Rxdb Security & License Audit

Generated on May 6, 2024 via pnpm

Repo

Npm

Home

Package summary

issues

licenses

Package created

16 Nov 2016

Version published

18 Sep 2023

Maintainers

Total deps

234

Direct deps

License

Apache-2.0

Issues

1 critical severity issue

critical

crypto-js@4.1.1

crypto-js PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard

Recommendation: Upgrade to version 4.2.0 or later

via: crypto-js@4.1.1

Collapse

Expand

3 high severity issues

high

protobufjs@6.11.4

Package uses postinstall script: "node scripts/postinstall"

via: firebase@9.23.0

protobufjs@7.2.6

Package uses postinstall script: "node scripts/postinstall"

via: firebase@9.23.0

rxdb@14.17.0

Package uses postinstall script: "node scripts/postinstall.js || echo "ignore""

via: rxdb@14.17.0

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

139 Packages, Including:

@babel/runtime@7.22.10

@babel/runtime@7.22.15

@babel/runtime@7.9.6

@mongodb-js/saslprep@1.1.6

@socket.io/component-emitter@3.1.2

@types/body-parser@1.19.5

@types/clone@2.1.2

@types/common-tags@1.8.1

@types/connect@3.4.38

@types/cors@2.8.14

@types/express-serve-static-core@4.19.0

@types/express@4.17.17

@types/http-errors@2.0.4

@types/json-schema@7.0.11

@types/lokijs@1.5.10

@types/long@4.0.2

@types/mime@1.3.5

@types/node@20.12.10

@types/qs@6.9.15

@types/range-parser@1.2.7

@types/send@0.17.4

@types/serve-static@1.15.7

@types/simple-peer@9.11.5

@types/webidl-conversions@7.0.3

@types/whatwg-url@8.2.2

@types/ws@8.5.5

ajv@8.12.0

ansi-regex@5.0.1

ansi-styles@4.3.0

as-typed@1.3.2

available-typed-arrays@1.0.7

base64-js@1.5.1

broadcast-channel@5.3.0

buffer@6.0.3

call-bind@1.0.7

clone@2.1.2

color-convert@2.0.1

color-name@1.1.4

commander@10.0.1

common-tags@1.8.2

crypto-js@4.1.1

debug@4.3.4

deep-equal@1.1.2

defekt@9.3.0

define-data-property@1.1.4

define-properties@1.2.1

emoji-regex@8.0.0

engine.io-client@6.5.3

engine.io-parser@5.2.2

err-code@3.0.1

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

63 Packages, Including:

@firebase/analytics-compat@0.2.6

@firebase/analytics-types@0.8.0

@firebase/analytics@0.10.0

@firebase/app-check-compat@0.3.7

@firebase/app-check-interop-types@0.3.0

@firebase/app-check-types@0.5.0

@firebase/app-check@0.8.0

@firebase/app-compat@0.2.13

@firebase/app-types@0.9.0

@firebase/app@0.9.13

@firebase/auth-compat@0.4.2

@firebase/auth-interop-types@0.2.1

@firebase/auth-types@0.12.0

@firebase/auth@0.23.2

@firebase/component@0.6.4

@firebase/database-compat@0.3.4

@firebase/database-types@0.10.4

@firebase/database@0.14.4

@firebase/firestore-compat@0.3.12

@firebase/firestore-types@2.5.1

@firebase/firestore@3.13.0

@firebase/functions-compat@0.3.5

@firebase/functions-types@0.6.0

@firebase/functions@0.10.0

@firebase/installations-compat@0.2.4

@firebase/installations-types@0.5.0

@firebase/installations@0.6.4

@firebase/logger@0.4.0

@firebase/messaging-compat@0.2.4

@firebase/messaging-interop-types@0.2.0

@firebase/messaging@0.12.4

@firebase/performance-compat@0.2.4

@firebase/performance-types@0.2.0

@firebase/performance@0.6.4

@firebase/remote-config-compat@0.2.4

@firebase/remote-config-types@0.3.0

@firebase/remote-config@0.4.4

@firebase/storage-compat@0.3.2

@firebase/storage-types@0.8.0

@firebase/storage@0.11.2

@firebase/util@1.9.3

@firebase/webchannel-wrapper@0.10.1

@grpc/grpc-js@1.7.3

@grpc/proto-loader@0.6.13

@grpc/proto-loader@0.7.13

array-push-at-sort-position@2.0.0

array-push-at-sort-position@3.0.0

bson@6.7.0

custom-idle-queue@3.0.1

dexie@4.0.0-alpha.4

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

14 Packages, Including:

