Hold on, we're currently generating a fresh version of this report

Generated on May 24, 2024 via pnpm

pouchdb-replication-stream 1.2.5

PouchDB/CouchDB replication as a stream

Package summary

12

issues

6

licenses

Package created

12 Oct 2014

Version published

11 Oct 2015

Maintainers

1

Total deps

28

Direct deps

7

License

Apache-2.0

Issues

12

1 critical severity issue

lodash@3.10.1

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.12 or later

via: lodash@3.10.1

5 high severity issues

lodash@3.10.1

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.11 or later

via: lodash@3.10.1

lodash@3.10.1

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.19 or later

via: lodash@3.10.1

lodash@3.10.1

Command Injection in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: lodash@3.10.1

esprima-fb@15001.1001.0-dev-harmony-fb

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: lie@2.9.1

ldjson-stream@1.2.1

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: ldjson-stream@1.2.1

3 moderate severity issues

lodash@3.10.1

Regular Expression Denial of Service (ReDoS) in lodash

Recommendation: Upgrade to version 4.17.11 or later

via: lodash@3.10.1

lodash@3.10.1

Regular Expression Denial of Service (ReDoS) in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: lodash@3.10.1

lodash@3.10.1

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.5 or later

via: lodash@3.10.1

3 low severity issues

esprima-fb@15001.1001.0-dev-harmony-fb

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: lie@2.9.1

ldjson-stream@1.2.1

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: ldjson-stream@1.2.1

argsarray@0.0.1

Package uses a license that is not OSI approved ("WTFPL")

Recommendation: Read and validate the license terms

via: argsarray@0.0.1

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

21 Packages, Including:

acorn@1.2.2

ast-types@0.8.15

core-util-is@1.0.3

esmangle-evaluator@1.0.1

falafel@1.2.0

foreach@2.0.6

immediate@3.0.6

inline-process-browser@1.0.0

isarray@0.0.1

lie@2.9.1

lodash@3.10.1

object-keys@1.1.1

pouch-stream@0.4.1

private@0.1.8

readable-stream@1.0.34

readable-stream@1.1.14

recast@0.10.43

string_decoder@0.10.31

through2@0.6.5

unreachable-branch-transform@0.2.3

xtend@4.0.2

BSD

Invalid

Not OSI Approved

2 Packages, Including:

esprima-fb@15001.1001.0-dev-harmony-fb

ldjson-stream@1.2.1

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

2 Packages, Including:

inherits@2.0.4

split2@0.2.1

Do What The F*ck You Want To Public License

Permissive

Not OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

sublicense

distribute

modify

Cannot

Must

rename

1 Packages, Including:

argsarray@0.0.1

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

1 Packages, Including:

pouchdb-replication-stream@1.2.5

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

1 Packages, Including:

source-map@0.5.7

Direct Dependencies

7

All Dependencies CSV

ⓘ This is a list of pouchdb-replication-stream 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
argsarray	0.0.1	2.57 kB	WTFPL	prod	1
inherits	2.0.4	1.98 kB	ISC	prod
ldjson-stream	1.2.1	1.3 kB	BSD	prod	1 1
lie	2.9.1	84.21 kB	MIT	prod	1 1
lodash	3.10.1	169.48 kB	MIT	prod	1 3 3
pouch-stream	0.4.1	3.82 kB	MIT	prod
through2	0.6.5	4.28 kB	MIT	prod

All Versions