Generated on Apr 23, 2024 via pnpm

Npm

salesforce-alm 54.3.2

This package contains tools, and APIs, for an improved salesforce.com developer experience.

force.com

salesforce

salesforce-dx

Package summary

issues

licenses

Package created

7 Dec 2016

Version published

10 May 2022

Maintainers

Total deps

422

Direct deps

License

BSD-3-Clause

Issues

2 critical severity issues

critical

buffers@0.1.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: @salesforce/source-deploy-retrieve@5.15.0 & others

dtrace-provider@0.6.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: @salesforce/command@4.2.2 & others

Collapse

Expand

11 high severity issues

high

http-cache-semantics@3.8.1

http-cache-semantics vulnerable to Regular Expression Denial of Service

Recommendation: Upgrade to version 4.1.1 or later

via: heroku-cli-util@8.0.12

lodash.template@4.5.0

Command Injection in lodash

Recommendation: None

via: @salesforce/command@4.2.2

chainsaw@0.1.0

Package uses an invalid SPDX license ("MIT/X11")

Recommendation: Validate that the package complies with your license policy

via: @salesforce/source-deploy-retrieve@5.15.0 & others

traverse@0.3.9

Package uses an invalid SPDX license ("MIT/X11")

Recommendation: Validate that the package complies with your license policy

via: @salesforce/source-deploy-retrieve@5.15.0 & others

@oclif/screen@1.0.4

Deprecated package

via: @salesforce/command@4.2.2 & others

cli-ux@4.9.3

Deprecated package

via: @salesforce/command@4.2.2

cli-ux@5.6.7

Deprecated package

via: cli-ux@5.6.7

dtrace-provider@0.6.0

Package uses install script: "node scripts/install.js"

via: @salesforce/command@4.2.2 & others

har-validator@5.1.5

Deprecated package

via: @salesforce/command@4.2.2 & others

request@2.88.2

Deprecated package

via: @salesforce/command@4.2.2 & others

uuid@3.4.0

Deprecated package

via: @salesforce/command@4.2.2 & others

Collapse

Expand

10 moderate severity issues

moderate

got@8.3.2

Got allows a redirect to a UNIX socket

Recommendation: Upgrade to version 11.8.5 or later

via: heroku-cli-util@8.0.12

jsonwebtoken@8.5.0

jsonwebtoken unrestricted key type could lead to legacy keys usage

Recommendation: Upgrade to version 9.0.0 or later

via: @salesforce/command@4.2.2 & others

jsonwebtoken@8.5.0

jsonwebtoken's insecure implementation of key retrieval function could lead to Forgeable Public/Private Tokens from RSA to HMAC

Recommendation: Upgrade to version 9.0.0 or later

via: @salesforce/command@4.2.2 & others

jsonwebtoken@8.5.0

jsonwebtoken vulnerable to signature validation bypass due to insecure default algorithm in jwt.verify()

Recommendation: Upgrade to version 9.0.0 or later

via: @salesforce/command@4.2.2 & others

fast-xml-parser@3.21.1

fast-xml-parser vulnerable to Prototype Pollution through tag or attribute name

Recommendation: Upgrade to version 4.1.2 or later

via: @salesforce/source-deploy-retrieve@5.15.0 & others

tough-cookie@2.5.0

tough-cookie Prototype Pollution vulnerability

Recommendation: Upgrade to version 4.1.3 or later

via: @salesforce/command@4.2.2 & others

xml2js@0.4.19

xml2js is vulnerable to prototype pollution

Recommendation: Upgrade to version 0.5.0 or later

via: xml2js@0.4.19

request@2.88.2

Server-Side Request Forgery in Request

Recommendation: None

via: @salesforce/command@4.2.2 & others

co-prompt@1.0.0

Package has no specified source code repository

via: @salesforce/command@4.2.2 & others

salesforce-alm@54.3.2

Package has no specified source code repository

via: salesforce-alm@54.3.2

Collapse

Expand

2 low severity issues

low

chainsaw@0.1.0

Package uses a license that is not OSI approved ("MIT/X11")

