Generated on May 27, 2024 via pnpm

Npm

Home

pouchdb 7.2.0

PouchDB is a pocket-sized database

couchdb

pouchdb

Package summary

issues

licenses

Package created

25 Oct 2012

Version published

16 Feb 2020

Maintainers

Total deps

Direct deps

License

Apache-2.0

Issues

5 high severity issues

high

node-fetch@2.4.1

node-fetch forwards secure headers to untrusted sites

Recommendation: Upgrade to version 2.6.7 or later

via: node-fetch@2.4.1

readable-stream@0.0.4

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: level-write-stream@1.0.0

level@6.0.0

Package uses postinstall script: "opencollective-postinstall || exit 0"

via: level@6.0.0

leveldown@5.4.1

Package uses install script: "node-gyp-build"

via: level@6.0.0 & others

uuid@3.3.3

Deprecated package

via: uuid@3.3.3

Collapse

Expand

1 moderate severity issue

moderate

tough-cookie@2.5.0

tough-cookie Prototype Pollution vulnerability

Recommendation: Upgrade to version 4.1.3 or later

via: fetch-cookie@0.7.3

Collapse

Expand

4 low severity issues

low

node-fetch@2.4.1

The `size` option isn't honored after following a redirect in node-fetch

Recommendation: Upgrade to version 2.6.1 or later

via: node-fetch@2.4.1

argsarray@0.0.1

Package uses a license that is not OSI approved ("WTFPL")

Recommendation: Read and validate the license terms

via: argsarray@0.0.1

spark-md5@3.0.0

Package uses a license that is not OSI approved ("WTFPL")

Recommendation: Read and validate the license terms

via: spark-md5@3.0.0

readable-stream@0.0.4

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: level-write-stream@1.0.0

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

49 Packages, Including:

abort-controller@3.0.0

abstract-leveldown@6.0.3

abstract-leveldown@6.2.3

abstract-leveldown@6.3.0

base64-js@1.5.1

buffer-from@1.1.0

buffer@5.7.1

clone-buffer@1.0.0

core-util-is@1.0.3

deferred-leveldown@5.1.0

deferred-leveldown@5.3.0

double-ended-queue@2.1.0-0

encoding-down@6.3.0

end-stream@0.1.0

errno@0.1.8

event-target-shim@5.0.1

immediate@3.0.6

immediate@3.3.0

isarray@0.0.1

level-codec@9.0.1

level-concat-iterator@2.0.1

level-errors@2.0.1

level-iterator-stream@4.0.2

level-js@5.0.2

level-packager@5.1.1

level-supports@1.0.1

level-write-stream@1.0.0

level@6.0.0

leveldown@5.4.1

levelup@4.1.0

levelup@4.4.0

ltgt@2.2.1

napi-macros@2.0.0

node-fetch@2.4.1

node-gyp-build@4.1.1

opencollective-postinstall@2.0.3

prr@1.0.1

psl@1.9.0

punycode@2.3.1

readable-stream@1.0.33

readable-stream@3.6.2

safe-buffer@5.2.1

string_decoder@0.10.31

string_decoder@1.3.0

through2@3.0.1

util-deprecate@1.0.2

uuid@3.3.3

write-stream@0.4.3

xtend@4.0.2

Do What The F*ck You Want To Public License

Permissive

Not OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

sublicense

distribute

modify

Cannot

Must

rename

2 Packages, Including:

argsarray@0.0.1

spark-md5@3.0.0

The Unlicense

Public Domain

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

private-use

modify

Cannot

include-copyright

hold-liable

Must

2 Packages, Including:

es6-denodeify@0.1.5

fetch-cookie@0.7.3

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

2 Packages, Including:

ieee754@1.2.1

tough-cookie@2.5.0

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

2 Packages, Including:

pouchdb@7.2.0

vuvuzela@1.0.3

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

1 Packages, Including:

inherits@2.0.4

BSD

Invalid

Not OSI Approved

1 Packages, Including:

readable-stream@0.0.4

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of pouchdb 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
abort-controller	3.0.0	17.14 kB	MIT	prod
argsarray	0.0.1	2.57 kB	WTFPL	prod	1
buffer-from	1.1.0	1.59 kB	MIT	prod
clone-buffer	1.0.0	2.11 kB	MIT	prod
double-ended-queue	2.1.0-0	6.97 kB	MIT	prod
fetch-cookie	0.7.3	3.51 kB	Unlicense	prod	1
immediate	3.0.6	4.79 kB	MIT	prod
inherits	2.0.4	1.98 kB	ISC	prod
level-codec	9.0.1	7.87 kB	MIT	prod
level-write-stream	1.0.0	1.73 kB	MIT	prod	1 1
level	6.0.0	13.17 kB	MIT	prod	2
leveldown	5.4.1	1.63 MB	MIT	prod	1
levelup	4.1.0	24.27 kB	MIT	prod
ltgt	2.2.1	4.97 kB	MIT	prod
node-fetch	2.4.1	40.76 kB	MIT	prod	1 1
readable-stream	1.0.33	15.05 kB	MIT	prod
spark-md5	3.0.0	9.44 kB	WTFPL	prod	1
through2	3.0.1	5.37 kB	MIT	prod
uuid	3.3.3	11.83 kB	MIT	prod	1
vuvuzela	1.0.3	8.03 kB	Apache-2.0	prod