Generated on May 31, 2024 via pnpm

Npm

Home

passport-azure-ad 3.0.3

OIDC and Bearer Passport strategies for Azure Active Directory

saml

samlp

wsfed

azure active directory

Package summary

issues

licenses

Package created

20 May 2013

Version published

15 Nov 2016

Maintainers

Total deps

Direct deps

License

MIT

Issues

2 critical severity issues

critical

pause@0.0.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: passport@0.3.2

valid-url@1.0.9

Package has no specified license

Recommendation: Check the package code and files for license information

via: valid-url@1.0.9

Collapse

Expand

4 high severity issues

high

dtrace-provider@0.8.8

Package uses install script: "node-gyp rebuild || node suppress-error.js"

via: bunyan@1.8.15

har-validator@5.1.5

Deprecated package

via: request@2.88.2

request@2.88.2

Deprecated package

via: request@2.88.2

uuid@3.4.0

Deprecated package

via: request@2.88.2

Collapse

Expand

5 moderate severity issues

moderate

base64url@2.0.0

Out-of-bounds Read in base64url

Recommendation: Upgrade to version 3.0.0 or later

via: base64url@2.0.0

passport@0.3.2

Passport vulnerable to session regeneration when a users logs in or out

Recommendation: Upgrade to version 0.6.0 or later

via: passport@0.3.2

tough-cookie@2.5.0

tough-cookie Prototype Pollution vulnerability

Recommendation: Upgrade to version 4.1.3 or later

via: request@2.88.2

request@2.88.2

Server-Side Request Forgery in Request

Recommendation: None

via: request@2.88.2

pause@0.0.1

Package has no specified source code repository

via: passport@0.3.2

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

57 Packages, Including:

ajv@6.12.6

asn1@0.2.6

assert-plus@1.0.0

async@1.5.2

asynckit@0.4.0

aws4@1.13.0

balanced-match@1.0.2

base64url@2.0.0

brace-expansion@1.1.11

bunyan@1.8.15

cache-manager@2.11.1

combined-stream@1.0.8

concat-map@0.0.1

core-util-is@1.0.2

dashdash@1.14.1

delayed-stream@1.0.0

ecc-jsbn@0.1.2

extend@3.0.2

extsprintf@1.3.0

fast-deep-equal@3.1.3

fast-json-stable-stringify@2.1.0

form-data@2.3.3

getpass@0.1.7

har-validator@5.1.5

http-signature@1.2.0

is-typedarray@1.0.0

isstream@0.1.2

jsbn@0.1.1

json-schema-traverse@0.4.1

jsprim@1.4.2

jwa@1.4.1

jws@3.2.2

lodash.clonedeep@4.5.0

lodash@4.17.21

mime-db@1.52.0

mime-types@2.1.35

minimist@1.2.8

mkdirp@0.5.6

moment@2.30.1

mv@2.1.1

nan@2.19.0

ncp@2.0.0

oauth@0.9.15

passport-azure-ad@3.0.3

passport-strategy@1.0.0

passport@0.3.2

path-is-absolute@1.0.1

performance-now@2.1.0

pkginfo@0.4.1

psl@1.9.0

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

12 Packages, Including:

glob@6.0.4

har-schema@2.0.0

inflight@1.0.6

inherits@2.0.4

json-stringify-safe@5.0.1

lru-cache@4.0.0

minimatch@3.1.2

once@1.4.0

pseudomap@1.0.2

rimraf@2.4.5

wrappy@1.0.2

yallist@2.1.2

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

7 Packages, Including:

aws-sign2@0.7.0

caseless@0.12.0

ecdsa-sig-formatter@1.0.11

forever-agent@0.6.1

oauth-sign@0.9.0

request@2.88.2

tunnel-agent@0.6.0

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

4 Packages, Including:

bcrypt-pbkdf@1.0.2

buffer-equal-constant-time@1.0.1

qs@6.5.3

tough-cookie@2.5.0

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

2 Packages, Including:

dtrace-provider@0.8.8

uri-js@4.4.1

N/A

2 Packages, Including:

pause@0.0.1

valid-url@1.0.9

(AFL-2.1 OR BSD-3-Clause)

Permissive

1 Packages, Including:

json-schema@0.4.0

The Unlicense

Public Domain

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

private-use

modify

Cannot

include-copyright

hold-liable

Must

1 Packages, Including:

tweetnacl@0.14.5

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of passport-azure-ad 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
async	1.5.2	38.01 kB	MIT	prod
base64url	2.0.0	21.1 kB	MIT	prod	1
bunyan	1.8.15	58.89 kB	MIT	prod	1
cache-manager	2.11.1	30.94 kB	MIT	prod
jws	3.2.2	5.75 kB	MIT	prod
lodash	4.17.21	311.49 kB	MIT	prod
oauth	0.9.15	26.89 kB	MIT	prod
passport	0.3.2	10 kB	MIT	prod	1 2
pkginfo	0.4.1	4.25 kB	MIT	prod
request	2.88.2	57.83 kB	Apache-2.0	prod	3 2
valid-url	1.0.9	5 kB	UNKNOWN	prod	1