Home
Docs
GitHub
Pricing
Blog
Log In

Run Sandworm Audit for your App

Get started
Hold on, we're currently generating a fresh version of this report
Generated on Mar 17, 2024 via pnpm

postgraphile 4.6.0

A GraphQL schema created by reflection over a PostgreSQL schema 🐘 (previously known as PostGraphQL)
Package summary
Share
8
issues
2
high severity
license
1
meta
1
5
moderate severity
vulnerability
4
meta
1
1
low severity
license
1
6
licenses
136
MIT
15
ISC
2
BSD-3-Clause
4
other licenses
0BSD
2
Apache-2.0
1
BSD
1
Package created
10 Aug 2017
Version published
27 Jan 2020
Maintainers
1
Total deps
157
Direct deps
25
License
MIT

Issues

8

2 high severity issues

high
Recommendation: Validate that the package complies with your license policy
via: graphile-utils@4.6.0 & others
via: subscriptions-transport-ws@0.9.19
Collapse
Expand

5 moderate severity issues

moderate
Recommendation: Upgrade to version 9.0.0 or later
via: jsonwebtoken@8.5.1 & others
Recommendation: Upgrade to version 9.0.0 or later
via: jsonwebtoken@8.5.1 & others
Recommendation: Upgrade to version 9.0.0 or later
via: jsonwebtoken@8.5.1 & others
Recommendation: Upgrade to version 5.7.2 or later
via: graphile-utils@4.6.0 & others
via: graphile-utils@4.6.0 & others
Collapse
Expand

1 low severity issue

low
Recommendation: Read and validate the license terms
via: graphile-utils@4.6.0 & others
Collapse
Expand

Licenses

MIT License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
Cannot
hold-liable
Must
include-copyright
include-license
136 Packages, Including:
@graphile/lru@4.11.0
@graphile/lru@4.5.0
@types/accepts@1.3.7
@types/body-parser@1.19.5
@types/connect@3.4.38
@types/content-disposition@0.5.8
@types/cookies@0.9.0
@types/express-serve-static-core@4.17.43
@types/express@4.17.21
@types/http-assert@1.5.5
@types/http-errors@2.0.4
@types/json5@0.0.30
@types/jsonwebtoken@8.5.9
@types/keygrip@1.0.6
@types/koa-compose@3.2.8
@types/koa@2.15.0
@types/mime@1.3.5
@types/mime@3.0.4
@types/node@20.11.28
@types/pg@7.14.11
@types/pg@8.11.2
@types/qs@6.9.12
@types/range-parser@1.2.7
@types/send@0.17.4
@types/serve-static@1.15.5
@types/ws@6.0.4
ansi-styles@3.2.1
async-limiter@1.0.1
backo2@1.0.2
body-parser@1.20.2
buffer-writer@2.0.0
bytes@3.1.2
call-bind@1.0.7
chalk@2.4.2
color-convert@1.9.3
color-name@1.1.3
commander@2.20.3
content-type@1.0.5
debug@2.6.9
debug@4.3.4
define-data-property@1.1.4
depd@1.1.2
depd@2.0.0
destroy@1.2.0
ee-first@1.1.1
encodeurl@1.0.2
es-define-property@1.0.0
es-errors@1.3.0
escape-html@1.0.3
escape-string-regexp@1.0.5

ISC License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
Cannot
hold-liable
Must
include-copyright
include-license
15 Packages, Including:
inherits@2.0.4
lru-cache@4.1.5
lru-cache@5.1.1
lru-cache@6.0.0
pg-int8@1.0.1
pg-numeric@1.0.2
pseudomap@1.0.2
semver@5.7.2
semver@6.3.1
semver@7.6.0
setprototypeof@1.2.0
split2@4.2.0
yallist@2.1.2
yallist@3.1.1
yallist@4.0.0

BSD 3-Clause "New" or "Revised" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
use-trademark
hold-liable
Must
include-copyright
include-license
2 Packages, Including:
buffer-equal-constant-time@1.0.1
qs@6.11.0

BSD Zero Clause License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
include-copyright
include-license
include-original
Cannot
hold-liable
Must
2 Packages, Including:
tslib@1.14.1
tslib@2.6.2

Apache License 2.0

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
use-patent-claims
place-warranty
Cannot
hold-liable
use-trademark
Must
include-copyright
include-license
state-changes
include-notice
1 Packages, Including:
ecdsa-sig-formatter@1.0.11

BSD

Invalid
Not OSI Approved
1 Packages, Including:
semver@4.3.2
Disclaimer

This deed highlights only some of the key features and terms of the actual license. It is not a license and has no legal value. You should carefully review all of the terms and conditions of the actual license before using the licensed material.

Sandworm is not a law firm and does not provide legal services. Distributing, displaying, or linking to this deed or the license that it summarizes does not create a lawyer-client or any other relationship.

Direct Dependencies

25
All Dependencies CSV
β“˜ This is a list of postgraphile 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.
NameVersionSizeLicenseTypeVulnerabilities
@graphile/lru4.5.03.03 kBMIT
prod
@types/json50.0.302.16 kBMIT
prod
@types/jsonwebtoken8.5.93.95 kBMIT
prod
@types/koa2.15.024.83 kBMIT
prod
@types/pg7.14.113.58 kBMIT
prod
@types/ws6.0.43.6 kBMIT
prod
body-parser1.20.214.75 kBMIT
prod
chalk2.4.29.63 kBMIT
prod
commander2.20.318.26 kBMIT
prod
debug4.3.412.94 kBMIT
prod
finalhandler1.2.06.55 kBMIT
prod
graphile-utils4.6.031.29 kBMIT
prod
1
2
1
graphql14.7.0379.32 kBMIT
prod peer
http-errors1.8.16.03 kBMIT
prod
iterall1.3.014.89 kBMIT
prod
json52.2.349.14 kBMIT
prod
jsonwebtoken8.5.121.01 kBMIT
prod
3
parseurl1.3.33.86 kBMIT
prod
pg-connection-string2.6.23.67 kBMIT
prod
pg-sql24.5.09.41 kBMIT
prod
1
2
1
pg7.18.222.13 kBMIT
prod peer
1
2
1
postgraphile-core4.6.010.53 kBMIT
prod
1
5
1
subscriptions-transport-ws0.9.1962.78 kBMIT
prod
1
tslib1.14.17.43 kB0BSD
prod
ws6.2.224.25 kBMIT
prod

Visualizations