Home
Docs
GitHub
Pricing
Blog
Log In

Run Sandworm Audit for your App

Get started
Hold on, we're currently generating a fresh version of this report
Generated on May 9, 2024 via pnpm

pouchdb-server 1.2.0

A standalone REST interface server for PouchDB.
Package summary
Share
105
issues
15
critical severity
vulnerability
4
license
11
53
high severity
vulnerability
13
license
21
meta
19
12
moderate severity
vulnerability
11
license
1
25
low severity
vulnerability
1
license
24
17
licenses
305
MIT
67
Apache-2.0
47
ISC
58
other licenses
BSD-3-Clause
15
BSD
12
N/A
11
WTFPL
4
+ 10 more
Package created
6 Mar 2013
Version published
16 Jun 2016
Maintainers
8
Total deps
477
Direct deps
18
License
UNKNOWN

Issues

105

15 critical severity issues

critical
Recommendation: None
via: http-pouchdb@1.1.3 & others
Recommendation: Upgrade to version 6.0.5 or later
via: http-pouchdb@1.1.3
Recommendation: Upgrade to version 1.12.1 or later
via: nomnom@1.8.1
Recommendation: Upgrade to version 0.2.4 or later
via: express-pouchdb@1.0.7
Recommendation: Check the package code and files for license information
via: express-pouchdb@1.0.7
Recommendation: Check the package code and files for license information
via: express-pouchdb@1.0.7
Recommendation: Check the package code and files for license information
via: express-pouchdb@1.0.7
Recommendation: Check the package code and files for license information
via: couchdb-harness@0.1.6
Recommendation: Check the package code and files for license information
via: express-pouchdb@1.0.7
Recommendation: Check the package code and files for license information
via: express-pouchdb@1.0.7 & others
Recommendation: Check the package code and files for license information
via: nomnom@1.8.1
Recommendation: Check the package code and files for license information
via: pouchdb-server@1.2.0
Recommendation: Check the package code and files for license information
via: express-pouchdb@1.0.7
Recommendation: Check the package code and files for license information
via: http-pouchdb@1.1.3 & others
Recommendation: Check the package code and files for license information
via: tail@0.4.0
Collapse
Expand

