Generated on May 7, 2024 via pnpm

Npm

Home

receipt-scanner 0.4.0

Extracts information from your PDF or image receipts.

computer vision

graphicsmagick

imagemagick

invoice

OCR

optical character recognition

Package summary

issues

licenses

Package created

1 Sep 2016

Version published

29 Oct 2016

Maintainers

Total deps

128

Direct deps

License

MIT

Issues

2 critical severity issues

critical

buffers@0.1.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: opencv@6.2.0

progress@1.1.8

Package has no specified license

Recommendation: Check the package code and files for license information

via: progress@1.1.8

Collapse

Expand

13 high severity issues

high

tar@2.2.2

Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization

Recommendation: Upgrade to version 3.2.2 or later

via: sharp@0.16.2

sharp@0.16.2

sharp vulnerability in libwebp dependency CVE-2023-4863

Recommendation: Upgrade to version 0.32.6 or later

via: sharp@0.16.2

tar@2.2.2

Arbitrary File Creation/Overwrite on Windows via insufficient relative path sanitization

Recommendation: Upgrade to version 4.4.18 or later

via: sharp@0.16.2

estraverse@1.9.3

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: opencv@6.2.0

pdf-text-extract@1.5.0

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: pdf-text-extract@1.5.0

source-map@0.2.0

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: opencv@6.2.0

yargs@1.3.3

Package uses an invalid SPDX license ("MIT/X11")

Recommendation: Validate that the package complies with your license policy

via: pdf-text-extract@1.5.0

har-validator@5.1.5

Deprecated package

via: sharp@0.16.2

istanbul@0.4.5

Deprecated package

via: opencv@6.2.0

node-uuid@1.4.8

Deprecated package

via: node-tesseract@0.2.7

request@2.88.2

Deprecated package

via: sharp@0.16.2

tar@2.2.2

Deprecated package

via: sharp@0.16.2

uuid@3.4.0

Deprecated package

via: sharp@0.16.2

Collapse

Expand

5 moderate severity issues

moderate

color-string@0.3.0

Regular Expression Denial of Service (ReDOS)

Recommendation: Upgrade to version 1.5.5 or later

via: sharp@0.16.2

sharp@0.16.2

sharp vulnerable to Command Injection in post-installation over build environment

Recommendation: Upgrade to version 0.30.5 or later

via: sharp@0.16.2

tough-cookie@2.5.0

tough-cookie Prototype Pollution vulnerability

Recommendation: Upgrade to version 4.1.3 or later

via: sharp@0.16.2

request@2.88.2

Server-Side Request Forgery in Request

Recommendation: None

via: sharp@0.16.2

tar@2.2.2

Denial of service while parsing a tar file due to lack of folders count validation

Recommendation: Upgrade to version 6.2.1 or later

via: sharp@0.16.2

Collapse

Expand

4 low severity issues

low

estraverse@1.9.3

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: opencv@6.2.0

pdf-text-extract@1.5.0

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: pdf-text-extract@1.5.0

source-map@0.2.0

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: opencv@6.2.0

yargs@1.3.3

Package uses a license that is not OSI approved ("MIT/X11")