@protobufjs/aspromise@1.1.2

@protobufjs/base64@1.1.2

@protobufjs/codegen@2.0.4

@protobufjs/eventemitter@1.1.0

@protobufjs/fetch@1.1.0

@protobufjs/float@1.0.2

@protobufjs/inquire@1.1.0

@protobufjs/path@1.1.2

@protobufjs/pool@1.1.0

@protobufjs/utf8@1.1.0

ieee754@1.2.1

js-base64@3.7.5

protobufjs@6.11.4

protobufjs@7.2.6

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

12 Packages, Including:

binary-decision-diagram@2.0.1

cliui@7.0.4

cliui@8.0.1

get-caller-file@2.0.5

idb@7.0.1

idb@7.1.1

inherits@2.0.4

jsonschema-key-compression@1.6.1

modifyjs@0.3.1

y18n@5.0.8

yargs-parser@20.2.9

yargs-parser@21.1.1

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

3 Packages, Including:

uri-js@4.4.1

webidl-conversions@3.0.1

webidl-conversions@7.0.0

(MIT AND Zlib)

Permissive

1 Packages, Including:

pako@2.1.0

BSD Zero Clause License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

include-copyright

include-license

include-original

Cannot

hold-liable

Must

1 Packages, Including:

tslib@2.6.2

The Unlicense

Public Domain

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

private-use

modify

Cannot

include-copyright

hold-liable

Must

1 Packages, Including:

tweetnacl@1.0.3

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of rxdb 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
@babel/runtime	7.22.15	50.63 kB	MIT	prod
@types/clone	2.1.2	2.1 kB	MIT	prod
@types/cors	2.8.14	2.12 kB	MIT	prod
@types/express	4.17.17	2.7 kB	MIT	prod
@types/lokijs	1.5.10	20.27 kB	MIT	prod
@types/simple-peer	9.11.5	4.39 kB	MIT	prod
@types/ws	8.5.5	5.08 kB	MIT	prod
ajv	8.12.0	214.96 kB	MIT	prod
array-push-at-sort-position	3.0.0	6.7 kB	Apache-2.0	prod
as-typed	1.3.2	4.35 kB	MIT	prod
broadcast-channel	5.3.0	84.67 kB	MIT	prod
crypto-js	4.1.1	70.2 kB	MIT	prod	1
custom-idle-queue	3.0.1	13.62 kB	Apache-2.0	prod
dexie	4.0.0-alpha.4	619.44 kB	Apache-2.0	prod
event-reduce-js	3.0.0	39.25 kB	MIT	prod
firebase	9.23.0	5.37 MB	Apache-2.0	prod	2
get-graphql-from-jsonschema	8.1.0	13.93 kB	MIT	prod
graphql-ws	5.14.0	76.4 kB	MIT	prod
graphql	15.8.0	424.64 kB	MIT	prod peer
is-my-json-valid	2.20.6	9.57 kB	MIT	prod
isomorphic-ws	5.0.0	2.03 kB	MIT	prod
js-base64	3.7.5	8.05 kB	BSD-3-Clause	prod
jsonschema-key-compression	1.6.1	17.77 kB	ISC	prod
lokijs	1.5.12	2.53 MB	MIT	prod
mingo	6.4.4	144.21 kB	MIT	prod
modifyjs	0.3.1	56.78 kB	ISC	prod
mongodb	6.0.0	600.81 kB	Apache-2.0	prod
nats	2.16.0	212.17 kB	Apache-2.0	prod
oblivious-set	1.1.1	5 kB	MIT	prod
ohash	1.1.3	9.78 kB	MIT	prod
pako	2.1.0	402.81 kB	(MIT AND Zlib)	prod
reconnecting-websocket	4.4.0	24.68 kB	MIT	prod
rxjs	7.8.1	734.42 kB	Apache-2.0	prod peer
simple-peer	9.11.1	45.53 kB	MIT	prod
socket.io-client	4.7.2	294.01 kB	MIT	prod
unload	2.4.1	10.83 kB	Apache-2.0	prod
util	0.12.5	9.75 kB	MIT	prod
ws	8.13.0	31.6 kB	MIT	prod
z-schema	6.0.1	413.16 kB	MIT	prod

Tree

Treemap

rxdb 14.17.0

Issues

1 critical severity issue

3 high severity issues

Licenses

MIT License

Apache License 2.0

BSD 3-Clause "New" or "Revised" License

ISC License

BSD 2-Clause "Simplified" License

(MIT AND Zlib)

BSD Zero Clause License

The Unlicense

Direct Dependencies

Visualizations

Recent Versions

Scan your app for security vulnerabilities and license issues

Log into your account

Create your account

rxdb 14.17.0

Issues

1 critical severity issue

3 high severity issues

Licenses

MIT License

Apache License 2.0

BSD 3-Clause "New" or "Revised" License

ISC License

BSD 2-Clause "Simplified" License

(MIT AND Zlib)

BSD Zero Clause License

The Unlicense

Direct Dependencies

Visualizations

Recent Versions

Scan your app for security vulnerabilities and license issues