Generated on Apr 28, 2024 via pnpm

prebuild 12.0.0

A command line tool for easily making prebuilt binaries for multiple versions of node, electron or node-webkit on a specific platform

prebuilt

binaries

native

Package summary

issues

licenses

Package created

25 Jul 2015

Version published

6 Sep 2023

Maintainers

Total deps

262

Direct deps

License

MIT

Issues

1 critical severity issue

critical

simple-mime@0.1.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: ghreleases@3.0.2

Collapse

Expand

11 high severity issues

high

tar@2.2.2

Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization

Recommendation: Upgrade to version 3.2.2 or later

via: node-ninja@1.0.2 & others

tar@2.2.2

Arbitrary File Creation/Overwrite on Windows via insufficient relative path sanitization

Recommendation: Upgrade to version 4.4.18 or later

via: node-ninja@1.0.2 & others

duplexer2@0.0.2

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: ghreleases@3.0.2

url-template@2.0.8

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: ghreleases@3.0.2

rc@1.2.8

Package uses a custom license expression: `(BSD-2-Clause OR MIT OR Apache-2.0)`

Recommendation: Validate that the license expression complies with your license policy

via: cmake-js@7.3.0 & others

@npmcli/move-file@2.0.1

Deprecated package

via: node-gyp@9.4.1

es5-ext@0.10.64

Package uses postinstall script: " node -e "try{require('./_postinstall')}catch(e){}" || exit 0"

via: node-ninja@1.0.2

har-validator@5.1.5

Deprecated package

via: node-ninja@1.0.2 & others

request@2.88.2

Deprecated package

via: node-ninja@1.0.2 & others

tar@2.2.2

Deprecated package

via: node-ninja@1.0.2 & others

uuid@3.4.0

Deprecated package

via: node-ninja@1.0.2 & others

Collapse

Expand

7 moderate severity issues

moderate

semver@5.3.0

semver vulnerable to Regular Expression Denial of Service

Recommendation: Upgrade to version 5.7.2 or later

via: nw-gyp@3.6.6

tough-cookie@2.5.0

tough-cookie Prototype Pollution vulnerability

Recommendation: Upgrade to version 4.1.3 or later

via: node-ninja@1.0.2 & others

request@2.88.2

Server-Side Request Forgery in Request

Recommendation: None

via: node-ninja@1.0.2 & others

tar@2.2.2

Denial of service while parsing a tar file due to lack of folders count validation

Recommendation: Upgrade to version 6.2.1 or later

via: node-ninja@1.0.2 & others

node-ninja@1.0.2

Package uses a problematic Weakly Protective license ("MPL-2.0")