Recommendation: Read and validate the license terms

via: pdf-text-extract@1.5.0

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

77 Packages, Including:

ajv@6.12.6

argparse@1.0.10

array-parallel@0.1.3

array-series@0.1.5

asn1@0.2.6

assert-plus@1.0.0

async@1.5.2

asynckit@0.4.0

aws4@1.12.0

balanced-match@1.0.2

bluebird@3.7.2

brace-expansion@1.1.11

clone@1.0.4

color-convert@1.9.3

color-name@1.1.3

color-name@1.1.4

color-string@0.3.0

color@0.11.4

combined-stream@1.0.8

commander@2.20.3

concat-map@0.0.1

core-util-is@1.0.2

cross-spawn@4.0.2

dashdash@1.14.1

debug@3.2.7

deep-is@0.1.4

delayed-stream@1.0.0

ecc-jsbn@0.1.2

extend@3.0.2

extsprintf@1.3.0

fast-deep-equal@3.1.3

fast-json-stable-stringify@2.1.0

fast-levenshtein@2.0.6

form-data@2.3.3

getpass@0.1.7

gm@1.25.0

handlebars@4.7.8

har-validator@5.1.5

has-flag@1.0.0

http-signature@1.2.0

is-typedarray@1.0.0

isstream@0.1.2

js-yaml@3.14.1

jsbn@0.1.1

json-schema-traverse@0.4.1

jsprim@1.4.2

levn@0.3.0

mime-db@1.52.0

mime-types@2.1.35

mime@1.6.0

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

23 Packages, Including:

abbrev@1.0.9

block-stream@0.0.9

fs.realpath@1.0.0

fstream@1.0.12

glob@5.0.15

glob@7.2.3

graceful-fs@4.2.11

har-schema@2.0.0

inflight@1.0.6

inherits@2.0.4

isexe@2.0.0

json-stringify-safe@5.0.1

lru-cache@4.1.5

minimatch@3.1.2

nopt@3.0.6

once@1.4.0

pseudomap@1.0.2

rimraf@2.7.1

semver@5.7.2

tar@2.2.2

which@1.3.1

wrappy@1.0.2

yallist@2.1.2

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

7 Packages, Including:

aws-sign2@0.7.0

caseless@0.12.0

forever-agent@0.6.1

oauth-sign@0.9.0

request@2.88.2

sharp@0.16.2

tunnel-agent@0.6.0

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

6 Packages, Including:

bcrypt-pbkdf@1.0.2

istanbul@0.4.5

qs@6.5.3

source-map@0.6.1

sprintf-js@1.0.3

tough-cookie@2.5.0

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

6 Packages, Including:

escodegen@1.8.1

esprima@2.7.3

esprima@4.0.1

esutils@2.0.3

uglify-js@3.17.4

uri-js@4.4.1

BSD

Invalid

Not OSI Approved

3 Packages, Including:

estraverse@1.9.3

pdf-text-extract@1.5.0

source-map@0.2.0

N/A

2 Packages, Including:

buffers@0.1.1

progress@1.1.8

BSD-3-Clause OR MIT

Permissive

1 Packages, Including:

amdefine@1.0.1

(AFL-2.1 OR BSD-3-Clause)

Permissive

1 Packages, Including:

json-schema@0.4.0

The Unlicense

Public Domain

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

private-use

modify

Cannot

include-copyright

hold-liable

Must

1 Packages, Including:

tweetnacl@0.14.5

MIT/X11

Invalid

Not OSI Approved

1 Packages, Including:

yargs@1.3.3

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of receipt-scanner 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
commander	2.20.3	18.26 kB	MIT	prod
gm	1.25.0	29.25 kB	MIT	prod optional
mime	1.6.0	15.32 kB	MIT	prod
node-tesseract	0.2.7	6.84 kB	MIT	prod	1
opencv	6.2.0	7.51 MB	MIT	prod	1 3 2
pdf-text-extract	1.5.0	3.28 kB	BSD	prod	2 2
progress	1.1.8	4.71 kB	UNKNOWN	prod	1
sharp	0.16.2	488.29 kB	Apache-2.0	prod optional	7 5
tmp	0.0.29	11.29 kB	MIT	prod

Tree

Treemap

All Versions

receipt-scanner 0.4.0

Issues

2 critical severity issues

13 high severity issues

5 moderate severity issues

4 low severity issues

Licenses

MIT License

ISC License

Apache License 2.0

BSD 3-Clause "New" or "Revised" License

BSD 2-Clause "Simplified" License

BSD

N/A

BSD-3-Clause OR MIT

(AFL-2.1 OR BSD-3-Clause)

The Unlicense

MIT/X11

Direct Dependencies

Visualizations

All Versions

Scan your app for security vulnerabilities and license issues

Log into your account

Create your account

receipt-scanner 0.4.0

Issues

2 critical severity issues

13 high severity issues

5 moderate severity issues

4 low severity issues

Licenses

MIT License

ISC License

Apache License 2.0

BSD 3-Clause "New" or "Revised" License

BSD 2-Clause "Simplified" License

BSD

N/A

BSD-3-Clause OR MIT

(AFL-2.1 OR BSD-3-Clause)

The Unlicense

MIT/X11

Direct Dependencies

Visualizations

All Versions

Scan your app for security vulnerabilities and license issues