53 high severity issues

high
Recommendation: Upgrade to version 6.2.3 or later
via: express-pouchdb@1.0.7
Recommendation: Upgrade to version 3.2.2 or later
via: http-pouchdb@1.1.3 & others
Recommendation: Upgrade to version 2.8.2 or later
via: http-pouchdb@1.1.3 & others
Recommendation: Upgrade to version 0.5.2 or later
via: serve-favicon@2.0.1
Recommendation: Upgrade to version 3.0.2 or later
via: couchdb-harness@0.1.6
Recommendation: Upgrade to version 4.2.1 or later
via: http-pouchdb@1.1.3 & others
Recommendation: Upgrade to version 2.6.9 or later
via: express-pouchdb@1.0.7 & others
Recommendation: Upgrade to version 9.0.1 or later
via: http-pouchdb@1.1.3 & others
Recommendation: Upgrade to version 2.3.3 or later
via: http-pouchdb@1.1.3 & others
Recommendation: Upgrade to version 4.4.18 or later
via: http-pouchdb@1.1.3 & others
Recommendation: None
via: http-pouchdb@1.1.3 & others
Recommendation: Upgrade to version 6.2.4 or later
via: express-pouchdb@1.0.7 & others
Recommendation: Upgrade to version 3.0.5 or later
via: couchdb-harness@0.1.6
Recommendation: Validate that the package complies with your license policy
via: couchdb-log-parse@0.0.3
Recommendation: Validate that the package complies with your license policy
via: http-pouchdb@1.1.3 & others
Recommendation: Validate that the package complies with your license policy
via: express-pouchdb@1.0.7 & others
Recommendation: Validate that the package complies with your license policy
via: express-pouchdb@1.0.7 & others
Recommendation: Validate that the package complies with your license policy
via: express-pouchdb@1.0.7
Recommendation: Validate that the package complies with your license policy
via: couchdb-harness@0.1.6
Recommendation: Validate that the package complies with your license policy
via: couchdb-harness@0.1.6
Recommendation: Validate that the package complies with your license policy
via: http-pouchdb@1.1.3 & others
Recommendation: Validate that the package complies with your license policy
via: http-pouchdb@1.1.3 & others
Recommendation: Validate that the package complies with your license policy
via: express-pouchdb@1.0.7
Recommendation: Validate that the package complies with your license policy
via: express-pouchdb@1.0.7
Recommendation: Validate that the package complies with your license policy
via: http-pouchdb@1.1.3 & others
Recommendation: Validate that the package complies with your license policy
via: http-pouchdb@1.1.3 & others
Recommendation: Validate that the package complies with your license policy
via: http-pouchdb@1.1.3
Recommendation: Validate that the package complies with your license policy
via: express-pouchdb@1.0.7 & others
Recommendation: Validate that the package complies with your license policy
via: couchdb-harness@0.1.6
Recommendation: Validate that the package complies with your license policy
via: couchdb-harness@0.1.6 & others
Recommendation: Validate that the package complies with your license policy
via: express-pouchdb@1.0.7 & others
Recommendation: Validate that the package complies with your license policy
via: express-pouchdb@1.0.7
Recommendation: Validate that the package complies with your license policy
via: couchdb-harness@0.1.6
Recommendation: Validate that the license expression complies with your license policy
via: http-pouchdb@1.1.3 & others
via: http-pouchdb@1.1.3 & others
via: http-pouchdb@1.1.3 & others
via: couchdb-harness@0.1.6
via: http-pouchdb@1.1.3 & others
via: http-pouchdb@1.1.3 & others
via: http-pouchdb@1.1.3 & others
via: http-pouchdb@1.1.3 & others
via: http-pouchdb@1.1.3 & others
via: couchdb-harness@0.1.6
via: express-pouchdb@1.0.7
via: http-pouchdb@1.1.3 & others
via: nomnom@1.8.1
via: http-pouchdb@1.1.3 & others
via: http-pouchdb@1.1.3 & others
via: http-pouchdb@1.1.3 & others
via: http-pouchdb@1.1.3 & others
via: http-pouchdb@1.1.3 & others
via: http-pouchdb@1.1.3 & others
via: http-pouchdb@1.1.3 & others
Collapse
Expand

12 moderate severity issues

moderate
Recommendation: Upgrade to version 0.6.0 or later
via: http-pouchdb@1.1.3 & others
Recommendation: Upgrade to version 2.0.2 or later
via: express-pouchdb@1.0.7
Recommendation: Upgrade to version 1.2.3 or later
via: http-pouchdb@1.1.3 & others
Recommendation: Upgrade to version 2.3.0 or later
via: http-pouchdb@1.1.3 & others
Recommendation: Upgrade to version 3.0.0 or later
via: express-pouchdb@1.0.7
Recommendation: Upgrade to version 2.0.0 or later
via: express-pouchdb@1.0.7 & others
Recommendation: Upgrade to version 0.2.1 or later
via: express-pouchdb@1.0.7
Recommendation: Upgrade to version 5.7.2 or later
via: http-pouchdb@1.1.3 & others
Recommendation: Upgrade to version 4.1.3 or later
via: http-pouchdb@1.1.3 & others
Recommendation: None
via: http-pouchdb@1.1.3 & others
Recommendation: Upgrade to version 6.2.1 or later
via: http-pouchdb@1.1.3 & others
Recommendation: Validate that the package complies with your license policy
via: http-pouchdb@1.1.3 & others
Collapse
Expand