Recommendation: Validate that the package complies with your license policy

via: node-ninja@1.0.2

minipass-collect@1.0.2

Package has no specified source code repository

via: node-gyp@9.4.1

minipass-pipeline@1.2.4

Package has no specified source code repository

via: node-gyp@9.4.1

Collapse

Expand

2 low severity issues

low

duplexer2@0.0.2

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: ghreleases@3.0.2

url-template@2.0.8

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: ghreleases@3.0.2

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

160 Packages, Including:

@gar/promisify@1.1.3

@npmcli/move-file@2.0.1

@tootallnate/once@2.0.0

after@0.8.2

agent-base@6.0.2

agentkeepalive@4.5.0

aggregate-error@3.1.0

ajv@6.12.6

ansi-regex@2.1.1

ansi-regex@5.0.1

ansi-styles@4.3.0

ansi@0.3.1

array-index@1.0.0

asn1@0.2.6

assert-plus@1.0.0

asynckit@0.4.0

aws4@1.12.0

axios@1.6.8

balanced-match@1.0.2

bl@3.0.1

brace-expansion@1.1.11

brace-expansion@2.0.1

buffer-from@0.1.2

clean-stack@2.2.0

cmake-js@7.3.0

code-point-at@1.1.0

color-convert@2.0.1

color-name@1.1.4

combined-stream@1.0.8

commander@2.20.3

concat-map@0.0.1

core-util-is@1.0.2

core-util-is@1.0.3

dashdash@1.14.1

debug@2.6.9

debug@4.3.4

deep-extend@0.6.0

delayed-stream@1.0.0

delegates@1.0.0

each-series-async@1.0.1

ecc-jsbn@0.1.2

emoji-regex@8.0.0

encoding@0.1.13

env-paths@2.2.1

err-code@2.0.3

es6-iterator@2.0.3

escalade@3.1.2

event-emitter@0.3.5

execspawn@1.0.1

extend@3.0.2

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

79 Packages, Including:

@npmcli/fs@2.1.2

abbrev@1.1.1

aproba@1.2.0

aproba@2.0.0

are-we-there-yet@1.1.7

are-we-there-yet@3.0.1

are-we-there-yet@4.0.2

block-stream@0.0.9

cacache@16.1.3

chownr@2.0.0

cliui@8.0.1

color-support@1.1.3

console-control-strings@1.1.0

d@1.0.2

es5-ext@0.10.64

es6-symbol@3.1.4

esniff@2.0.1

ext@1.7.0

fs-minipass@2.1.0

fs.realpath@1.0.0

fstream@1.0.12

gauge@1.2.7

gauge@2.7.4

gauge@4.0.4

gauge@5.0.1

get-caller-file@2.0.5

glob@7.2.3

glob@8.1.0

graceful-fs@4.2.11

har-schema@2.0.0

has-unicode@2.0.1

infer-owner@1.0.4

inflight@1.0.6

inherits@2.0.4

ini@1.3.8

isexe@2.0.0

json-stringify-safe@5.0.1

lru-cache@6.0.0

lru-cache@7.18.3

make-fetch-happen@10.2.1

minimatch@3.1.2

minimatch@5.1.6

minipass-collect@1.0.2

minipass-flush@1.0.5

minipass-pipeline@1.2.4

minipass-sized@1.0.3

minipass@3.3.6

minipass@5.0.0

next-tick@1.1.0

nopt@3.0.6

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

10 Packages, Including:

aws-sign2@0.7.0

b4a@1.6.6

bare-events@2.2.2

caseless@0.12.0

detect-libc@2.0.3

exponential-backoff@3.1.1

forever-agent@0.6.1

oauth-sign@0.9.0

request@2.88.2

tunnel-agent@0.6.0

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

4 Packages, Including:

bcrypt-pbkdf@1.0.2

qs@6.5.3

sprintf-js@1.1.3

tough-cookie@2.5.0

BSD

Invalid

Not OSI Approved

2 Packages, Including:

duplexer2@0.0.2

url-template@2.0.8

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

2 Packages, Including:

http-cache-semantics@4.1.1

uri-js@4.4.1

(AFL-2.1 OR BSD-3-Clause)

Permissive

1 Packages, Including:

json-schema@0.4.0

Mozilla Public License 2.0

Weakly Protective

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

place-warranty

use-patent-claims

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

disclose-source

include-original

1 Packages, Including:

node-ninja@1.0.2

(BSD-2-Clause OR MIT OR Apache-2.0)

Expression

1 Packages, Including:

rc@1.2.8

N/A

1 Packages, Including:

simple-mime@0.1.0

The Unlicense

Public Domain

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

private-use

modify

Cannot

include-copyright

hold-liable

Must

1 Packages, Including:

tweetnacl@0.14.5

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of prebuild 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
cmake-js	7.3.0	28.72 kB	MIT	prod	1
detect-libc	2.0.3	23.07 kB	Apache-2.0	prod
each-series-async	1.0.1	2.67 kB	MIT	prod
execspawn	1.0.1	1.92 kB	MIT	prod
ghreleases	3.0.2	28.3 kB	MIT	prod	1 2 2
github-from-package	0.0.0	2.07 kB	MIT	prod
glob	7.2.3	15.08 kB	ISC	prod
minimist	1.2.8	15.16 kB	MIT	prod
napi-build-utils	1.0.2	4.47 kB	MIT	prod
node-abi	3.62.0	15.34 kB	MIT	prod
node-gyp	9.4.1	451.5 kB	MIT	prod	1 2
node-ninja	1.0.2	393.75 kB	MPL-2.0	prod	7 4
noop-logger	0.1.1	1.29 kB	MIT	prod
npm-which	3.0.1	4.62 kB	MIT	prod
npmlog	7.0.1	5.94 kB	ISC	prod
nw-gyp	3.6.6	43.59 MB	MIT	prod	6 4
rc	1.2.8	6.98 kB	(BSD-2-Clause OR MIT OR Apache-2.0)	prod	1
run-waterfall	1.1.7	2.64 kB	MIT	prod
tar-stream	3.1.7	9.54 kB	MIT	prod