Hold on, we're currently generating a fresh version of this report

Generated on Feb 28, 2024 via pnpm

orm 5.0.3

NodeJS Object-relational mapping

Package summary

9

issues

2

licenses

Package created

5 Mar 2011

Version published

12 Feb 2019

Maintainers

2

Total deps

10

Direct deps

8

License

MIT

Issues

9

1 critical severity issue

lodash@4.17.10

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.12 or later

via: sql-ddl-sync@0.3.14

5 high severity issues

lodash@4.17.10

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.11 or later

via: sql-ddl-sync@0.3.14

lodash@4.17.10

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.19 or later

via: sql-ddl-sync@0.3.14

async@2.6.1

Prototype Pollution in async

Recommendation: Upgrade to version 2.6.4 or later

via: async@2.6.1

lodash@4.17.10

Command Injection in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: sql-ddl-sync@0.3.14

hat@0.0.3

Package uses an invalid SPDX license ("MIT/X11")

Recommendation: Validate that the package complies with your license policy

via: hat@0.0.3

2 moderate severity issues

lodash@4.17.10

Regular Expression Denial of Service (ReDoS) in lodash

Recommendation: Upgrade to version 4.17.11 or later

via: sql-ddl-sync@0.3.14

lodash@4.17.10

Regular Expression Denial of Service (ReDoS) in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: sql-ddl-sync@0.3.14

1 low severity issue

hat@0.0.3

Package uses a license that is not OSI approved ("MIT/X11")

Recommendation: Read and validate the license terms

via: hat@0.0.3

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

9 Packages, Including:

async@2.6.1

bluebird@3.5.1

enforce@0.1.7

lodash@4.17.10

lodash@4.17.21

orm@5.0.3

path-is-absolute@1.0.1

sql-ddl-sync@0.3.14

sql-query@0.1.27

MIT/X11

Invalid

Not OSI Approved

1 Packages, Including:

hat@0.0.3

Direct Dependencies

8

All Dependencies CSV

ⓘ This is a list of orm 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
async	2.6.1	120.35 kB	MIT	prod	1
bluebird	3.5.1	132.01 kB	MIT	prod
enforce	0.1.7	19.77 kB	MIT	prod
hat	0.0.3	2.26 kB	MIT/X11	prod	1 1
lodash	4.17.21	311.49 kB	MIT	prod
path-is-absolute	1.0.1	1.84 kB	MIT	prod
sql-ddl-sync	0.3.14	13.37 kB	MIT	prod	1 3 2
sql-query	0.1.27	14.71 kB	MIT	prod

Recent Versions