Hold on, we're currently generating a fresh version of this report

Generated on May 21, 2024 via pnpm

orm 3.2.3

NodeJS Object-relational mapping

Package summary

10

issues

2

licenses

Package created

5 Mar 2011

Version published

6 Jan 2017

Maintainers

2

Total deps

8

Direct deps

7

License

MIT

Issues

10

1 critical severity issue

lodash@4.17.2

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.12 or later

via: async@2.1.4 & others

5 high severity issues

lodash@4.17.2

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.11 or later

via: async@2.1.4 & others

lodash@4.17.2

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.19 or later

via: async@2.1.4 & others

async@2.1.4

Prototype Pollution in async

Recommendation: Upgrade to version 2.6.4 or later

via: async@2.1.4

lodash@4.17.2

Command Injection in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: async@2.1.4 & others

hat@0.0.3

Package uses an invalid SPDX license ("MIT/X11")

Recommendation: Validate that the package complies with your license policy

via: hat@0.0.3

3 moderate severity issues

lodash@4.17.2

Regular Expression Denial of Service (ReDoS) in lodash

Recommendation: Upgrade to version 4.17.11 or later

via: async@2.1.4 & others

lodash@4.17.2

Regular Expression Denial of Service (ReDoS) in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: async@2.1.4 & others

lodash@4.17.2

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.5 or later

via: async@2.1.4 & others

1 low severity issue

hat@0.0.3

Package uses a license that is not OSI approved ("MIT/X11")

Recommendation: Read and validate the license terms

via: hat@0.0.3

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

7 Packages, Including:

async@2.1.4

enforce@0.1.7

lodash@4.17.2

orm@3.2.3

path-is-absolute@1.0.1

sql-ddl-sync@0.3.12

sql-query@0.1.26

MIT/X11

Invalid

Not OSI Approved

1 Packages, Including:

hat@0.0.3

Direct Dependencies

7

All Dependencies CSV

ⓘ This is a list of orm 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
async	2.1.4	90.53 kB	MIT	prod	1 4 3
enforce	0.1.7	19.77 kB	MIT	prod
hat	0.0.3	2.26 kB	MIT/X11	prod	1 1
lodash	4.17.2	303.2 kB	MIT	prod	1 3 3
path-is-absolute	1.0.1	1.84 kB	MIT	prod
sql-ddl-sync	0.3.12	13.2 kB	MIT	prod	1 3 3
sql-query	0.1.26	13.09 kB	MIT	prod

Recent Versions