Hold on, we're currently generating a fresh version of this report

Generated on Feb 27, 2024 via pnpm

react-color-picker 2.0.1

React Color Picker

react-component

Package summary

20

issues

9

licenses

Package created

15 Oct 2014

Version published

5 Nov 2014

Maintainers

1

Total deps

121

Direct deps

7

License

MIT

Issues

20

3 critical severity issues

loader-utils@0.2.17

Prototype pollution in webpack loader-utils

Recommendation: Upgrade to version 1.4.1 or later

via: jsx-loader@0.12.2

base62@0.1.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: gulp-react@2.0.0 & others

tinycolor2@1.0.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: tinycolor2@1.0.0

11 high severity issues

react@0.12.2

Cross-Site Scripting in react

Recommendation: Upgrade to version 0.14.0 or later

via: react@0.12.2

json5@0.5.1

Prototype Pollution in JSON5 via Parse Method

Recommendation: Upgrade to version 1.0.2 or later

via: jsx-loader@0.12.2

duplexer2@0.0.2

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: gulp-react@2.0.0

esprima-fb@13001.1001.0-dev-harmony-fb

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: jsx-loader@0.12.2

esprima-fb@15001.1.0-dev-harmony-fb

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: react@0.12.2

esprima-fb@8001.1001.0-dev-harmony-fb

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: gulp-react@2.0.0

source-map@0.1.31

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: gulp-react@2.0.0 & others

jsx-loader@0.12.2

Package uses an invalid SPDX license ("Apache 2")

Recommendation: Validate that the package complies with your license policy

via: jsx-loader@0.12.2

gulp-util@3.0.8

Deprecated package

via: gulp-react@2.0.0

react-tools@0.12.2

Deprecated package

via: gulp-react@2.0.0

react-tools@0.13.3

Deprecated package

via: jsx-loader@0.12.2

6 low severity issues

duplexer2@0.0.2

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: gulp-react@2.0.0

esprima-fb@13001.1001.0-dev-harmony-fb

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: jsx-loader@0.12.2

esprima-fb@15001.1.0-dev-harmony-fb

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: react@0.12.2

esprima-fb@8001.1001.0-dev-harmony-fb

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: gulp-react@2.0.0

source-map@0.1.31

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: gulp-react@2.0.0 & others

jsx-loader@0.12.2

Package uses a license that is not OSI approved ("Apache 2")

Recommendation: Read and validate the license terms

via: jsx-loader@0.12.2

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

95 Packages, Including:

acorn@5.7.4

ansi-gray@0.1.1

ansi-regex@2.1.1

ansi-styles@2.2.1

ansi-wrap@0.1.0

array-differ@1.0.0

array-uniq@1.0.3

ast-types@0.9.6

balanced-match@1.0.2

base62@1.2.8

beeper@1.1.1

big.js@3.2.0

brace-expansion@1.1.11

chalk@1.1.3

classy@1.4.10

clone-stats@0.0.1

clone@1.0.4

commander@2.20.3

commoner@0.10.8

concat-map@0.0.1

copy-utils@0.1.1

copy-utils@1.0.0

core-util-is@1.0.3

dateformat@2.2.0

defined@1.0.1

detective@4.7.1

emojis-list@2.1.0

envify@3.4.1

escape-string-regexp@1.0.5

fancy-log@1.3.3

fn-queue@0.2.1

functionally@0.6.2

glogg@1.0.2

gulp-react@2.0.0

gulp-util@3.0.8

gulplog@1.0.0

has-ansi@2.0.0

has-gulplog@0.1.0

hasown@1.0.1

i-s@1.2.3

iconv-lite@0.4.24

isarray@0.0.1

isarray@1.0.0

json5@0.5.1

loader-utils@0.2.17

lodash._basecopy@3.0.1

lodash._basetostring@3.0.1

lodash._basevalues@3.0.0

lodash._getnative@3.9.1

lodash._isiterateecall@3.0.9

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

8 Packages, Including:

color-support@1.1.3

glob@5.0.15

graceful-fs@4.2.11

inflight@1.0.6

inherits@2.0.4

minimatch@3.1.2

once@1.4.0

wrappy@1.0.2

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

6 Packages, Including:

jstransform@11.0.3

react-tools@0.12.2

react-tools@0.13.3

react@0.12.2

source-map@0.4.4

source-map@0.5.7

BSD

Invalid

Not OSI Approved

5 Packages, Including:

duplexer2@0.0.2

esprima-fb@13001.1001.0-dev-harmony-fb

esprima-fb@15001.1.0-dev-harmony-fb

esprima-fb@8001.1001.0-dev-harmony-fb

source-map@0.1.31

N/A

N/A

2 Packages, Including:

base62@0.1.1

tinycolor2@1.0.0

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

2 Packages, Including:

jstransform@10.1.0

jstransform@8.2.0

BSD-3-Clause OR MIT

Permissive

1 Packages, Including:

amdefine@1.0.1

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

1 Packages, Including:

esprima@3.1.3

Apache 2

Invalid

Not OSI Approved

1 Packages, Including:

jsx-loader@0.12.2

Direct Dependencies

7

All Dependencies CSV

ⓘ This is a list of react-color-picker 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
copy-utils	1.0.0	9.07 kB	MIT	prod
functionally	0.6.2	14.86 kB	MIT	prod
gulp-react	2.0.0	1.27 kB	MIT	prod	1 5 3
jsx-loader	0.12.2	965 B	Apache 2	prod	2 5 3
react	0.12.2	582.8 kB	BSD-3-Clause	prod	2 1
region	1.1.5	19.66 kB	MIT	prod
tinycolor2	1.0.0	135.67 kB	UNKNOWN	prod	1

All Versions