Generated on May 5, 2024 via pnpm

sails-permissions 1.4.5

Comprehensive user permissions and entitlements system for sails.js and Waterline. Supports user authentication with passport.js, role-based permissioning, object ownership, and row-level security.

sails

sails.js

permissions

Package summary

issues

licenses

Package created

29 Aug 2014

Version published

9 Oct 2015

Maintainers

Total deps

Direct deps

License

MIT

Issues

2 critical severity issues

critical

xmldom@0.1.31

xmldom allows multiple root nodes in a DOM

Recommendation: None

via: sails-auth@1.3.1

lodash@3.10.1

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.12 or later

via: lodash@3.10.1 & others

Collapse

Expand

4 high severity issues

high

lodash@3.10.1

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.11 or later

via: lodash@3.10.1 & others

lodash@3.10.1

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.19 or later

via: lodash@3.10.1 & others

lodash@3.10.1

Command Injection in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: lodash@3.10.1 & others

xmldom@0.1.31

Deprecated package

via: sails-auth@1.3.1

Collapse

Expand

5 moderate severity issues

moderate

lodash@3.10.1

Regular Expression Denial of Service (ReDoS) in lodash

Recommendation: Upgrade to version 4.17.11 or later

via: lodash@3.10.1 & others

xmldom@0.1.31

Misinterpretation of malicious XML input

Recommendation: Upgrade to version 0.5.0 or later

via: sails-auth@1.3.1

lodash@3.10.1

Regular Expression Denial of Service (ReDoS) in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: lodash@3.10.1 & others

xmldom@0.1.31

Misinterpretation of malicious XML input

Recommendation: None

via: sails-auth@1.3.1

lodash@3.10.1

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.5 or later

via: lodash@3.10.1 & others

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

23 Packages, Including:

base64url@3.0.1

bluebird@2.11.0

fnv-plus@1.3.1

lodash@2.4.2

lodash@3.10.1

oauth@0.10.0

oauth@0.9.15

passport-facebook@1.0.3

passport-google-oauth@0.2.0

passport-oauth1@1.3.0

passport-oauth2@1.8.0

passport-oauth@1.0.0

passport-strategy@1.0.0

passport-twitter@1.0.4

pkginfo@0.3.1

pluralize@1.2.1

sails-auth@1.3.1

sails-generate-entities@0.11.4

sails-permissions@1.4.5

uid2@0.0.4

utils-merge@1.0.1

waterline-criteria@0.11.2

xtraverse@0.1.0

(LGPL-2.0 or MIT)

Permissive

1 Packages, Including:

xmldom@0.1.31

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of sails-permissions 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
bluebird	2.11.0	99.26 kB	MIT	prod
fnv-plus	1.3.1	50.38 kB	MIT	prod
lodash	3.10.1	169.48 kB	MIT	prod	1 3 3
pluralize	1.2.1	5.27 kB	MIT	prod
sails-auth	1.3.1	386.41 kB	MIT	prod	1 1 2
sails-generate-entities	0.11.4	3.18 kB	MIT	prod	1 3 3
waterline-criteria	0.11.2	8.63 kB	MIT	prod	1 2 3