25 low severity issues

low
Recommendation: Upgrade to version 2.6.9 or later
via: express-pouchdb@1.0.7 & others
Recommendation: Read and validate the license terms
via: couchdb-log-parse@0.0.3
Recommendation: Read and validate the license terms
via: http-pouchdb@1.1.3 & others
Recommendation: Read and validate the license terms
via: express-pouchdb@1.0.7 & others
Recommendation: Read and validate the license terms
via: express-pouchdb@1.0.7 & others
Recommendation: Read and validate the license terms
via: express-pouchdb@1.0.7
Recommendation: Read and validate the license terms
via: couchdb-harness@0.1.6
Recommendation: Read and validate the license terms
via: couchdb-harness@0.1.6
Recommendation: Read and validate the license terms
via: http-pouchdb@1.1.3 & others
Recommendation: Read and validate the license terms
via: http-pouchdb@1.1.3 & others
Recommendation: Read and validate the license terms
via: express-pouchdb@1.0.7
Recommendation: Read and validate the license terms
via: express-pouchdb@1.0.7
Recommendation: Read and validate the license terms
via: http-pouchdb@1.1.3 & others
Recommendation: Read and validate the license terms
via: express-pouchdb@1.0.7 & others
Recommendation: Read and validate the license terms
via: http-pouchdb@1.1.3 & others
Recommendation: Read and validate the license terms
via: express-pouchdb@1.0.7
Recommendation: Read and validate the license terms
via: http-pouchdb@1.1.3 & others
Recommendation: Read and validate the license terms
via: http-pouchdb@1.1.3 & others
Recommendation: Read and validate the license terms
via: http-pouchdb@1.1.3
Recommendation: Read and validate the license terms
via: express-pouchdb@1.0.7 & others
Recommendation: Read and validate the license terms
via: couchdb-harness@0.1.6
Recommendation: Read and validate the license terms
via: couchdb-harness@0.1.6 & others
Recommendation: Read and validate the license terms
via: express-pouchdb@1.0.7 & others
Recommendation: Read and validate the license terms
via: express-pouchdb@1.0.7
Recommendation: Read and validate the license terms
via: couchdb-harness@0.1.6
Collapse
Expand

Licenses

MIT License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
Cannot
hold-liable
Must
include-copyright
include-license
305 Packages, Including:
abstract-leveldown@0.12.3
abstract-leveldown@2.4.1
abstract-leveldown@2.6.3
abstract-leveldown@2.7.2
accepts@1.3.8
acorn@1.2.2
acorn@5.7.4
after@0.8.2
ajv@6.12.6
ansi-regex@2.1.1
ansi-styles@1.0.0
ansi-styles@2.2.1
ansi@0.3.1
array-flatten@1.1.1
array-index@1.0.0
asn1@0.2.6
assert-plus@0.2.0
assert-plus@1.0.0
ast-types@0.8.15
ast-types@0.9.6
async@0.9.2
async@1.5.2
async@2.6.4
asynckit@0.4.0
aws4@1.12.0
balanced-match@1.0.2
base62@1.2.8
base64url@1.0.6
base64url@3.0.1
basic-auth@1.0.4
bindings@1.2.1
bl@1.1.2
bl@1.2.3
bl@3.0.1
bluebird@1.2.4
bluebird@2.11.0
bluebird@3.4.1
body-parser@1.15.2
body-parser@1.20.2
brace-expansion@1.1.11
buffer-alloc-unsafe@1.1.0
buffer-alloc@1.2.0
buffer-fill@1.0.0
buffer-from@0.1.2
bytes@2.3.0
bytes@2.4.0
bytes@3.1.2
call-bind@1.0.7
camelcase-keys@1.0.0
camelcase@1.2.1

