Generated on Apr 21, 2024 via pnpm

Npm

Home

nodejs-dashboard 0.4.3

Telemetry dashboard for node.js apps from the terminal!

dashboard

telemetry

terminal

realtime

statistics

Package summary

issues

licenses

Package created

10 Oct 2016

Version published

2 Dec 2017

Maintainers

Total deps

153

Direct deps

License

MIT

Issues

18 critical severity issues

critical

socket.io-parser@2.3.1

Insufficient validation when decoding a Socket.IO packet

Recommendation: Upgrade to version 3.3.3 or later

via: socket.io-client@1.7.4 & others

arraybuffer.slice@0.0.6

Package has no specified license

Recommendation: Check the package code and files for license information

via: socket.io-client@1.7.4 & others

better-assert@1.0.2

Package has no specified license

Recommendation: Check the package code and files for license information

via: socket.io-client@1.7.4 & others

blob@0.0.4

Package has no specified license

Recommendation: Check the package code and files for license information

via: socket.io-client@1.7.4 & others

buffers@0.1.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: blessed-contrib@3.5.5

callsite@1.0.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: socket.io-client@1.7.4 & others

cli-table@0.3.11

Package has no specified license

Recommendation: Check the package code and files for license information

via: blessed-contrib@3.5.5

component-bind@1.0.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: socket.io-client@1.7.4 & others

component-emitter@1.1.2

Package has no specified license

Recommendation: Check the package code and files for license information

via: socket.io-client@1.7.4 & others

component-inherit@0.0.3

Package has no specified license

Recommendation: Check the package code and files for license information

via: socket.io-client@1.7.4 & others

event-stream@0.9.8

Package has no specified license

Recommendation: Check the package code and files for license information

via: blessed-contrib@3.5.5

indexof@0.0.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: socket.io-client@1.7.4 & others

ms@0.7.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: socket.io-client@1.7.4 & others

object-component@0.0.3

Package has no specified license

Recommendation: Check the package code and files for license information

via: socket.io-client@1.7.4 & others

options@0.0.6

Package has no specified license

Recommendation: Check the package code and files for license information

via: socket.io-client@1.7.4 & others

png-js@0.1.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: blessed-contrib@3.5.5

request@2.9.203

Package has no specified license

Recommendation: Check the package code and files for license information

via: blessed-contrib@3.5.5

term-canvas@0.0.5

Package has no specified license

Recommendation: Check the package code and files for license information

via: blessed-contrib@3.5.5

Collapse

Expand

14 high severity issues

high

engine.io@1.8.5

Resource exhaustion in engine.io

Recommendation: Upgrade to version 3.6.0 or later

via: socket.io@1.7.4

socket.io-parser@2.3.1

Resource exhaustion in socket.io-parser

Recommendation: Upgrade to version 3.3.2 or later

via: socket.io-client@1.7.4 & others

parsejson@0.0.3

Regular Expression Denial of Service in parsejson

Recommendation: None

via: socket.io-client@1.7.4 & others

debug@2.3.3

debug Inefficient Regular Expression Complexity vulnerability

Recommendation: Upgrade to version 2.6.9 or later

via: socket.io-client@1.7.4 & others

marked@0.3.19

Inefficient Regular Expression Complexity in marked

Recommendation: Upgrade to version 4.0.10 or later

via: blessed-contrib@3.5.5

marked@0.3.19

Inefficient Regular Expression Complexity in marked

Recommendation: Upgrade to version 4.0.10 or later

via: blessed-contrib@3.5.5

charm@0.1.2

Package uses an invalid SPDX license ("MIT/X11")

Recommendation: Validate that the package complies with your license policy

via: blessed-contrib@3.5.5

optimist@0.2.8

Package uses an invalid SPDX license ("MIT/X11")

Recommendation: Validate that the package complies with your license policy

via: blessed-contrib@3.5.5

optimist@0.3.7

Package uses an invalid SPDX license ("MIT/X11")

