Hold on, we're currently generating a fresh version of this report

Generated on Apr 16, 2024 via pnpm

perfjankie 0.1.16

Browser Performance regression suite

Package summary

103

issues

13

licenses

Package created

1 Jan 2014

Version published

23 Jul 2014

Maintainers

1

Total deps

167

Direct deps

7

License

BSD-2-Clause

Issues

103

21 critical severity issues

lodash@3.2.0

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.12 or later

via: browser-perf@0.1.21

underscore@1.5.2

Arbitrary Code Execution in underscore

Recommendation: Upgrade to version 1.12.1 or later

via: nano@5.10.0

asn1@0.1.11

Package has no specified license

Recommendation: Check the package code and files for license information

via: browser-perf@0.1.21 & others

assert-plus@0.1.5

Package has no specified license

Recommendation: Check the package code and files for license information

via: browser-perf@0.1.21 & others

aws-sign2@0.5.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: browser-perf@0.1.21 & others

browser-request@0.3.3

Package has no specified license

Recommendation: Check the package code and files for license information

via: nano@5.10.0

cli-table@0.3.11

Package has no specified license

Recommendation: Check the package code and files for license information

via: browser-perf@0.1.21

combined-stream@0.0.7

Package has no specified license

Recommendation: Check the package code and files for license information

via: browser-perf@0.1.21 & others

commander@2.2.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: commander@2.2.0 & others

ctype@0.5.3

Package has no specified license

Recommendation: Check the package code and files for license information

via: browser-perf@0.1.21 & others

debug@0.7.4

Package has no specified license

Recommendation: Check the package code and files for license information

via: nano@5.10.0

delayed-stream@0.0.5

Package has no specified license

Recommendation: Check the package code and files for license information

via: browser-perf@0.1.21 & others

errs@0.2.4

Package has no specified license

Recommendation: Check the package code and files for license information

via: nano@5.10.0

forever-agent@0.5.2

Package has no specified license

Recommendation: Check the package code and files for license information

via: less@1.7.5 & others

mime@1.2.11

Package has no specified license

Recommendation: Check the package code and files for license information

via: less@1.7.5 & others

oauth-sign@0.3.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: less@1.7.5 & others

oauth-sign@0.6.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: browser-perf@0.1.21

qs@0.6.6

Package has no specified license

Recommendation: Check the package code and files for license information

via: nano@5.10.0

request@2.33.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: nano@5.10.0

tunnel-agent@0.3.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: nano@5.10.0

vargs@0.1.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: browser-perf@0.1.21

53 high severity issues

qs@2.4.2

Prototype Pollution Protection Bypass in qs

Recommendation: Upgrade to version 6.0.4 or later

via: browser-perf@0.1.21 & others

qs@0.6.6

Denial-of-Service Extended Event Loop Blocking in qs

Recommendation: Upgrade to version 1.0.0 or later

via: nano@5.10.0

hawk@2.3.1

Regular Expression Denial of Service in hawk

Recommendation: Upgrade to version 3.1.3 or later

via: browser-perf@0.1.21 & others

qs@0.6.6

Denial-of-Service Memory Exhaustion in qs

Recommendation: Upgrade to version 1.0.0 or later

via: nano@5.10.0

minimatch@2.0.10

Regular Expression Denial of Service in minimatch

Recommendation: Upgrade to version 3.0.2 or later

via: browser-perf@0.1.21 & others

mime@1.2.11

mime Regular Expression Denial of Service when MIME lookup performed on untrusted user input

Recommendation: Upgrade to version 1.4.1 or later

via: less@1.7.5 & others

hoek@2.16.3

Prototype Pollution in hoek

Recommendation: Upgrade to version 4.2.1 or later

via: browser-perf@0.1.21 & others

debug@0.7.4

debug Inefficient Regular Expression Complexity vulnerability

Recommendation: Upgrade to version 2.6.9 or later

via: nano@5.10.0

lodash@3.2.0

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.11 or later

via: browser-perf@0.1.21

hawk@2.3.1

Uncontrolled Resource Consumption in Hawk

Recommendation: Upgrade to version 9.0.1 or later

via: browser-perf@0.1.21 & others

lodash@3.9.3

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.19 or later

via: browser-perf@0.1.21

hoek@2.16.3

hoek subject to prototype pollution via the clone function.

