Generated on Feb 23, 2024 via pnpm

Npm

Home

samlify 2.5.1

High-level API for Single Sign On (SAML 2.0)

nodejs

saml2

sso

slo

metadata

Package summary

issues

licenses

Package created

6 Jun 2017

Version published

25 Jun 2019

Maintainers

Total deps

Direct deps

License

MIT

Issues

2 critical severity issues

critical

ejs@2.7.4

ejs template injection vulnerability

Recommendation: Upgrade to version 3.1.7 or later

via: @authenio/xml-encryption@0.11.3

xmldom@0.1.31

xmldom allows multiple root nodes in a DOM

Recommendation: None

via: @authenio/xml-encryption@0.11.3 & others

Collapse

Expand

10 high severity issues

high

node-forge@0.7.6

Prototype Pollution in node-forge

Recommendation: Upgrade to version 0.10.0 or later

via: @authenio/xml-encryption@0.11.3 & others

node-forge@0.7.6

Improper Verification of Cryptographic Signature in node-forge

Recommendation: Upgrade to version 1.3.0 or later

via: @authenio/xml-encryption@0.11.3 & others

node-forge@0.7.6

Improper Verification of Cryptographic Signature in node-forge

Recommendation: Upgrade to version 1.3.0 or later

via: @authenio/xml-encryption@0.11.3 & others

deflate-js@0.2.3

Package uses an invalid SPDX license ("GPL")

Recommendation: Validate that the package complies with your license policy

via: deflate-js@0.2.3

@authenio/xsd-schema-validator@0.7.3

Package uses postinstall script: "javac support/XMLValidator.java"

via: @authenio/xsd-schema-validator@0.7.3

ejs@2.7.4

Package uses postinstall script: "node ./postinstall.js"

via: @authenio/xml-encryption@0.11.3

samlify@2.5.1

Package uses preinstall script: "make validator"

via: samlify@2.5.1

uuid@3.4.0

Deprecated package

via: uuid@3.4.0

validate-with-xmllint@1.2.1

Package uses postinstall script: "node validate-xmllint-installation.js"

via: validate-with-xmllint@1.2.1

xmldom@0.1.31

Deprecated package

via: @authenio/xml-encryption@0.11.3 & others

Collapse

Expand

4 moderate severity issues

moderate

node-forge@0.7.6

Improper Verification of Cryptographic Signature in `node-forge`

Recommendation: Upgrade to version 1.3.0 or later

via: @authenio/xml-encryption@0.11.3 & others

xmldom@0.1.31

Misinterpretation of malicious XML input

Recommendation: Upgrade to version 0.5.0 or later

via: @authenio/xml-encryption@0.11.3 & others

node-forge@0.7.6

Open Redirect in node-forge

Recommendation: Upgrade to version 1.0.0 or later

via: @authenio/xml-encryption@0.11.3 & others

xmldom@0.1.31

Misinterpretation of malicious XML input

Recommendation: None

via: @authenio/xml-encryption@0.11.3 & others

Collapse

Expand

4 low severity issues

low

node-forge@0.7.6

Prototype Pollution in node-forge debug API.

Recommendation: Upgrade to version 1.0.0 or later

via: @authenio/xml-encryption@0.11.3 & others

node-forge@0.7.6

Prototype Pollution in node-forge util.setPath API

Recommendation: Upgrade to version 0.10.0 or later

via: @authenio/xml-encryption@0.11.3 & others

node-forge@0.7.6

URL parsing in node-forge could lead to undesired behavior.

Recommendation: Upgrade to version 1.0.0 or later

via: @authenio/xml-encryption@0.11.3 & others

deflate-js@0.2.3

Package uses a license that is not OSI approved ("GPL")

Recommendation: Read and validate the license terms

via: deflate-js@0.2.3

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

25 Packages, Including:

@authenio/xml-encryption@0.11.3

@authenio/xsd-schema-validator@0.7.3

@xmldom/xmldom@0.7.13

asn1@0.2.3

async@2.6.4

bindings@1.5.0

camelcase@5.3.1

dom-walk@0.1.2

file-uri-to-path@1.0.0

global@4.4.0

libxml-xsd@0.5.2

libxmljs-mt@0.16.1

lodash@4.17.21

min-document@2.19.0

nan@2.18.0

node-rsa@0.4.2

node-xmllint@1.0.0

process@0.11.10

samlify@2.5.1

uuid@3.4.0

validate-with-xmllint@1.2.1

xml-crypto@1.5.6

xml@1.0.1

xpath@0.0.27

xpath@0.0.32

GPL

Invalid

Not OSI Approved

1 Packages, Including:

deflate-js@0.2.3

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

1 Packages, Including:

ejs@2.7.4

(BSD-3-Clause OR GPL-2.0)

Permissive

1 Packages, Including:

node-forge@0.7.6

(LGPL-2.0 or MIT)

Permissive

1 Packages, Including:

xmldom@0.1.31

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of samlify 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
@authenio/xml-encryption	0.11.3	25.37 kB	MIT	prod	2 5 4 3
@authenio/xsd-schema-validator	0.7.3	12.51 kB	MIT	prod optional	1
camelcase	5.3.1	2.96 kB	MIT	prod
deflate-js	0.2.3	36.38 kB	GPL	prod	1 1
global	4.4.0	1.85 kB	MIT	prod
libxml-xsd	0.5.2	8.14 kB	MIT	prod optional
node-forge	0.7.6	434.11 kB	(BSD-3-Clause OR GPL-2.0)	prod	3 2 3
node-rsa	0.4.2	40.33 kB	MIT	prod
node-xmllint	1.0.0	1.06 MB	MIT	prod optional
uuid	3.4.0	11.87 kB	MIT	prod	1
validate-with-xmllint	1.2.1	2.8 kB	MIT	prod optional	1
xml-crypto	1.5.6	19.09 kB	MIT	prod
xml	1.0.1	6.65 kB	MIT	prod
xmldom	0.1.31	19.5 kB	(LGPL-2.0 or MIT)	prod	1 1 2
xpath	0.0.27	36.61 kB	MIT	prod