Recommendation: Read and validate the license terms

via: @salesforce/source-deploy-retrieve@5.15.0 & others

traverse@0.3.9

Package uses a license that is not OSI approved ("MIT/X11")

Recommendation: Read and validate the license terms

via: @salesforce/source-deploy-retrieve@5.15.0 & others

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

328 Packages, Including:

@nodelib/fs.scandir@2.1.5

@nodelib/fs.stat@2.0.5

@nodelib/fs.walk@1.2.8

@oclif/command@1.8.36

@oclif/config@1.18.16

@oclif/config@1.18.17

@oclif/errors@1.3.6

@oclif/help@1.0.15

@oclif/parser@3.8.17

@oclif/parser@3.8.6

@oclif/plugin-help@2.2.3

@oclif/screen@1.0.4

@oclif/test@1.2.9

@salesforce/bunyan@2.0.0

@sindresorhus/is@0.7.0

@types/chai@4.3.14

@types/graceful-fs@4.1.9

@types/jsforce@1.11.5

@types/keyv@3.1.4

@types/lodash@4.17.0

@types/mkdirp@1.0.2

@types/node@20.12.7

@types/responselike@1.0.3

@types/sinon@17.0.3

@types/sinonjs__fake-timers@8.1.5

adm-zip@0.5.12

ajv@6.12.6

ajv@8.12.0

ansi-escapes@3.2.0

ansi-escapes@4.3.2

ansi-regex@3.0.1

ansi-regex@4.1.1

ansi-regex@5.0.1

ansi-styles@3.2.1

ansi-styles@4.3.0

ansicolors@0.3.2

archiver-utils@2.1.0

archiver-utils@3.0.4

archiver@5.3.2

argparse@1.0.10

array-union@2.1.0

asap@2.0.6

asn1@0.2.6

assert-plus@1.0.0

async-lock@1.4.1

async@3.2.5

asynckit@0.4.0

aws4@1.12.0

balanced-match@1.0.2

base64-js@1.5.1

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

41 Packages, Including:

@heroku-cli/color@1.1.16

@oclif/linewrap@1.0.0

@salesforce/schemas@1.7.0

base64-url@2.3.3

cliui@6.0.0

fastq@1.17.1

fs.realpath@1.0.0

fstream@1.0.12

get-caller-file@2.0.5

glob-parent@5.1.2

glob@6.0.4

glob@7.2.3

graceful-fs@4.2.11

har-schema@2.0.0

heroku-cli-util@8.0.12

inflight@1.0.6

inherits@2.0.4

isexe@2.0.0

json-stringify-safe@5.0.1

listenercount@1.0.1

lru-cache@6.0.0

minimatch@3.0.5

minimatch@3.1.2

minimatch@5.1.6

netrc-parser@3.1.6

once@1.4.0

require-main-filename@2.0.0

rimraf@2.4.5

rimraf@2.7.1

sax@1.3.0

semver@5.7.2

semver@7.6.0

set-blocking@2.0.0

signal-exit@3.0.7

which-module@2.0.1

which@1.3.1

which@2.0.2

wrappy@1.0.2

y18n@4.0.3

yallist@4.0.0

yargs-parser@18.1.3

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

18 Packages, Including:

@salesforce/command@4.2.2

@salesforce/core@2.37.1

@salesforce/kit@1.9.2

@salesforce/source-deploy-retrieve@5.15.0

@salesforce/source-tracking@1.5.0

@salesforce/ts-types@1.7.3

bcrypt-pbkdf@1.0.2

buffer-equal-constant-time@1.0.1

csv-stringify@1.1.2

duplexer2@0.1.4

duplexer3@0.1.5

ieee754@1.2.1

qs@6.5.3

salesforce-alm@54.3.2

shelljs@0.8.5

sprintf-js@1.0.3

tough-cookie@2.5.0

tough-cookie@4.1.3

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

18 Packages, Including:

aws-sign2@0.7.0

caseless@0.12.0

clean-git-ref@2.0.1

crc-32@1.2.2

ecdsa-sig-formatter@1.0.11

faye-websocket@0.11.4