Recommendation: None

via: browser-perf@0.1.21 & others

qs@2.4.2

qs vulnerable to Prototype Pollution

Recommendation: Upgrade to version 6.2.4 or later

via: browser-perf@0.1.21 & others

minimatch@2.0.10

minimatch ReDoS vulnerability

Recommendation: Upgrade to version 3.0.5 or later

via: browser-perf@0.1.21 & others

lodash@3.2.0

Command Injection in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: browser-perf@0.1.21

boom@0.4.2

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: less@1.7.5 & others

caseless@0.9.0

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: browser-perf@0.1.21

cryptiles@0.2.2

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: less@1.7.5 & others

hawk@1.0.0

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: nano@5.10.0

hawk@1.1.1

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: less@1.7.5

hawk@2.3.1

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: browser-perf@0.1.21

hoek@0.9.1

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: less@1.7.5 & others

qs@1.0.2

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: less@1.7.5

qs@2.4.2

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: browser-perf@0.1.21

sntp@0.2.4

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: less@1.7.5 & others

sntp@1.0.9

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: browser-perf@0.1.21

source-map@0.1.43

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: less@1.7.5

follow@0.11.4

Package uses an invalid SPDX license ("Apache 2.0")

Recommendation: Validate that the package complies with your license policy

via: nano@5.10.0

nano@5.10.0

Package uses an invalid SPDX license ("Apache 2.0")

Recommendation: Validate that the package complies with your license policy

via: nano@5.10.0

jsmin@1.0.1

Package uses an invalid SPDX license ("Doug Crockford's license that allows this module to be used for Good but not for Evil")

Recommendation: Validate that the package complies with your license policy

via: browser-perf@0.1.21

less@1.7.5

Package uses an invalid SPDX license ("Apache v2")

