Generated on May 27, 2024 via pnpm

sails-auth 1.2.1

Passport-based User Authentication system for sails.js applications.

Package summary

22

issues

9

licenses

Package created

12 Sep 2014

Version published

15 May 2015

Maintainers

2

Total deps

241

Direct deps

7

License

MIT

Issues

22

3 critical severity issues

xmldom@0.1.31

xmldom allows multiple root nodes in a DOM

Recommendation: None

via: passport-twitter@1.0.4

lodash@3.10.1

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.12 or later

via: sails-generate-entities@0.11.4 & others

cycle@1.0.3

Package has no specified license

Recommendation: Check the package code and files for license information

via: sails@1.5.11

8 high severity issues

lodash@3.10.1

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.11 or later

via: sails-generate-entities@0.11.4 & others

lodash@3.10.1

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.19 or later

via: sails-generate-entities@0.11.4 & others

lodash@3.10.1

Command Injection in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: sails-generate-entities@0.11.4 & others

wordwrap@0.0.2

Package uses an invalid SPDX license ("MIT/X11")

Recommendation: Validate that the package complies with your license policy

via: sails@1.5.11

yargs@3.4.5

Package uses an invalid SPDX license ("MIT/X11")

Recommendation: Validate that the package complies with your license policy

via: sails@1.5.11

rc@1.2.8

Package uses a custom license expression: `(BSD-2-Clause OR MIT OR Apache-2.0)`

Recommendation: Validate that the license expression complies with your license policy

via: sails@1.5.11

revalidator@0.1.8

Package uses an invalid SPDX license ("Apache 2.0")

Recommendation: Validate that the package complies with your license policy

via: sails@1.5.11

xmldom@0.1.31

Deprecated package

via: passport-twitter@1.0.4

8 moderate severity issues

lodash@3.10.1

Regular Expression Denial of Service (ReDoS) in lodash

Recommendation: Upgrade to version 4.17.11 or later

via: sails-generate-entities@0.11.4 & others

xmldom@0.1.31

Misinterpretation of malicious XML input

Recommendation: Upgrade to version 0.5.0 or later

via: passport-twitter@1.0.4

lodash@3.10.1

Regular Expression Denial of Service (ReDoS) in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: sails-generate-entities@0.11.4 & others

xmldom@0.1.31

Misinterpretation of malicious XML input

Recommendation: None

via: passport-twitter@1.0.4

lodash@3.10.1

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.5 or later

via: sails-generate-entities@0.11.4 & others

eyes@0.1.8

Package has no specified source code repository

via: sails@1.5.11

merge-dictionaries@0.0.3

Package has no specified source code repository

via: sails@1.5.11

merge-dictionaries@1.0.0

Package has no specified source code repository

via: sails@1.5.11

3 low severity issues

wordwrap@0.0.2

Package uses a license that is not OSI approved ("MIT/X11")

Recommendation: Read and validate the license terms

via: sails@1.5.11

yargs@3.4.5

Package uses a license that is not OSI approved ("MIT/X11")

Recommendation: Read and validate the license terms

via: sails@1.5.11

revalidator@0.1.8

Package uses a license that is not OSI approved ("Apache 2.0")

Recommendation: Read and validate the license terms

via: sails@1.5.11

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

202 Packages, Including:

@sailshq/lodash@3.10.6

accepts@1.3.8

anchor@1.4.1

ansi-styles@3.2.1

ansi-styles@4.3.0

array-flatten@1.1.1

array-flatten@2.1.1

async@0.9.2

async@2.6.4

async@3.2.5

balanced-match@1.0.2

base64url@3.0.1

bluebird@3.2.1

body-parser@1.19.2

body-parser@1.20.2

brace-expansion@1.1.11

brace-expansion@2.0.1

bytes@3.0.0

bytes@3.1.2

call-bind@1.0.7

camelcase@1.2.1

captains-log@2.0.5

chalk@2.3.0

chalk@4.1.2

color-convert@1.9.3

color-convert@2.0.1

color-name@1.1.3

color-name@1.1.4

colors@1.0.3

colors@1.4.0

commander@2.11.0

commander@2.8.1

common-js-file-extensions@1.0.2

compressible@2.0.18

compression@1.7.1

concat-map@0.0.1

connect@3.6.5

content-disposition@0.5.4

content-type@1.0.5

cookie-parser@1.4.4

cookie-signature@1.0.6

cookie-signature@1.1.0

cookie@0.3.1

cookie@0.4.0

cookie@0.6.0

cross-spawn@4.0.2

csrf@3.1.0

csurf@1.10.0

debug@2.6.9

debug@3.1.0

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

26 Packages, Including:

fs.realpath@1.0.0

glob@7.1.2

glob@7.2.3

graceful-fs@4.2.11

inflight@1.0.6

inherits@2.0.3

inherits@2.0.4

ini@1.3.8

isexe@2.0.0

lru-cache@4.1.5

lru-cache@6.0.0

minimatch@3.1.2

minimatch@5.1.6

mute-stream@0.0.8

once@1.4.0

pseudomap@1.0.2

read@1.0.7

rimraf@2.7.1

semver@7.5.2

setprototypeof@1.1.0

setprototypeof@1.1.1

setprototypeof@1.2.0

which@1.3.1

wrappy@1.0.2

yallist@2.1.2

yallist@4.0.0

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

4 Packages, Including:

denque@1.5.1

ejs@3.1.10

filelist@1.0.4

jake@10.9.1

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

3 Packages, Including:

qs@6.11.0

qs@6.9.7

sprintf-js@1.1.3

MIT/X11

Invalid

Not OSI Approved

2 Packages, Including:

wordwrap@0.0.2

yargs@3.4.5

N/A

N/A

1 Packages, Including:

cycle@1.0.3

(BSD-2-Clause OR MIT OR Apache-2.0)

Expression

1 Packages, Including:

rc@1.2.8

Apache 2.0

Invalid

Not OSI Approved

1 Packages, Including:

revalidator@0.1.8

(LGPL-2.0 or MIT)

Permissive

1 Packages, Including:

xmldom@0.1.31

Direct Dependencies

7

All Dependencies CSV

ⓘ This is a list of sails-auth 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
lodash	3.10.1	169.48 kB	MIT	prod peer	1 3 3
lodash	4.17.21	311.49 kB	MIT	prod
passport-facebook	1.0.3	6.15 kB	MIT	prod optional
passport-google-oauth	0.2.0	4.96 kB	MIT	prod optional
passport-twitter	1.0.4	5.5 kB	MIT	prod optional	1 1 2
sails-generate-entities	0.11.4	3.18 kB	MIT	prod	1 3 3
sails	1.5.11	3.11 MB	MIT	prod peer	1 4 3 3

Recent Versions