Generated on Mar 19, 2024 via pnpm

Npm

Home

redbird 0.6.3

A reverse proxy with support for dynamic tables

proxy

reverse

docker

etcd

Package summary

issues

licenses

Package created

6 Aug 2014

Version published

18 Sep 2016

Maintainers

Total deps

175

Direct deps

License

BSD-3-Clause-Attribution

Issues

8 critical severity issues

critical

underscore@1.8.3

Arbitrary Code Execution in underscore

Recommendation: Upgrade to version 1.12.1 or later

via: node-etcd@4.2.1

asn1@0.1.11

Package has no specified license

Recommendation: Check the package code and files for license information

via: node-etcd@4.2.1

asn1js@1.2.12

Package has no specified license

Recommendation: Check the package code and files for license information

via: letsencrypt@2.1.10

assert-plus@0.1.5

Package has no specified license

Recommendation: Check the package code and files for license information

via: node-etcd@4.2.1

aws-sign2@0.5.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: node-etcd@4.2.1

ctype@0.5.3

Package has no specified license

Recommendation: Check the package code and files for license information

via: node-etcd@4.2.1

pkijs@1.3.33

Package has no specified license

Recommendation: Check the package code and files for license information

via: letsencrypt@2.1.10

valid-url@1.0.9

Package has no specified license

Recommendation: Check the package code and files for license information

via: valid-url@1.0.9

Collapse

Expand

28 high severity issues

high

qs@4.0.0

Prototype Pollution Protection Bypass in qs

Recommendation: Upgrade to version 6.0.4 or later

via: node-etcd@4.2.1

hoek@2.16.3

Prototype Pollution in hoek

Recommendation: Upgrade to version 4.2.1 or later

via: node-etcd@4.2.1

node-forge@0.7.6

Prototype Pollution in node-forge

Recommendation: Upgrade to version 0.10.0 or later

via: letsencrypt@2.1.10

node-forge@0.7.6

Improper Verification of Cryptographic Signature in node-forge

Recommendation: Upgrade to version 1.3.0 or later

via: letsencrypt@2.1.10

node-forge@0.7.6

Improper Verification of Cryptographic Signature in node-forge

Recommendation: Upgrade to version 1.3.0 or later

via: letsencrypt@2.1.10

hawk@3.1.3

Uncontrolled Resource Consumption in Hawk

Recommendation: Upgrade to version 9.0.1 or later

via: node-etcd@4.2.1

hoek@2.16.3

hoek subject to prototype pollution via the clone function.

Recommendation: None

via: node-etcd@4.2.1

qs@4.0.0

qs vulnerable to Prototype Pollution

Recommendation: Upgrade to version 6.2.4 or later

via: node-etcd@4.2.1

node-etcd@4.2.1

Package uses an invalid SPDX license ("BSD 3-Clause")

Recommendation: Validate that the package complies with your license policy

via: node-etcd@4.2.1

sntp@1.0.9

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: node-etcd@4.2.1

boom@2.10.1

Deprecated package

via: node-etcd@4.2.1

cryptiles@2.0.5

Deprecated package

via: node-etcd@4.2.1

deasync@0.1.29

Package uses install script: "node ./build.js"

via: node-etcd@4.2.1

dtrace-provider@0.8.8

Package uses install script: "node-gyp rebuild || node suppress-error.js"

via: bunyan@1.8.15

har-validator@1.8.0

Deprecated package

via: node-etcd@4.2.1

har-validator@5.1.5

Deprecated package

via: dolphin@0.1.14 & others

hawk@3.1.3

Deprecated package

via: node-etcd@4.2.1

hoek@2.16.3

Deprecated package

via: node-etcd@4.2.1

letsencrypt@2.1.10

Deprecated package

via: letsencrypt@2.1.10

letsencrypt@2.1.10

Package uses postinstall script: "node scripts/postinstall"

via: letsencrypt@2.1.10

localhost.daplie.com-certificates@1.2.5

Deprecated package

via: letsencrypt@2.1.10

node-uuid@1.4.8

Deprecated package

via: node-etcd@4.2.1

request@2.60.0

Deprecated package

via: node-etcd@4.2.1

request@2.88.2

Deprecated package

via: dolphin@0.1.14 & others

safetimeout@0.1.2

Deprecated package

via: safetimeout@0.1.2

sntp@1.0.9

Deprecated package

via: node-etcd@4.2.1

ursa-optional@0.9.10

Package uses install script: "node rebuild.js"

