Home
Docs
GitHub
Pricing
Blog
Log In

Run Sandworm Audit for your App

Get started
Hold on, we're currently generating a fresh version of this report
Generated on Apr 17, 2024 via pnpm

node-xlsx 0.14.1

NodeJS Excel files parser & builder
Package summary
Share
5
issues
2
high severity
vulnerability
2
3
moderate severity
vulnerability
3
2
licenses
11
Apache-2.0
3
MIT
Package created
22 Apr 2013
Version published
1 Feb 2019
Maintainers
1
Total deps
14
Direct deps
2
License
Apache-2.0

Issues

5

2 high severity issues

high
Recommendation: Upgrade to version 0.19.3 or later
via: xlsx@0.14.5
Recommendation: Upgrade to version 0.20.2 or later
via: xlsx@0.14.5
Collapse
Expand

3 moderate severity issues

moderate
Recommendation: Upgrade to version 0.17.0 or later
via: xlsx@0.14.5
Recommendation: Upgrade to version 0.17.0 or later
via: xlsx@0.14.5
Recommendation: Upgrade to version 0.17.0 or later
via: xlsx@0.14.5
Collapse
Expand

Licenses

Apache License 2.0

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
use-patent-claims
place-warranty
Cannot
hold-liable
use-trademark
Must
include-copyright
include-license
state-changes
include-notice
11 Packages, Including:
adler-32@1.2.0
adler-32@1.3.1
cfb@1.2.2
codepage@1.14.0
crc-32@1.2.2
exit-on-epipe@1.0.1
frac@1.1.2
node-xlsx@0.14.1
printj@1.1.2
ssf@0.10.3
xlsx@0.14.5

MIT License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
Cannot
hold-liable
Must
include-copyright
include-license
3 Packages, Including:
buffer-from@1.1.2
commander@2.14.1
commander@2.17.1
Disclaimer

This deed highlights only some of the key features and terms of the actual license. It is not a license and has no legal value. You should carefully review all of the terms and conditions of the actual license before using the licensed material.

Sandworm is not a law firm and does not provide legal services. Distributing, displaying, or linking to this deed or the license that it summarizes does not create a lawyer-client or any other relationship.

Direct Dependencies

2
All Dependencies CSV
β“˜ This is a list of node-xlsx 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.
NameVersionSizeLicenseTypeVulnerabilities
buffer-from1.1.22.26 kBMIT
prod
xlsx0.14.52.36 MBApache-2.0
prod
2
3

Visualizations