Recommendation: Validate that the package complies with your license policy

via: blessed-contrib@3.5.5

har-validator@5.1.5

Deprecated package

via: blessed-contrib@3.5.5

json3@3.3.2

Deprecated package

via: socket.io-client@1.7.4 & others

request@2.88.2

Deprecated package

via: blessed-contrib@3.5.5

request@2.9.203

Deprecated package

via: blessed-contrib@3.5.5

uuid@3.4.0

Deprecated package

via: blessed-contrib@3.5.5

Collapse

Expand

13 moderate severity issues

moderate

marked@0.3.19

Marked ReDoS due to email addresses being evaluated in quadratic time

Recommendation: Upgrade to version 0.6.2 or later

via: blessed-contrib@3.5.5

engine.io@1.8.5

Uncaught exception in engine.io

Recommendation: Upgrade to version 3.6.1 or later

via: socket.io@1.7.4

socket.io@1.7.4

CORS misconfiguration in socket.io

Recommendation: Upgrade to version 2.4.0 or later

via: socket.io@1.7.4

request@2.9.203

Remote Memory Exposure in request

Recommendation: Upgrade to version 2.68.0 or later

via: blessed-contrib@3.5.5

ms@0.7.2

Vercel ms Inefficient Regular Expression Complexity vulnerability

Recommendation: Upgrade to version 2.0.0 or later

via: socket.io-client@1.7.4 & others

tough-cookie@2.5.0

tough-cookie Prototype Pollution vulnerability

Recommendation: Upgrade to version 4.1.3 or later

via: blessed-contrib@3.5.5

xml2js@0.4.23

xml2js is vulnerable to prototype pollution

Recommendation: Upgrade to version 0.5.0 or later

via: blessed-contrib@3.5.5

request@2.9.203

Server-Side Request Forgery in Request

Recommendation: None

via: blessed-contrib@3.5.5

callsite@1.0.0

Package has no specified source code repository

via: socket.io-client@1.7.4 & others

has-binary@0.1.7

Package has no specified source code repository

via: socket.io-client@1.7.4 & others

indexof@0.0.1

Package has no specified source code repository

via: socket.io-client@1.7.4 & others

object-component@0.0.3

Package has no specified source code repository

via: socket.io-client@1.7.4 & others

term-canvas@0.0.5

Package has no specified source code repository

via: blessed-contrib@3.5.5

Collapse

Expand

4 low severity issues

low

debug@2.3.3

Regular Expression Denial of Service in debug

Recommendation: Upgrade to version 2.6.9 or later

via: socket.io-client@1.7.4 & others

charm@0.1.2

Package uses a license that is not OSI approved ("MIT/X11")

Recommendation: Read and validate the license terms

via: blessed-contrib@3.5.5

optimist@0.2.8

Package uses a license that is not OSI approved ("MIT/X11")

Recommendation: Read and validate the license terms

via: blessed-contrib@3.5.5

optimist@0.3.7

Package uses a license that is not OSI approved ("MIT/X11")

Recommendation: Read and validate the license terms

via: blessed-contrib@3.5.5

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

108 Packages, Including:

accepts@1.3.3

after@0.8.2

ajv@6.12.6

ansi-regex@2.1.1

ansi-styles@2.2.1

ansicolors@0.2.1

asn1@0.2.6

assert-plus@1.0.0

asynckit@0.4.0

aws4@1.12.0

backo2@1.0.2

base64-arraybuffer@0.1.5

base64id@1.0.0

blessed-contrib@3.5.5

blessed@0.1.81

blocked@1.3.0

bresenham@0.0.3

cardinal@1.0.0

chalk@1.1.3

colors@1.0.3

combined-stream@1.0.8

commander@2.20.3

component-emitter@1.2.1

cookie@0.3.1

core-util-is@1.0.2

core-util-is@1.0.3

cross-spawn@4.0.2

dashdash@1.14.1

debug@2.2.0

debug@2.3.3

delayed-stream@1.0.0

drawille-blessed-contrib@1.0.0

drawille-canvas-blessed-contrib@0.1.3

ecc-jsbn@0.1.2

engine.io-client@1.8.6

engine.io-parser@1.3.2

engine.io@1.8.5

escape-string-regexp@1.0.5

extend@3.0.2

extsprintf@1.3.0

fast-deep-equal@3.1.3

fast-json-stable-stringify@2.1.0

form-data@2.3.3

getpass@0.1.7

gl-matrix@2.8.1

har-validator@5.1.5

has-ansi@2.0.0

has-binary@0.1.7

has-cors@1.1.0

here@0.0.2

N/A

17 Packages, Including:

arraybuffer.slice@0.0.6

better-assert@1.0.2

blob@0.0.4

buffers@0.1.1

callsite@1.0.0

cli-table@0.3.11

component-bind@1.0.0

component-emitter@1.1.2

component-inherit@0.0.3

event-stream@0.9.8

indexof@0.0.1

ms@0.7.1

object-component@0.0.3

options@0.0.6

png-js@0.1.1

request@2.9.203

term-canvas@0.0.5

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

12 Packages, Including:

abbrev@1.1.1

ansi-term@0.0.2

har-schema@2.0.0

inherits@2.0.4

isexe@2.0.0

json-stringify-safe@5.0.1

lru-cache@4.1.5

map-canvas@0.1.5

pseudomap@1.0.2

sax@1.3.0

which@1.3.1

yallist@2.1.2

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

6 Packages, Including:

aws-sign2@0.7.0

caseless@0.12.0

forever-agent@0.6.1

oauth-sign@0.9.0

request@2.88.2

tunnel-agent@0.6.0

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

3 Packages, Including:

bcrypt-pbkdf@1.0.2

qs@6.5.3

tough-cookie@2.5.0

MIT/X11

Invalid

Not OSI Approved

3 Packages, Including:

charm@0.1.2

optimist@0.2.8

optimist@0.3.7

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

2 Packages, Including:

esprima@3.0.0

uri-js@4.4.1

(AFL-2.1 OR BSD-3-Clause)

Permissive

1 Packages, Including:

json-schema@0.4.0

The Unlicense

Public Domain

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

private-use

modify

Cannot

include-copyright

hold-liable

Must

1 Packages, Including:

tweetnacl@0.14.5

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of nodejs-dashboard 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
blessed-contrib	3.5.5	23.74 kB	MIT	prod	6 9 6 3
blessed	0.1.81	255.48 kB	MIT	prod
blocked	1.3.0	1.63 kB	MIT	prod
commander	2.20.3	18.26 kB	MIT	prod
cross-spawn	4.0.2	4.99 kB	MIT	prod
jsonschema	1.4.1	19.54 kB	MIT	prod
lodash	4.17.21	311.49 kB	MIT	prod
pidusage	1.2.0	9.69 kB	MIT	prod
pretty-bytes	3.0.1	1.85 kB	MIT	prod
socket.io-client	1.7.4	213.34 kB	MIT	prod	12 4 5 1
socket.io	1.7.4	19.67 kB	MIT	prod	12 5 7 1