via: letsencrypt@2.1.10

uuid@3.4.0

Deprecated package

via: dolphin@0.1.14 & others

Collapse

Expand

17 moderate severity issues

moderate

redbird@0.6.3

Insecure Default Configuration in redbird

Recommendation: None

via: redbird@0.6.3

redbird@0.6.3

Insecure Default Configuration in redbird

Recommendation: None

via: redbird@0.6.3

tunnel-agent@0.4.3

Memory Exposure in tunnel-agent

Recommendation: Upgrade to version 0.6.0 or later

via: node-etcd@4.2.1

node-forge@0.7.6

Improper Verification of Cryptographic Signature in `node-forge`

Recommendation: Upgrade to version 1.3.0 or later

via: letsencrypt@2.1.10

bl@1.0.3

Remote Memory Exposure in bl

Recommendation: Upgrade to version 1.2.3 or later

via: node-etcd@4.2.1

request@2.88.2

Server-Side Request Forgery in Request

Recommendation: None

via: dolphin@0.1.14 & others

node-forge@0.7.6

Open Redirect in node-forge

Recommendation: Upgrade to version 1.0.0 or later

via: letsencrypt@2.1.10

request@2.60.0

Remote Memory Exposure in request

Recommendation: Upgrade to version 2.68.0 or later

via: node-etcd@4.2.1

tough-cookie@2.5.0

tough-cookie Prototype Pollution vulnerability

Recommendation: Upgrade to version 4.1.3 or later

via: dolphin@0.1.14 & others

@root/mkdirp@1.0.0

Package uses a problematic Weakly Protective license ("MPL-2.0")

Recommendation: Validate that the package complies with your license policy

via: le-challenge-fs@2.0.9 & others

certpem@1.1.3

Package uses a problematic Weakly Protective license ("MPL-2.0")

Recommendation: Validate that the package complies with your license policy

via: letsencrypt@2.1.10

eckles@1.4.1

Package uses a problematic Weakly Protective license ("MPL-2.0")

Recommendation: Validate that the package complies with your license policy

via: letsencrypt@2.1.10

keypairs@1.2.14

Package uses a problematic Weakly Protective license ("MPL-2.0")

Recommendation: Validate that the package complies with your license policy

via: letsencrypt@2.1.10

le-acme-core@2.1.4

Package uses a problematic Weakly Protective license ("MPL-2.0")

Recommendation: Validate that the package complies with your license policy

via: letsencrypt@2.1.10

le-challenge-fs@2.0.9

Package uses a problematic Weakly Protective license ("MPL-2.0")

Recommendation: Validate that the package complies with your license policy

via: le-challenge-fs@2.0.9 & others

rasha@1.2.5

Package uses a problematic Weakly Protective license ("MPL-2.0")

Recommendation: Validate that the package complies with your license policy

via: letsencrypt@2.1.10

rsa-compat@1.9.4

Package uses a problematic Weakly Protective license ("MPL-2.0")

Recommendation: Validate that the package complies with your license policy

via: letsencrypt@2.1.10

Collapse

Expand

6 low severity issues

low

node-forge@0.7.6

Prototype Pollution in node-forge debug API.

Recommendation: Upgrade to version 1.0.0 or later

via: letsencrypt@2.1.10

node-forge@0.7.6

Prototype Pollution in node-forge util.setPath API

Recommendation: Upgrade to version 0.10.0 or later

via: letsencrypt@2.1.10

node-forge@0.7.6

URL parsing in node-forge could lead to undesired behavior.

Recommendation: Upgrade to version 1.0.0 or later

via: letsencrypt@2.1.10

node-etcd@4.2.1

Package uses a license that is not OSI approved ("BSD 3-Clause")

Recommendation: Read and validate the license terms

via: node-etcd@4.2.1

redbird@0.6.3

Package uses a license that is not OSI approved ("BSD-3-Clause-Attribution")

