Generated on May 24, 2024 via pnpm

Npm

Home

restify 3.0.3

REST framework

Package summary

issues

licenses

Package created

25 Apr 2011

Version published

19 May 2015

Maintainers

Total deps

Direct deps

License

UNKNOWN

Issues

8 critical severity issues

critical

asn1@0.1.11

Package has no specified license

Recommendation: Check the package code and files for license information

via: http-signature@0.10.1

assert-plus@0.1.5

Package has no specified license

Recommendation: Check the package code and files for license information

via: assert-plus@0.1.5 & others

bunyan@1.3.4

Package has no specified license

Recommendation: Check the package code and files for license information

via: bunyan@1.3.4

ctype@0.5.3

Package has no specified license

Recommendation: Check the package code and files for license information

via: http-signature@0.10.1

dtrace-provider@0.4.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: bunyan@1.3.4 & others

escape-regexp-component@1.0.2

Package has no specified license

Recommendation: Check the package code and files for license information

via: escape-regexp-component@1.0.2

precond@0.2.3

Package has no specified license

Recommendation: Check the package code and files for license information

via: backoff@2.5.0

restify@3.0.3

Package has no specified license

Recommendation: Check the package code and files for license information

via: restify@3.0.3

Collapse

Expand

8 high severity issues

high

qs@2.4.2

Prototype Pollution Protection Bypass in qs

Recommendation: Upgrade to version 6.0.4 or later

via: qs@2.4.2

csv-parse@1.3.3

Regular Expression Denial of Service in csv-parse

Recommendation: Upgrade to version 4.4.6 or later

via: csv@0.4.6

negotiator@0.5.3

Regular Expression Denial of Service in negotiator

Recommendation: Upgrade to version 0.6.1 or later

via: negotiator@0.5.3

qs@2.4.2

qs vulnerable to Prototype Pollution

Recommendation: Upgrade to version 6.2.4 or later

via: qs@2.4.2

qs@2.4.2

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: qs@2.4.2

dtrace-provider@0.4.0

Package uses install script: "node scripts/install.js"

via: bunyan@1.3.4 & others

formidable@1.2.6

Deprecated package

via: formidable@1.2.6

node-uuid@1.4.8

Deprecated package

via: node-uuid@1.4.8

Collapse

Expand

5 moderate severity issues

moderate

restify@3.0.3

Cross-Site Scripting (XSS) in restify

Recommendation: Upgrade to version 4.1.0 or later

via: restify@3.0.3

tunnel-agent@0.4.3

Memory Exposure in tunnel-agent

Recommendation: Upgrade to version 0.6.0 or later

via: tunnel-agent@0.4.3

restify@3.0.3

Cross-Site Scripting (XSS) in restify

Recommendation: Upgrade to version 4.1.0 or later

via: restify@3.0.3

semver@4.3.6

semver vulnerable to Regular Expression Denial of Service

Recommendation: Upgrade to version 5.7.2 or later

via: semver@4.3.6

escape-regexp-component@1.0.2

Package has no specified source code repository

via: escape-regexp-component@1.0.2

Collapse

Expand

1 low severity issue

low

qs@2.4.2

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: qs@2.4.2

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

45 Packages, Including:

assert-plus@1.0.0

backoff@2.5.0

balanced-match@1.0.2

brace-expansion@1.1.11

call-bind@1.0.7

concat-map@0.0.1

core-util-is@1.0.2

deep-equal@1.1.2

define-data-property@1.1.4

define-properties@1.2.1

es-define-property@1.0.0

es-errors@1.3.0

extsprintf@1.4.1

formidable@1.2.6

function-bind@1.1.2

functions-have-names@1.2.3

get-intrinsic@1.2.4

gopd@1.0.1

has-property-descriptors@1.0.2

has-proto@1.0.3

has-symbols@1.0.3

has-tostringtag@1.0.2

hasown@2.0.2

http-signature@0.10.1

is-arguments@1.1.1

is-date-object@1.0.5

is-regex@1.1.4

keep-alive-agent@0.0.1

mime@1.6.0

minimist@1.2.8

mkdirp@0.5.6

mv@2.1.1

nan@1.5.3

ncp@2.0.0

negotiator@0.5.3

node-uuid@1.4.8

object-is@1.1.6

object-keys@1.1.1

path-is-absolute@1.0.1

regexp.prototype.flags@1.5.2

safe-json-stringify@1.2.0

set-function-length@1.2.2

set-function-name@2.0.2

spdy@1.32.5

verror@1.10.1

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

9 Packages, Including:

glob@6.0.4

inflight@1.0.6

inherits@2.0.4

lru-cache@2.7.3

minimatch@3.1.2

once@1.4.0

rimraf@2.4.5

semver@4.3.6

wrappy@1.0.2

N/A

8 Packages, Including:

asn1@0.1.11

assert-plus@0.1.5

bunyan@1.3.4

ctype@0.5.3

dtrace-provider@0.4.0

escape-regexp-component@1.0.2

precond@0.2.3

restify@3.0.3

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

5 Packages, Including:

csv-generate@0.0.6

csv-parse@1.3.3

csv-stringify@0.0.8

csv@0.4.6

stream-transform@0.1.2

BSD

Invalid

Not OSI Approved

1 Packages, Including:

qs@2.4.2

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

1 Packages, Including:

tunnel-agent@0.4.3

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of restify 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
assert-plus	0.1.5	3.35 kB	UNKNOWN	prod	1
backoff	2.5.0	11.96 kB	MIT	prod	1
bunyan	1.3.4	253.38 kB	UNKNOWN	prod	2 1
csv	0.4.6	41.23 kB	BSD-3-Clause	prod	1
deep-equal	1.1.2	20.09 kB	MIT	prod
dtrace-provider	0.4.0	25.51 kB	UNKNOWN	prod optional	1 1
escape-regexp-component	1.0.2	800 B	UNKNOWN	prod	1 1
formidable	1.2.6	13.31 kB	MIT	prod	1
http-signature	0.10.1	12.23 kB	MIT	prod	3
keep-alive-agent	0.0.1	6.28 kB	MIT	prod
lru-cache	2.7.3	8.15 kB	ISC	prod
mime	1.6.0	15.32 kB	MIT	prod
negotiator	0.5.3	5.4 kB	MIT	prod	1
node-uuid	1.4.8	13.8 kB	MIT	prod	1
once	1.4.0	1.93 kB	ISC	prod optional
qs	2.4.2	10.26 kB	BSD	prod	3 1
semver	4.3.6	44.41 kB	ISC	prod	1
spdy	1.32.5	44.77 kB	MIT	prod
tunnel-agent	0.4.3	5.64 kB	Apache-2.0	prod	1
verror	1.10.1	11.88 kB	MIT	prod