Home
Docs
GitHub
Pricing
Blog
Log In

Run Sandworm Audit for your App

Get started
Hold on, we're currently generating a fresh version of this report
Generated on Feb 19, 2024 via pnpm

openid-connect 1.2.3

This is an fully functional OAuth 2 server implementation, with support for OpenID Connect specification. Based on https://github.com/ammmir/node-oauth2-provider.
Package summary
Share
35
issues
13
critical severity
vulnerability
4
license
9
11
high severity
vulnerability
5
license
2
meta
4
8
moderate severity
vulnerability
5
meta
3
3
low severity
vulnerability
1
license
2
5
licenses
120
MIT
11
ISC
9
N/A
2
other licenses
FreeBSD
1
Apache 2.0
1
Package created
31 Jul 2013
Version published
28 Sep 2015
Maintainers
2
Total deps
142
Direct deps
7
License
UNKNOWN

Issues

35

13 critical severity issues

critical
Recommendation: Upgrade to version 0.3.1 or later
via: jwt-simple@0.1.0
Recommendation: Upgrade to version 4.17.12 or later
via: modelling@0.0.3
Recommendation: Upgrade to version 1.12.1 or later
via: modelling@0.0.3
Recommendation: Upgrade to version 1.2.6 or later
via: modelling@0.0.3
Recommendation: Check the package code and files for license information
via: modelling@0.0.3
Recommendation: Check the package code and files for license information
via: modelling@0.0.3
Recommendation: Check the package code and files for license information
via: extend@1.1.3
Recommendation: Check the package code and files for license information
via: modelling@0.0.3
Recommendation: Check the package code and files for license information
via: modelling@0.0.3
Recommendation: Check the package code and files for license information
via: modelling@0.0.3
Recommendation: Check the package code and files for license information
via: modelling@0.0.3
Recommendation: Check the package code and files for license information
via: modelling@0.0.3
Recommendation: Check the package code and files for license information
via: modelling@0.0.3
Collapse
Expand

11 high severity issues

high
Recommendation: Upgrade to version 0.5.3 or later
via: jwt-simple@0.1.0
Recommendation: Upgrade to version 0.0.3 or later
via: modelling@0.0.3
Recommendation: Upgrade to version 4.17.11 or later
via: modelling@0.0.3
Recommendation: Upgrade to version 4.17.19 or later
via: modelling@0.0.3
Recommendation: Upgrade to version 4.17.21 or later
via: modelling@0.0.3
Recommendation: Validate that the package complies with your license policy
via: modelling@0.0.3
Recommendation: Validate that the package complies with your license policy
via: modelling@0.0.3
via: modelling@0.0.3
via: extend@1.1.3
via: modelling@0.0.3
via: modelling@0.0.3
Collapse
Expand

8 moderate severity issues

moderate
Recommendation: Upgrade to version 4.17.11 or later
via: modelling@0.0.3
Recommendation: Upgrade to version 2.0.2 or later
via: extend@1.1.3
Recommendation: Upgrade to version 4.17.21 or later
via: modelling@0.0.3
Recommendation: Upgrade to version 13.7.0 or later
via: modelling@0.0.3
Recommendation: Upgrade to version 1.2.3 or later
via: modelling@0.0.3
via: modelling@0.0.3
via: modelling@0.0.3
via: modelling@0.0.3
Collapse
Expand

3 low severity issues

low
Recommendation: Upgrade to version 4.17.5 or later
via: modelling@0.0.3
Recommendation: Read and validate the license terms
via: modelling@0.0.3
Recommendation: Read and validate the license terms
via: modelling@0.0.3
Collapse
Expand

Licenses

MIT License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
Cannot
hold-liable
Must
include-copyright
include-license
120 Packages, Including:
@sailshq/lodash@3.10.4
anchor@0.11.6
ansi-regex@2.1.1
ansi-styles@1.0.0
ansi-styles@2.2.1
array-buffer-byte-length@1.0.1
async@0.2.10
async@1.2.1
available-typed-arrays@1.0.6
balanced-match@1.0.2
base64url@3.0.1
bluebird@2.9.34
brace-expansion@1.1.11
call-bind@1.0.7
chalk@0.4.0
chalk@1.1.3
clean-obj@1.0.1
code-point-at@1.1.0
concat-map@0.0.1
concat-stream@1.5.2
core-util-is@1.0.3
deep-diff@0.3.8
deep-equal@2.2.3
define-data-property@1.1.4
define-properties@1.2.1
es-define-property@1.0.0
es-errors@1.3.0
es-get-iterator@1.1.3
escape-string-regexp@1.0.5
extend@3.0.2
eyes@0.1.8
for-each@0.3.3
function-bind@1.1.2
functions-have-names@1.2.3
get-intrinsic@1.2.4
gopd@1.0.1
has-ansi@2.0.0
has-bigints@1.0.2
has-color@0.1.7
has-property-descriptors@1.0.2
has-proto@1.0.1
has-symbols@1.0.3
has-tostringtag@1.0.2
has@1.0.4
hasown@2.0.1
i@0.3.7
internal-slot@1.0.7
irregular-plurals@1.4.0
is-arguments@1.1.1
is-array-buffer@3.0.4

ISC License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
Cannot
hold-liable
Must
include-copyright
include-license
11 Packages, Including:
@mapbox/geojsonhint@2.0.1
fs.realpath@1.0.0
glob@7.2.3
inflight@1.0.6
inherits@2.0.4
minimatch@3.1.2
mute-stream@0.0.8
once@1.4.0
read@1.0.7
rimraf@2.7.1
wrappy@1.0.2

N/A

N/A
9 Packages, Including:
colors@0.6.2
cycle@1.0.3
extend@1.1.3
jsonlint-lines@1.7.1
modelling@0.0.3
nomnom@1.8.1
prompt@0.2.14
trim@0.0.1
utile@0.2.1

FreeBSD

Invalid
Not OSI Approved
1 Packages, Including:
JSV@4.0.2

Apache 2.0

Invalid
Not OSI Approved
1 Packages, Including:
revalidator@0.1.8
Disclaimer

This deed highlights only some of the key features and terms of the actual license. It is not a license and has no legal value. You should carefully review all of the terms and conditions of the actual license before using the licensed material.

Sandworm is not a law firm and does not provide legal services. Distributing, displaying, or linking to this deed or the license that it summarizes does not create a lawyer-client or any other relationship.

Direct Dependencies

7
All Dependencies CSV
β“˜ This is a list of openid-connect 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.
NameVersionSizeLicenseTypeVulnerabilities
base64url3.0.12.89 kBMIT
prod
clean-obj1.0.13.61 kBMIT
prod
extend1.1.31.96 kBUNKNOWN
prod
1
1
1
jwt-simple0.1.02.84 kBMIT
prod
1
1
lodash4.17.21311.49 kBMIT
prod
modelling0.0.35.08 kBUNKNOWN
prod
11
9
7
3
q0.9.623.22 kBMIT
prod

Visualizations