Recommendation: Read and validate the license terms

via: redbird@0.6.3

sntp@1.0.9

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: node-etcd@4.2.1

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

108 Packages, Including:

ajv@6.12.6

ansi-regex@2.1.1

ansi-styles@2.2.1

asn1@0.2.6

assert-plus@1.0.0

async@2.6.4

asynckit@0.4.0

aws4@1.12.0

balanced-match@1.0.2

bindings@1.5.0

bl@1.0.3

bluebird@2.11.0

bluebird@3.7.2

brace-expansion@1.1.11

bunyan@1.8.15

chalk@1.1.3

combined-stream@1.0.8

commander@2.20.3

concat-map@0.0.1

core-util-is@1.0.2

core-util-is@1.0.3

dashdash@1.14.1

deasync@0.1.29

debug@2.6.9

delayed-stream@1.0.0

detect-node@2.1.0

dolphin@0.1.14

ecc-jsbn@0.1.2

escape-string-regexp@1.0.5

eventemitter3@4.0.7

extend@3.0.2

extsprintf@1.3.0

fast-deep-equal@3.1.3

fast-json-stable-stringify@2.1.0

file-uri-to-path@1.0.0

follow-redirects@1.15.6

form-data@1.0.1

form-data@2.3.3

generate-function@2.3.1

generate-object-property@1.2.0

getpass@0.1.7

handle-thing@1.2.5

har-validator@5.1.5

has-ansi@2.0.0

has@1.0.4

homedir@0.6.0

hpack.js@2.1.6

http-deceiver@1.2.7

http-proxy@1.18.1

http-signature@0.11.0

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

14 Packages, Including:

glob@6.0.4

har-schema@2.0.0

har-validator@1.8.0

inflight@1.0.6

inherits@2.0.4

json-stringify-safe@5.0.1

lru-cache@4.1.5

minimalistic-assert@1.0.1

minimatch@3.1.2

once@1.4.0

pseudomap@1.0.2

rimraf@2.4.5

wrappy@1.0.2

yallist@2.1.2

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

12 Packages, Including:

aws-sign2@0.7.0

caseless@0.11.0

caseless@0.12.0

forever-agent@0.6.1

localhost.daplie.com-certificates@1.2.5

oauth-sign@0.8.2

oauth-sign@0.9.0

request@2.60.0

request@2.88.2

tunnel-agent@0.4.3

tunnel-agent@0.6.0

ursa-optional@0.9.10

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

9 Packages, Including:

bcrypt-pbkdf@1.0.2

boom@2.10.1

cryptiles@2.0.5

hawk@3.1.3

hoek@2.16.3

qs@4.0.0

qs@6.5.3

tough-cookie@2.5.0

tough-cookie@4.1.3

Mozilla Public License 2.0

Weakly Protective

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

place-warranty

use-patent-claims

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

disclose-source

include-original

8 Packages, Including:

@root/mkdirp@1.0.0

certpem@1.1.3

eckles@1.4.1

keypairs@1.2.14

le-acme-core@2.1.4

le-challenge-fs@2.0.9

rasha@1.2.5

rsa-compat@1.9.4

N/A

7 Packages, Including:

asn1@0.1.11

asn1js@1.2.12

assert-plus@0.1.5

aws-sign2@0.5.0

ctype@0.5.3

pkijs@1.3.33

valid-url@1.0.9

(MIT OR Apache-2.0)

Permissive

7 Packages, Including:

le-challenge-sni@2.0.1

le-sni-auto@2.1.9

le-store-certbot@2.2.3

le-tls-sni@0.1.4

letsencrypt@2.1.10

pyconf@1.1.7

safe-replace@1.1.0

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

2 Packages, Including:

dtrace-provider@0.8.8

uri-js@4.4.1

(BSD-3-Clause OR GPL-2.0)

Permissive

2 Packages, Including:

node-forge@0.6.49

node-forge@0.7.6

(AFL-2.1 OR BSD-3-Clause)

Permissive

1 Packages, Including:

json-schema@0.4.0

BSD 3-Clause

Invalid

Not OSI Approved

1 Packages, Including:

node-etcd@4.2.1

(MIT OR GPL-2.0)

Permissive

1 Packages, Including:

node.extend@1.1.8

BSD with attribution

Permissive

Not OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

Cannot

Must

1 Packages, Including:

redbird@0.6.3

BSD

Invalid

Not OSI Approved

1 Packages, Including:

sntp@1.0.9

The Unlicense

Public Domain

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

private-use

modify

Cannot

include-copyright

hold-liable

Must

1 Packages, Including:

tweetnacl@0.14.5

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of redbird 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
bluebird	3.7.2	136.03 kB	MIT	prod
bunyan	1.8.15	58.89 kB	MIT	prod	1
dolphin	0.1.14	7.98 kB	MIT	prod	3 2
http-proxy	1.18.1	66.74 kB	MIT	prod
le-challenge-fs	2.0.9	8.04 kB	MPL-2.0	prod	2
le-store-certbot	2.2.3	8.29 kB	(MIT OR Apache-2.0)	prod	1
letsencrypt	2.1.10	17.1 kB	(MIT OR Apache-2.0)	prod	2 10 12 3
lodash	4.17.21	311.49 kB	MIT	prod
lru-cache	4.1.5	6.1 kB	ISC	prod
node-etcd	4.2.1	15.81 kB	BSD 3-Clause	prod	5 16 4 2
object-hash	1.3.1	82.82 kB	MIT	prod
safetimeout	0.1.2	3.63 kB	MIT	prod	1
spdy	3.4.7	15.61 kB	MIT	prod
valid-url	1.0.9	5 kB	UNKNOWN	prod	1