Home
Docs
GitHub
Pricing
Blog
Log In

Run Sandworm Audit for your App

Get started
Hold on, we're currently generating a fresh version of this report
Generated on May 26, 2024 via pnpm

node-lambda 0.11.3

Command line tool for locally running and remotely deploying your node.js applications to Amazon Lambda.
Package summary
Share
13
issues
2
critical severity
vulnerability
1
license
1
8
high severity
vulnerability
3
license
2
meta
3
2
moderate severity
vulnerability
2
1
low severity
license
1
9
licenses
117
MIT
15
ISC
6
BSD-2-Clause
9
other licenses
BSD-3-Clause
3
Apache-2.0
2
BSD
1
MIT or GPLv3
1
+ 2 more
Package created
23 Nov 2014
Version published
7 Jul 2017
Maintainers
2
Total deps
147
Direct deps
8
License
BSD-2-Clause

Issues

13

2 critical severity issues

critical
Recommendation: Upgrade to version 1.1.0 or later
via: proxy-agent@2.3.1
Recommendation: Check the package code and files for license information
via: node-zip@1.1.1
Collapse
Expand

8 high severity issues

high
Recommendation: Upgrade to version 5.0.0 or later
via: proxy-agent@2.3.1
Recommendation: Upgrade to version 3.0.1 or later
via: proxy-agent@2.3.1
Recommendation: Upgrade to version 3.8.0 or later
via: node-zip@1.1.1
Recommendation: Validate that the package complies with your license policy
via: dotenv@0.4.0
Recommendation: Validate that the package complies with your license policy
via: node-zip@1.1.1
via: aws-sdk@2.1628.0
via: aws-sdk@2.1628.0
via: proxy-agent@2.3.1
Collapse
Expand

2 moderate severity issues

moderate
Recommendation: Upgrade to version 2.0.1 or later
via: proxy-agent@2.3.1
Recommendation: Upgrade to version 2.7.0 or later
via: node-zip@1.1.1
Collapse
Expand

1 low severity issue

low
Recommendation: Read and validate the license terms
via: dotenv@0.4.0
Collapse
Expand

Licenses

MIT License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
Cannot
hold-liable
Must
include-copyright
include-license
117 Packages, Including:
agent-base@4.3.0
archiver-utils@1.3.0
archiver@2.1.1
ast-types@0.14.2
async@2.6.4
available-typed-arrays@1.0.7
balanced-match@1.0.2
base64-js@1.5.1
bl@1.2.3
brace-expansion@1.1.11
buffer-alloc-unsafe@1.1.0
buffer-alloc@1.2.0
buffer-crc32@0.2.13
buffer-fill@1.0.0
buffer@4.9.2
buffer@5.7.1
bytes@3.1.2
call-bind@1.0.7
co@4.6.0
commander@2.20.3
compress-commons@1.2.2
concat-map@0.0.1
core-util-is@1.0.3
crc32-stream@2.0.0
crc@3.8.0
data-uri-to-buffer@1.2.0
debug@2.6.9
debug@3.1.0
debug@3.2.7
deep-is@0.1.4
define-data-property@1.1.4
degenerator@1.0.4
depd@2.0.0
end-of-stream@1.4.4
es-define-property@1.0.0
es-errors@1.3.0
es6-promise@4.2.8
es6-promisify@5.0.0
events@1.1.1
extend@3.0.2
fast-levenshtein@2.0.6
file-uri-to-path@1.0.0
for-each@0.3.3
fs-constants@1.0.0
fs-extra@0.30.0
ftp@0.3.10
function-bind@1.1.2
get-intrinsic@1.2.4
get-uri@2.0.4
gopd@1.0.1

ISC License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
Cannot
hold-liable
Must
include-copyright
include-license
15 Packages, Including:
fs.realpath@1.0.0
glob@7.2.3
graceful-fs@4.2.11
inflight@1.0.6
inherits@2.0.4
lru-cache@4.1.5
minimatch@3.1.2
once@1.4.0
pseudomap@1.0.2
remove-trailing-separator@1.1.0
rimraf@2.7.1
sax@1.2.1
setprototypeof@1.2.0
wrappy@1.0.2
yallist@2.1.2

BSD 2-Clause "Simplified" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
hold-liable
Must
include-copyright
include-license
6 Packages, Including:
escodegen@1.14.3
esprima@3.1.3
esprima@4.0.1
estraverse@4.3.0
esutils@2.0.3
node-lambda@0.11.3

BSD 3-Clause "New" or "Revised" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
use-trademark
hold-liable
Must
include-copyright
include-license
3 Packages, Including:
ieee754@1.1.13
ieee754@1.2.1
source-map@0.6.1

Apache License 2.0

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
use-patent-claims
place-warranty
Cannot
hold-liable
use-trademark
Must
include-copyright
include-license
state-changes
include-notice
2 Packages, Including:
aws-sdk@2.1628.0
jmespath@0.16.0

BSD

Invalid
Not OSI Approved
1 Packages, Including:
dotenv@0.4.0

MIT or GPLv3

Invalid
1 Packages, Including:
jszip@2.5.0

N/A

N/A
1 Packages, Including:
node-zip@1.1.1

BSD Zero Clause License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
include-copyright
include-license
include-original
Cannot
hold-liable
Must
1 Packages, Including:
tslib@2.6.2
Disclaimer

This deed highlights only some of the key features and terms of the actual license. It is not a license and has no legal value. You should carefully review all of the terms and conditions of the actual license before using the licensed material.

Sandworm is not a law firm and does not provide legal services. Distributing, displaying, or linking to this deed or the license that it summarizes does not create a lawyer-client or any other relationship.

Direct Dependencies

8
All Dependencies CSV
β“˜ This is a list of node-lambda 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.
NameVersionSizeLicenseTypeVulnerabilities
archiver2.1.111.4 kBMIT
prod
aws-sdk2.1628.091.24 MBApache-2.0
prod
2
commander2.20.318.26 kBMIT
prod
dotenv0.4.04.73 kBBSD
prod
1
1
fs-extra0.30.024.22 kBMIT
prod
minimatch3.1.211.66 kBISC
prod
node-zip1.1.12.99 kBUNKNOWN
prod
1
2
1
proxy-agent2.3.16.99 kBMIT
prod
1
3
1

Visualizations