Recommendation: Validate that the package complies with your license policy

via: less@1.7.5

boom@0.4.2

Deprecated package

via: less@1.7.5 & others

boom@2.10.1

Deprecated package

via: browser-perf@0.1.21

cryptiles@0.2.2

Deprecated package

via: less@1.7.5 & others

cryptiles@2.0.5

Deprecated package

via: browser-perf@0.1.21

har-validator@1.8.0

Deprecated package

via: browser-perf@0.1.21

har-validator@5.1.5

Deprecated package

via: nano@5.10.0 & others

hawk@1.0.0

Deprecated package

via: nano@5.10.0

hawk@1.1.1

Deprecated package

via: less@1.7.5

hawk@2.3.1

Deprecated package

via: browser-perf@0.1.21

hoek@0.9.1

Deprecated package

via: less@1.7.5 & others

hoek@2.16.3

Deprecated package

via: browser-perf@0.1.21

minimatch@1.0.0

Deprecated package

via: glob@4.0.6

minimatch@2.0.10

Deprecated package

via: browser-perf@0.1.21

natives@1.1.6

Deprecated package

via: glob@4.0.6 & others

node-uuid@1.4.8

Deprecated package

via: browser-perf@0.1.21 & others

request@2.33.0

Deprecated package

via: nano@5.10.0

request@2.40.0

Deprecated package

via: less@1.7.5

request@2.55.0

Deprecated package

via: browser-perf@0.1.21

request@2.88.2

Deprecated package

via: nano@5.10.0 & others

sntp@0.2.4

Deprecated package

via: less@1.7.5 & others

sntp@1.0.9

Deprecated package

via: browser-perf@0.1.21

uuid@3.4.0

Deprecated package

via: nano@5.10.0 & others

10 moderate severity issues

lodash@3.2.0

Regular Expression Denial of Service (ReDoS) in lodash

Recommendation: Upgrade to version 4.17.11 or later

via: browser-perf@0.1.21

underscore.string@3.0.3

Regular Expression Denial of Service in underscore.string

Recommendation: Upgrade to version 3.3.5 or later

via: browser-perf@0.1.21

tunnel-agent@0.4.3

Memory Exposure in tunnel-agent

Recommendation: Upgrade to version 0.6.0 or later

via: browser-perf@0.1.21 & others

bl@0.9.5

Remote Memory Exposure in bl

Recommendation: Upgrade to version 1.2.3 or later

via: browser-perf@0.1.21

request@2.40.0

Remote Memory Exposure in request

Recommendation: Upgrade to version 2.68.0 or later

via: less@1.7.5 & others

request@2.55.0

Remote Memory Exposure in request

Recommendation: Upgrade to version 2.68.0 or later

via: browser-perf@0.1.21

lodash@3.2.0

Regular Expression Denial of Service (ReDoS) in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: browser-perf@0.1.21

tough-cookie@2.5.0

tough-cookie Prototype Pollution vulnerability

Recommendation: Upgrade to version 4.1.3 or later

via: nano@5.10.0 & others

request@2.55.0

Server-Side Request Forgery in Request

Recommendation: None

via: browser-perf@0.1.21 & others

vargs@0.1.0

Package has no specified source code repository

via: browser-perf@0.1.21

19 low severity issues

lodash@3.2.0

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.5 or later

via: browser-perf@0.1.21

clean-css@2.2.23

Regular Expression Denial of Service in clean-css

Recommendation: Upgrade to version 4.1.11 or later

via: less@1.7.5

debug@0.7.4

Regular Expression Denial of Service in debug

Recommendation: Upgrade to version 2.6.9 or later

via: nano@5.10.0

boom@0.4.2

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: less@1.7.5 & others

caseless@0.9.0

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: browser-perf@0.1.21

cryptiles@0.2.2

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: less@1.7.5 & others

hawk@1.0.0

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: nano@5.10.0

hawk@1.1.1

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: less@1.7.5

hawk@2.3.1

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: browser-perf@0.1.21

hoek@0.9.1

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: less@1.7.5 & others

qs@1.0.2

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: less@1.7.5

qs@2.4.2

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: browser-perf@0.1.21

sntp@0.2.4

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: less@1.7.5 & others

sntp@1.0.9

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: browser-perf@0.1.21

source-map@0.1.43

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: less@1.7.5

follow@0.11.4

Package uses a license that is not OSI approved ("Apache 2.0")

Recommendation: Read and validate the license terms

via: nano@5.10.0

nano@5.10.0

Package uses a license that is not OSI approved ("Apache 2.0")

Recommendation: Read and validate the license terms

via: nano@5.10.0

jsmin@1.0.1

Package uses a license that is not OSI approved ("Doug Crockford's license that allows this module to be used for Good but not for Evil")

Recommendation: Read and validate the license terms

via: browser-perf@0.1.21

less@1.7.5

Package uses a license that is not OSI approved ("Apache v2")