Apache License 2.0

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
use-patent-claims
place-warranty
Cannot
hold-liable
use-trademark
Must
include-copyright
include-license
state-changes
include-notice
67 Packages, Including:
aws-sign2@0.6.0
aws-sign2@0.7.0
caseless@0.11.0
caseless@0.12.0
couchdb-calculate-session-id@1.1.3
couchdb-eval@1.0.6
couchdb-objects@1.0.7
couchdb-render@1.0.1
couchdb-resp-completer@1.0.3
forever-agent@0.6.1
header-case-normalizer@1.0.3
http-pouchdb@1.1.3
jstransform@3.0.0
oauth-sign@0.8.2
oauth-sign@0.9.0
pouchdb-adapter-http@5.4.5
pouchdb-adapter-leveldb-core@5.4.5
pouchdb-adapter-leveldb@5.4.5
pouchdb-adapter-node-websql@5.4.5
pouchdb-adapter-utils@5.4.5
pouchdb-adapter-websql-core@5.4.5
pouchdb-adapter-websql@5.4.5
pouchdb-ajax@5.4.5
pouchdb-all-dbs@1.0.2
pouchdb-auth@2.1.1
pouchdb-binary-utils@5.4.5
pouchdb-bulkdocs-wrapper@1.0.2
pouchdb-changeslike-wrapper@1.0.1
pouchdb-checkpointer@5.4.5
pouchdb-core@5.4.5
pouchdb-errors@5.4.5
pouchdb-find@0.10.2
pouchdb-generate-replication-id@5.4.5
pouchdb-json@5.4.5
pouchdb-list@1.1.0
pouchdb-mapreduce-utils@5.4.5
pouchdb-mapreduce@5.4.5
pouchdb-md5@5.4.5
pouchdb-merge@5.4.5
pouchdb-node@5.4.5
pouchdb-plugin-error@1.0.1
pouchdb-promise@5.4.0
pouchdb-promise@5.4.3
pouchdb-promise@5.4.5
pouchdb-replication@5.4.5
pouchdb-replicator@2.1.3
pouchdb-req-http-query@1.0.4
pouchdb-rewrite@1.0.7
pouchdb-route@1.0.3
pouchdb-security@1.2.6

ISC License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
Cannot
hold-liable
Must
include-copyright
include-license
47 Packages, Including:
abbrev@1.1.1
aproba@1.2.0
are-we-there-yet@1.1.7
block-stream@0.0.9
chownr@1.1.4
d@1.0.2
es5-ext@0.10.64
es6-symbol@3.1.4
esniff@2.0.1
ext@1.7.0
fs.realpath@1.0.0
fstream@1.0.12
gauge@1.2.7
glob@5.0.15
glob@7.2.3
graceful-fs@4.2.11
har-schema@2.0.0
har-validator@2.0.6
has-unicode@2.0.1
inflight@1.0.6
inherits@2.0.1
inherits@2.0.3
inherits@2.0.4
ini@1.3.8
isexe@2.0.0
js-extend@0.0.1
js-extend@1.0.1
json-stringify-safe@5.0.1
killable@1.0.1
lru-cache@2.7.3
minimatch@3.1.2
next-tick@1.1.0
nopt@3.0.6
npmlog@2.0.4
once@1.4.0
osenv@0.1.5
rimraf@2.7.1
semver@5.1.1
semver@5.3.0
semver@5.7.2
setprototypeof@1.0.2
setprototypeof@1.2.0
sigmund@1.0.1
tar@2.2.2
type@2.7.2
which@1.3.1
wrappy@1.0.2

BSD 3-Clause "New" or "Revised" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
use-trademark
hold-liable
Must
include-copyright
include-license
15 Packages, Including:
bcrypt-pbkdf@1.0.2
boom@2.10.1
cryptiles@2.0.5
hawk@3.1.3
hoek@2.16.3
jstransform@11.0.3
qs@6.1.2
qs@6.11.0
qs@6.2.0
qs@6.5.3
source-map@0.4.4
source-map@0.5.7
sqlite3@3.1.13
tough-cookie@2.2.2
tough-cookie@2.5.0

BSD

Invalid
Not OSI Approved
12 Packages, Including:
couchdb-log-parse@0.0.3
duplexer2@0.0.2
esprima-fb@15001.1.0-dev-harmony-fb
esprima-fb@15001.1001.0-dev-harmony-fb
esprima-fb@3001.1.0-dev-harmony-fb
glob@3.1.21
graceful-fs@1.2.3
readable-stream@0.0.4
sntp@1.0.9
source-map@0.1.31
stream-counter@0.2.0
url-template@2.0.8

