Hold on, we're currently generating a fresh version of this report

Generated on May 5, 2024 via pnpm

rabbus 0.8.2

A micro-servicebus for RabbitMQ

Package summary

17

issues

3

licenses

Package created

20 Nov 2014

Version published

15 Sep 2016

Maintainers

1

Total deps

15

Direct deps

5

License

MIT

Issues

17

3 critical severity issues

underscore@1.8.3

Arbitrary Code Execution in underscore

Recommendation: Upgrade to version 1.12.1 or later

via: underscore@1.8.3

lodash@3.10.1

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.12 or later

via: whistlepunk@0.3.3

ms@0.7.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: whistlepunk@0.3.3

8 high severity issues

moment@2.10.2

Regular Expression Denial of Service in moment

Recommendation: Upgrade to version 2.19.3 or later

via: whistlepunk@0.3.3

debug@2.2.0

debug Inefficient Regular Expression Complexity vulnerability

Recommendation: Upgrade to version 2.6.9 or later

via: whistlepunk@0.3.3

lodash@3.10.1

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.11 or later

via: whistlepunk@0.3.3

moment@2.10.2

Path Traversal: 'dir/../../filename' in moment.locale

Recommendation: Upgrade to version 2.29.2 or later

via: whistlepunk@0.3.3

lodash@3.10.1

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.19 or later

via: whistlepunk@0.3.3

lodash@3.10.1

Command Injection in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: whistlepunk@0.3.3

machina@1.1.2

Package uses an invalid SPDX license ("(MIT OR GPL)")

Recommendation: Validate that the package complies with your license policy

via: whistlepunk@0.3.3

uuid@2.0.2

Deprecated package

via: uuid@2.0.2

5 moderate severity issues

lodash@3.10.1

Regular Expression Denial of Service (ReDoS) in lodash

Recommendation: Upgrade to version 4.17.11 or later

via: whistlepunk@0.3.3

moment@2.10.2

Regular Expression Denial of Service in moment

Recommendation: Upgrade to version 2.11.2 or later

via: whistlepunk@0.3.3

ms@0.7.1

Vercel ms Inefficient Regular Expression Complexity vulnerability

Recommendation: Upgrade to version 2.0.0 or later

via: whistlepunk@0.3.3

lodash@3.10.1

Regular Expression Denial of Service (ReDoS) in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: whistlepunk@0.3.3

lodash@3.10.1

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.5 or later

via: whistlepunk@0.3.3

1 low severity issue

debug@2.2.0

Regular Expression Denial of Service in debug

Recommendation: Upgrade to version 2.6.9 or later

via: whistlepunk@0.3.3

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

13 Packages, Including:

colors@1.0.3

debug@2.2.0

generic-middleware@2.1.0

lodash@3.10.1

lodash@4.17.21

moment@2.10.2

postal@1.0.11

postal@2.0.4

rabbus@0.8.2

underscore@1.8.3

uuid@2.0.2

when@3.7.8

whistlepunk@0.3.3

(MIT OR GPL)

Invalid

1 Packages, Including:

machina@1.1.2

N/A

N/A

1 Packages, Including:

ms@0.7.1

Direct Dependencies

5

All Dependencies CSV

ⓘ This is a list of rabbus 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
generic-middleware	2.1.0	7.26 kB	MIT	prod
postal	2.0.4	19.39 kB	MIT	prod
underscore	1.8.3	33.37 kB	MIT	prod	1
uuid	2.0.2	11.86 kB	MIT	prod	1
whistlepunk	0.3.3	7.51 kB	MIT	prod	2 7 5 1

All Versions