Recommendation: Read and validate the license terms

via: less@1.7.5

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

95 Packages, Including:

ajv@6.12.6

ansi-regex@2.1.1

ansi-styles@2.2.1

archiver@0.14.4

asn1@0.2.6

assert-plus@1.0.0

async@0.9.2

async@1.0.0

asynckit@0.4.0

aws4@1.12.0

balanced-match@1.0.2

bl@0.9.5

bluebird@2.11.0

brace-expansion@1.1.11

buffer-crc32@0.2.13

byline@4.2.2

chalk@1.1.3

clean-css@2.2.23

colors@1.0.3

combined-stream@1.0.8

commander@2.20.3

compress-commons@0.2.9

concat-map@0.0.1

core-util-is@1.0.2

core-util-is@1.0.3

crc32-stream@0.3.4

dashdash@1.14.1

delayed-stream@1.0.0

ecc-jsbn@0.1.2

end-of-stream@1.4.4

escape-string-regexp@1.0.5

extend@3.0.2

extsprintf@1.3.0

fast-deep-equal@3.1.3

fast-json-stable-stringify@2.1.0

form-data@0.1.4

form-data@0.2.0

form-data@2.3.3

generate-function@2.3.1

generate-object-property@1.2.0

getpass@0.1.7

har-validator@5.1.5

has-ansi@2.0.0

http-signature@0.10.1

http-signature@1.2.0

is-my-ip-valid@1.0.1

is-my-json-valid@2.20.6

is-property@1.0.2

is-typedarray@1.0.0

isarray@0.0.1

N/A

N/A

19 Packages, Including:

asn1@0.1.11

assert-plus@0.1.5

aws-sign2@0.5.0

browser-request@0.3.3

cli-table@0.3.11

combined-stream@0.0.7

commander@2.2.0

ctype@0.5.3

debug@0.7.4

delayed-stream@0.0.5

errs@0.2.4

forever-agent@0.5.2

mime@1.2.11

oauth-sign@0.3.0

oauth-sign@0.6.0

qs@0.6.6

request@2.33.0

tunnel-agent@0.3.0

vargs@0.1.0

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

14 Packages, Including:

glob@4.0.6

glob@4.3.5

graceful-fs@3.0.12

har-schema@2.0.0

har-validator@1.8.0

inflight@1.0.6

inherits@2.0.4

json-stringify-safe@5.0.1

lru-cache@2.7.3

minimatch@2.0.10

natives@1.1.6

once@1.4.0

sigmund@1.0.1

wrappy@1.0.2

BSD

Invalid

Not OSI Approved

12 Packages, Including:

boom@0.4.2

caseless@0.9.0

cryptiles@0.2.2

hawk@1.0.0

hawk@1.1.1

hawk@2.3.1

hoek@0.9.1

qs@1.0.2

qs@2.4.2

sntp@0.2.4

sntp@1.0.9

source-map@0.1.43

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

10 Packages, Including:

aws-sign2@0.7.0

caseless@0.12.0

forever-agent@0.6.1

oauth-sign@0.9.0

request@2.40.0

request@2.55.0

request@2.88.2

tunnel-agent@0.4.3

tunnel-agent@0.6.0

wd@0.3.12

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

7 Packages, Including:

bcrypt-pbkdf@1.0.2

boom@2.10.1

cryptiles@2.0.5

hoek@2.16.3

qs@6.5.3

tough-cookie@2.5.0

tough-cookie@4.1.3

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

3 Packages, Including:

browser-perf@0.1.21

perfjankie@0.1.16

uri-js@4.4.1

Apache 2.0

Invalid

Not OSI Approved

2 Packages, Including:

follow@0.11.4

nano@5.10.0

BSD-3-Clause OR MIT

Permissive

1 Packages, Including:

amdefine@1.0.1

Doug Crockford's license that allows this module to be used for Good but not for Evil

Invalid

Not OSI Approved

1 Packages, Including:

jsmin@1.0.1

(AFL-2.1 OR BSD-3-Clause)

Permissive

1 Packages, Including:

json-schema@0.4.0

Apache v2

Invalid

Not OSI Approved

1 Packages, Including:

less@1.7.5

The Unlicense

Public Domain

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

private-use

modify

Cannot

include-copyright

hold-liable

Must

1 Packages, Including:

tweetnacl@0.14.5

Direct Dependencies

7

All Dependencies CSV

ⓘ This is a list of perfjankie 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
browser-perf	0.1.21	22.47 kB	BSD-2-Clause	prod	10 25 8 6
commander	2.2.0	7.76 kB	UNKNOWN	prod optional	1
glob	4.0.6	514.9 kB	ISC	prod	4
less	1.7.5	3.05 MB	Apache v2	prod	10 23 3 9
nano	5.10.0	40.99 kB	Apache 2.0	prod	16 27 4 8
q	1.0.1	25.09 kB	MIT	prod
sauce-tunnel	2.5.0	12.37 MB	MIT	prod	3 2

Recent Versions