N/A

N/A
11 Packages, Including:
base62@0.1.1
express-pouchdb@1.0.7
extend@1.3.0
inherits@1.0.2
is-empty@0.0.1
ms@0.7.1
nomnom@1.8.1
pouchdb-server@1.2.0
random-uuid-v4@0.0.4
simple-mime@0.1.0
tail@0.4.0

Do What The F*ck You Want To Public License

Permissive
Not OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
sublicense
distribute
modify
Cannot
Must
rename
4 Packages, Including:
argsarray@0.0.1
expand-template@1.1.1
spark-md5@0.0.5
spark-md5@2.0.2

BSD 2-Clause "Simplified" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
hold-liable
Must
include-copyright
include-license
3 Packages, Including:
esprima@2.7.3
esprima@3.1.3
uri-js@4.4.1

Apache 2

Invalid
Not OSI Approved
3 Packages, Including:
pouchdb-collections@1.0.1
tiny-queue@0.2.0
tiny-queue@0.2.1

MIT/X11

Invalid
Not OSI Approved
2 Packages, Including:
optimist@0.3.7
wordwrap@0.0.2

Apache

Invalid
Not OSI Approved
2 Packages, Including:
pouchdb-collate@1.2.0
pouchdb-promise@0.0.0

BSD-3-Clause OR MIT

Permissive
1 Packages, Including:
amdefine@1.0.1

Apache License

Invalid
Not OSI Approved
1 Packages, Including:
couchdb-harness@0.1.6

(AFL-2.1 OR BSD-3-Clause)

Permissive
1 Packages, Including:
json-schema@0.4.0

Mozilla Public License 2.0

Weakly Protective
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
place-warranty
use-patent-claims
Cannot
use-trademark
hold-liable
Must
include-copyright
include-license
disclose-source
include-original
1 Packages, Including:
node-ninja@1.0.2

(BSD-2-Clause OR MIT OR Apache-2.0)

Expression
1 Packages, Including:
rc@1.2.8

The Unlicense

Public Domain
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
private-use
modify
Cannot
include-copyright
hold-liable
Must
1 Packages, Including:
tweetnacl@0.14.5
Disclaimer

This deed highlights only some of the key features and terms of the actual license. It is not a license and has no legal value. You should carefully review all of the terms and conditions of the actual license before using the licensed material.

Sandworm is not a law firm and does not provide legal services. Distributing, displaying, or linking to this deed or the license that it summarizes does not create a lawyer-client or any other relationship.

Direct Dependencies

18
All Dependencies CSV
β“˜ This is a list of pouchdb-server 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.
NameVersionSizeLicenseTypeVulnerabilities
bluebird2.11.099.26 kBMIT
prod
colors1.4.011 kBMIT
prod
corser2.0.15.73 kBMIT
prod
couchdb-harness0.1.6155.92 kBApache License
prod
1
9
5
couchdb-log-parse0.0.37.26 kBBSD
prod
1
1
express-pouchdb1.0.7892.56 kBUNKNOWN
prod
7
12
4
11
express4.19.2209.73 kBMIT
prod
http-pouchdb1.1.315.9 kBApache-2.0
prod
4
35
9
14
killable1.0.11.62 kBISC
prod
memdown1.4.14.97 kBMIT
prod
mkdirp0.5.62.95 kBMIT
prod optional
nomnom1.8.110.17 kBUNKNOWN
prod
2
1
pouchdb-adapter-node-websql5.4.55.09 kBApache-2.0
prod
2
6
1
7
pouchdb-adapter-websql5.4.56.62 kBApache-2.0
prod
2
4
1
6
pouchdb-node5.4.55.03 kBApache-2.0
prod
3
32
9
12
serve-favicon2.0.13.18 kBMIT
prod
1
tail0.4.02.23 kBUNKNOWN
prod
1
wordwrap0.0.213.45 kBMIT/X11
prod
1
1

Visualizations