Generated on Apr 28, 2024 via pnpm

Npm

Home

postgraphile 4.6.0

A GraphQL schema created by reflection over a PostgreSQL schema 🐘 (previously known as PostGraphQL)

graphql

engine

Package summary

issues

licenses

Package created

10 Aug 2017

Version published

27 Jan 2020

Maintainers

Total deps

156

Direct deps

License

MIT

Issues

2 high severity issues

high

semver@4.3.2

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: graphile-utils@4.6.0 & others

subscriptions-transport-ws@0.9.19

Deprecated package

via: subscriptions-transport-ws@0.9.19

Collapse

Expand

5 moderate severity issues

moderate

jsonwebtoken@8.5.1

jsonwebtoken unrestricted key type could lead to legacy keys usage

Recommendation: Upgrade to version 9.0.0 or later

via: jsonwebtoken@8.5.1 & others

jsonwebtoken@8.5.1

jsonwebtoken's insecure implementation of key retrieval function could lead to Forgeable Public/Private Tokens from RSA to HMAC

Recommendation: Upgrade to version 9.0.0 or later

via: jsonwebtoken@8.5.1 & others

jsonwebtoken@8.5.1

jsonwebtoken vulnerable to signature validation bypass due to insecure default algorithm in jwt.verify()

Recommendation: Upgrade to version 9.0.0 or later

via: jsonwebtoken@8.5.1 & others

semver@4.3.2

semver vulnerable to Regular Expression Denial of Service

Recommendation: Upgrade to version 5.7.2 or later

via: graphile-utils@4.6.0 & others

pg-packet-stream@1.1.0

Package has no specified source code repository

via: graphile-utils@4.6.0 & others

Collapse

Expand

1 low severity issue

low

semver@4.3.2

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: graphile-utils@4.6.0 & others

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

135 Packages, Including:

@graphile/lru@4.11.0

@graphile/lru@4.5.0

@types/accepts@1.3.7

@types/body-parser@1.19.5

@types/connect@3.4.38

@types/content-disposition@0.5.8

@types/cookies@0.9.0

@types/express-serve-static-core@4.19.0

@types/express@4.17.21

@types/http-assert@1.5.5

@types/http-errors@2.0.4

@types/json5@0.0.30

@types/jsonwebtoken@8.5.9

@types/keygrip@1.0.6

@types/koa-compose@3.2.8

@types/koa@2.15.0

@types/mime@1.3.5

@types/node@20.12.7

@types/pg@7.14.11

@types/pg@8.11.5

@types/qs@6.9.15

@types/range-parser@1.2.7

@types/send@0.17.4

@types/serve-static@1.15.7

@types/ws@6.0.4

ansi-styles@3.2.1

async-limiter@1.0.1

backo2@1.0.2

body-parser@1.20.2

buffer-writer@2.0.0

bytes@3.1.2

call-bind@1.0.7

chalk@2.4.2

color-convert@1.9.3

color-name@1.1.3

commander@2.20.3

content-type@1.0.5

debug@2.6.9

debug@4.3.4

define-data-property@1.1.4

depd@1.1.2

depd@2.0.0

destroy@1.2.0

ee-first@1.1.1

encodeurl@1.0.2

es-define-property@1.0.0

es-errors@1.3.0

escape-html@1.0.3

escape-string-regexp@1.0.5

eventemitter3@3.1.2

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

15 Packages, Including:

inherits@2.0.4

lru-cache@4.1.5

lru-cache@5.1.1

lru-cache@6.0.0

pg-int8@1.0.1

pg-numeric@1.0.2

pseudomap@1.0.2

semver@5.7.2

semver@6.3.1

semver@7.6.0

setprototypeof@1.2.0

split2@4.2.0

yallist@2.1.2

yallist@3.1.1

yallist@4.0.0

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

2 Packages, Including:

buffer-equal-constant-time@1.0.1

qs@6.11.0

BSD Zero Clause License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

include-copyright

include-license

include-original

Cannot

hold-liable

Must

2 Packages, Including:

tslib@1.14.1

tslib@2.6.2

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

1 Packages, Including:

ecdsa-sig-formatter@1.0.11

BSD

Invalid

Not OSI Approved

1 Packages, Including:

semver@4.3.2

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of postgraphile 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
@graphile/lru	4.5.0	3.03 kB	MIT	prod
@types/json5	0.0.30	2.16 kB	MIT	prod
@types/jsonwebtoken	8.5.9	3.95 kB	MIT	prod
@types/koa	2.15.0	24.83 kB	MIT	prod
@types/pg	7.14.11	3.58 kB	MIT	prod
@types/ws	6.0.4	3.6 kB	MIT	prod
body-parser	1.20.2	14.75 kB	MIT	prod
chalk	2.4.2	9.63 kB	MIT	prod
commander	2.20.3	18.26 kB	MIT	prod
debug	4.3.4	12.94 kB	MIT	prod
finalhandler	1.2.0	6.55 kB	MIT	prod
graphile-utils	4.6.0	31.29 kB	MIT	prod	1 2 1
graphql	14.7.0	379.32 kB	MIT	prod peer
http-errors	1.8.1	6.03 kB	MIT	prod
iterall	1.3.0	14.89 kB	MIT	prod
json5	2.2.3	49.14 kB	MIT	prod
jsonwebtoken	8.5.1	21.01 kB	MIT	prod	3
parseurl	1.3.3	3.86 kB	MIT	prod
pg-connection-string	2.6.4	8.88 kB	MIT	prod
pg-sql2	4.5.0	9.41 kB	MIT	prod	1 2 1
pg	7.18.2	22.13 kB	MIT	prod peer	1 2 1
postgraphile-core	4.6.0	10.53 kB	MIT	prod	1 5 1
subscriptions-transport-ws	0.9.19	62.78 kB	MIT	prod	1
tslib	1.14.1	7.43 kB	0BSD	prod
ws	6.2.2	24.25 kB	MIT	prod