Hold on, we're currently generating a fresh version of this report

Generated on Mar 3, 2024 via pnpm

priam 1.1.0

A simple Cassandra driver. It wraps the helenus and cassandra-driver Cassandra drivers with additional error/retry handling, external .cql file support, and connection option resolution from an external source, query composition, among other improvements.

Package summary

17

issues

5

licenses

Package created

8 Apr 2014

Version published

18 Dec 2014

Maintainers

3

Total deps

24

Direct deps

9

License

MIT

Issues

17

6 critical severity issues

lodash@2.4.2

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.12 or later

via: lodash@2.4.2

bindings@1.0.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: helenus@0.6.10

helenus@0.6.10

Package has no specified license

Recommendation: Check the package code and files for license information

via: helenus@0.6.10

microtime@0.4.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: helenus@0.6.10

node-uuid@1.3.3

Package has no specified license

Recommendation: Check the package code and files for license information

via: helenus@0.6.10

node-uuid@1.4.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: cassandra-driver@1.0.3

7 high severity issues

node-uuid@1.4.1

Insecure Entropy Source - Math.random() in node-uuid

Recommendation: Upgrade to version 1.4.4 or later

via: cassandra-driver@1.0.3 & others

lodash@2.4.2

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.11 or later

via: lodash@2.4.2

lodash@2.4.2

Command Injection in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: lodash@2.4.2

cassandra-driver@1.0.3

Package uses an invalid SPDX license ("Apache License, Version 2.0")

Recommendation: Validate that the package complies with your license policy

via: cassandra-driver@1.0.3

node-uuid@1.3.3

Deprecated package

via: helenus@0.6.10

node-uuid@1.4.1

Deprecated package

via: cassandra-driver@1.0.3

uuid@2.0.3

Deprecated package

via: uuid@2.0.3

2 moderate severity issues

lodash@2.4.2

Regular Expression Denial of Service (ReDoS) in lodash

Recommendation: Upgrade to version 4.17.11 or later

via: lodash@2.4.2

lodash@2.4.2

Regular Expression Denial of Service (ReDoS) in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: lodash@2.4.2

2 low severity issues

lodash@2.4.2

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.5 or later

via: lodash@2.4.2

cassandra-driver@1.0.3

Package uses a license that is not OSI approved ("Apache License, Version 2.0")

Recommendation: Read and validate the license terms

via: cassandra-driver@1.0.3

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

15 Packages, Including:

async@0.9.2

core-util-is@1.0.3

isarray@0.0.1

isstream@0.1.2

lodash@2.4.2

priam@1.1.0

q@1.1.2

read-only-stream@1.1.1

readable-stream@1.0.34

readable-stream@1.1.14

readable-wrap@1.0.0

string_decoder@0.10.31

through2@0.6.5

uuid@2.0.3

xtend@4.0.2

N/A

N/A

5 Packages, Including:

bindings@1.0.0

helenus@0.6.10

microtime@0.4.0

node-uuid@1.3.3

node-uuid@1.4.1

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

2 Packages, Including:

helenus-thrift@0.7.4

long@5.2.3

Apache License, Version 2.0

Invalid

Not OSI Approved

1 Packages, Including:

cassandra-driver@1.0.3

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

1 Packages, Including:

inherits@2.0.4

Direct Dependencies

9

All Dependencies CSV

ⓘ This is a list of priam 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
async	0.9.2	20.46 kB	MIT	prod
cassandra-driver	1.0.3	47.38 kB	Apache License, Version 2.0	prod	1 3 1
helenus	0.6.10	76.24 kB	UNKNOWN	prod	4 2
isstream	0.1.2	3.67 kB	MIT	prod
lodash	2.4.2	192.11 kB	MIT	prod	1 2 2 1
q	1.1.2	24.2 kB	MIT	prod
read-only-stream	1.1.1	2.47 kB	MIT	prod
through2	0.6.5	4.28 kB	MIT	prod
uuid	2.0.3	11.88 kB	MIT	prod	1

Recent Versions