Generated on Jan 29, 2024 via pnpm

Npm

Home

samlify 2.7.4

High-level API for Single Sign On (SAML 2.0)

nodejs

saml2

sso

slo

metadata

Package summary

issues

licenses

Package created

6 Jun 2017

Version published

15 May 2020

Maintainers

Total deps

Direct deps

License

MIT

Issues

1 critical severity issue

critical

xmldom@0.1.31

xmldom allows multiple root nodes in a DOM

Recommendation: None

via: xmldom@0.1.31

Collapse

Expand

5 high severity issues

high

node-forge@0.8.5

Prototype Pollution in node-forge

Recommendation: Upgrade to version 0.10.0 or later

via: node-forge@0.8.5

node-forge@0.8.5

Improper Verification of Cryptographic Signature in node-forge

Recommendation: Upgrade to version 1.3.0 or later

via: node-forge@0.8.5 & others

node-forge@0.8.5

Improper Verification of Cryptographic Signature in node-forge

Recommendation: Upgrade to version 1.3.0 or later

via: node-forge@0.8.5 & others

uuid@3.4.0

Deprecated package

via: uuid@3.4.0

xmldom@0.1.31

Deprecated package

via: xmldom@0.1.31

Collapse

Expand

4 moderate severity issues

moderate

node-forge@0.8.5

Improper Verification of Cryptographic Signature in `node-forge`

Recommendation: Upgrade to version 1.3.0 or later

via: node-forge@0.8.5 & others

xmldom@0.1.31

Misinterpretation of malicious XML input

Recommendation: Upgrade to version 0.7.0 or later

via: xmldom@0.1.31

xmldom@0.1.31

Misinterpretation of malicious XML input

Recommendation: Upgrade to version 0.5.0 or later

via: xmldom@0.1.31

node-forge@0.8.5

Open Redirect in node-forge

Recommendation: Upgrade to version 1.0.0 or later

via: node-forge@0.8.5 & others

Collapse

Expand

3 low severity issues

low

node-forge@0.8.5

Prototype Pollution in node-forge debug API.

Recommendation: Upgrade to version 1.0.0 or later

via: node-forge@0.8.5 & others

node-forge@0.8.5

Prototype Pollution in node-forge util.setPath API

Recommendation: Upgrade to version 0.10.0 or later

via: node-forge@0.8.5

node-forge@0.8.5

URL parsing in node-forge could lead to undesired behavior.

Recommendation: Upgrade to version 1.0.0 or later

via: node-forge@0.8.5 & others

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

13 Packages, Including:

@xmldom/xmldom@0.7.13

asn1@0.2.6

camelcase@5.3.1

escape-html@1.0.3

node-rsa@1.1.1

safer-buffer@2.1.2

samlify@2.7.4

uuid@3.4.0

xml-crypto@1.5.6

xml-encryption@1.3.0

xml@1.0.1

xpath@0.0.27

xpath@0.0.32

(BSD-3-Clause OR GPL-2.0)

Permissive

2 Packages, Including:

node-forge@0.10.0

node-forge@0.8.5

(MIT AND Zlib)

Permissive

1 Packages, Including:

pako@1.0.11

(LGPL-2.0 or MIT)

Permissive

1 Packages, Including:

xmldom@0.1.31

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of samlify 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
camelcase	5.3.1	2.96 kB	MIT	prod
node-forge	0.8.5	437.3 kB	(BSD-3-Clause OR GPL-2.0)	prod	3 2 3
node-rsa	1.1.1	33.08 kB	MIT	prod
pako	1.0.11	199.69 kB	(MIT AND Zlib)	prod
uuid	3.4.0	11.87 kB	MIT	prod	1
xml-crypto	1.5.6	19.09 kB	MIT	prod
xml-encryption	1.3.0	17.78 kB	MIT	prod	2 2 2
xml	1.0.1	6.65 kB	MIT	prod
xmldom	0.1.31	19.5 kB	(LGPL-2.0 or MIT)	prod	1 1 2
xpath	0.0.27	36.61 kB	MIT	prod