Hold on, we're currently generating a fresh version of this report

Generated on Mar 29, 2024 via pnpm

openid-connect 0.1.0

This is an OAuth 2 server implementation with support for OpenID/Connect specification. Based on https://github.com/ammmir/node-oauth2-provider.

Package summary

10

issues

2

licenses

Package created

31 Jul 2013

Version published

2 Aug 2013

Maintainers

2

Total deps

10

Direct deps

5

License

UNKNOWN

Issues

10

6 critical severity issues

jwt-simple@0.1.0

Forgeable Public/Private Tokens in jwt-simple

Recommendation: Upgrade to version 0.3.1 or later

via: jwt-simple@0.1.0

extend@1.1.3

Package has no specified license

Recommendation: Check the package code and files for license information

via: extend@1.1.3

hiredis@0.1.15

Package has no specified license

Recommendation: Check the package code and files for license information

via: redis-modelize@0.0.1

redis-modelize@0.0.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: redis-modelize@0.0.1

redis@0.8.3

Package has no specified license

Recommendation: Check the package code and files for license information

via: redis-modelize@0.0.1

serializer@0.0.3

Package has no specified license

Recommendation: Check the package code and files for license information

via: serializer@0.0.3

2 high severity issues

jwt-simple@0.1.0

Signature Verification Bypass in jwt-simple

Recommendation: Upgrade to version 0.5.3 or later

via: jwt-simple@0.1.0

extend@1.1.3

Deprecated package

via: extend@1.1.3

2 moderate severity issues

extend@1.1.3

Prototype Pollution in extend

Recommendation: Upgrade to version 2.0.2 or later

via: extend@1.1.3

hiredis@0.1.15

Package has no specified source code repository

via: redis-modelize@0.0.1

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

5 Packages, Including:

bindings@1.5.0

file-uri-to-path@1.0.0

jwt-simple@0.1.0

openid-connect@0.1.0

q@0.9.6

N/A

N/A

5 Packages, Including:

extend@1.1.3

hiredis@0.1.15

redis-modelize@0.0.1

redis@0.8.3

serializer@0.0.3

Direct Dependencies

5

All Dependencies CSV

ⓘ This is a list of openid-connect 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
extend	1.1.3	1.96 kB	UNKNOWN	prod	1 1 1
jwt-simple	0.1.0	2.84 kB	MIT	prod	1 1
q	0.9.6	23.22 kB	MIT	prod
redis-modelize	0.0.1	4.74 kB	UNKNOWN	prod	3 1
serializer	0.0.3	2.95 kB	UNKNOWN	prod	1

All Versions