faye@1.4.0

forever-agent@0.6.1

js2xmlparser@3.0.0

js2xmlparser@4.0.2

oauth-sign@0.9.0

readdir-glob@1.1.3

request@2.88.2

tunnel-agent@0.6.0

websocket-driver@0.7.4

websocket-extensions@0.1.4

xmlcreate@1.0.2

xmlcreate@2.0.4

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

3 Packages, Including:

esprima@4.0.1

http-cache-semantics@3.8.1

uri-js@4.4.1

BSD Zero Clause License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

include-copyright

include-license

include-original

Cannot

hold-liable

Must

3 Packages, Including:

password-prompt@1.1.3

tslib@1.14.1

tslib@2.6.2

The Unlicense

Public Domain

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

private-use

modify

Cannot

include-copyright

hold-liable

Must

2 Packages, Including:

big-integer@1.6.52

tweetnacl@0.14.5

N/A

2 Packages, Including:

buffers@0.1.1

dtrace-provider@0.6.0

MIT/X11

Invalid

Not OSI Approved

2 Packages, Including:

chainsaw@0.1.0

traverse@0.3.9

(AFL-2.1 OR BSD-3-Clause)

Permissive

1 Packages, Including:

json-schema@0.4.0

(MIT AND Zlib)

Permissive

1 Packages, Including:

pako@1.0.11

(MIT AND BSD-3-Clause)

Permissive

1 Packages, Including:

sha.js@2.4.11

(MIT OR CC0-1.0)

Public Domain

1 Packages, Including:

type-fest@0.21.3

(LGPL-2.0 or MIT)

Permissive

1 Packages, Including:

xmldom-sfdx-encoding@0.1.30

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of salesforce-alm 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
@oclif/config	1.18.17	14.26 kB	MIT	prod
@oclif/errors	1.3.6	5.96 kB	MIT	prod
@salesforce/command	4.2.2	29.34 kB	BSD-3-Clause	prod	1 7 6
@salesforce/core	2.37.1	177.6 kB	BSD-3-Clause	prod	1 4 6
@salesforce/kit	1.9.2	29.94 kB	BSD-3-Clause	prod
@salesforce/source-deploy-retrieve	5.15.0	159.95 kB	BSD-3-Clause	prod	2 6 7 2
@salesforce/source-tracking	1.5.0	34.5 kB	BSD-3-Clause	prod	2 6 7 2
@salesforce/ts-types	1.7.3	24.61 kB	BSD-3-Clause	prod
adm-zip	0.5.12	101.27 kB	MIT	prod
ansi-styles	3.2.1	3.72 kB	MIT	prod
archiver	5.3.2	13.02 kB	MIT	prod
bluebird	3.7.2	136.03 kB	MIT	prod
bunyan-sfdx-no-dtrace	1.8.2	266.12 kB	MIT	prod	1 1
chalk	2.4.2	9.63 kB	MIT	prod
cli-ux	5.6.7	25.18 kB	MIT	prod	2
debug	3.2.7	16.48 kB	MIT	prod
fast-xml-parser	3.21.1	21.04 kB	MIT	prod	1
fs-extra	4.0.3	34.69 kB	MIT	prod
glob	7.2.3	15.08 kB	ISC	prod
heroku-cli-util	8.0.12	23.66 kB	ISC	prod	1 1
js2xmlparser	3.0.0	13.32 kB	Apache-2.0	prod
jsforce	1.11.1	2.04 MB	MIT	prod	3 3
klaw	2.1.1	4.86 kB	MIT	prod
lodash	4.17.21	311.49 kB	MIT	prod
mime	1.6.0	15.32 kB	MIT	prod
mkdirp	0.5.6	2.95 kB	MIT	prod optional
moment	2.30.1	698.76 kB	MIT	prod optional
optional-js	1.3.1	14.75 kB	MIT	prod
replace	1.2.2	7.16 kB	MIT	prod
request	2.88.2	57.83 kB	Apache-2.0	prod	3 2
strip-ansi	5.2.0	2.07 kB	MIT	prod
ts-retry-promise	0.6.2	8.23 kB	MIT	prod
xml2js	0.4.19	12.08 kB	MIT	prod	1
xmldom-sfdx-encoding	0.1.30	20.94 kB	(LGPL-2.0 or MIT)	prod