You can find further information and usage examples on Newman's GitHub page.

Where are the newman docs?

The comprehensive Newman documentation can be found on its GitHub page at git://github.com/postmanlabs/newman.git. The readme provides an extensive understanding of the library's capabilities, including a Getting Started guide, a usage guide with code examples for both CLI usage and using Newman as a library, command-line options, API references, information on reporters, and more. The documentation is well structured with a detailed table of contents that can guide you through the different sections of the readme.