Generated on May 16, 2024 via pnpm

Npm

Home

sitemap-generator 8.5.1

Easily create XML sitemaps for your website.

sitemap

xml

sitemap.xml

Package summary

issues

licenses

Package created

23 Jul 2015

Version published

11 Sep 2020

Maintainers

Total deps

Direct deps

License

MIT

Issues

2 critical severity issues

critical

url-parse@1.4.7

Authorization Bypass Through User-Controlled Key in url-parse

Recommendation: Upgrade to version 1.5.8 or later

via: url-parse@1.4.7

domutils@1.5.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: cheerio@1.0.0-rc.2

Collapse

Expand

4 high severity issues

high

nth-check@1.0.2

Inefficient Regular Expression Complexity in nth-check

Recommendation: Upgrade to version 2.0.1 or later

via: cheerio@1.0.0-rc.2

async@2.6.1

Prototype Pollution in async

Recommendation: Upgrade to version 2.6.4 or later

via: async@2.6.1

lodash@4.17.20

Command Injection in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: async@2.6.1 & others

css-select@1.2.0

Package uses an invalid SPDX license ("BSD-like")

Recommendation: Validate that the package complies with your license policy

via: cheerio@1.0.0-rc.2

Collapse

Expand

6 moderate severity issues

moderate

url-parse@1.4.7

Authorization bypass in url-parse

Recommendation: Upgrade to version 1.5.6 or later

via: url-parse@1.4.7

url-parse@1.4.7

Open redirect in url-parse

Recommendation: Upgrade to version 1.5.2 or later

via: url-parse@1.4.7

url-parse@1.4.7

Path traversal in url-parse

Recommendation: Upgrade to version 1.5.0 or later

via: url-parse@1.4.7

url-parse@1.4.7

url-parse incorrectly parses hostname / protocol due to unstripped leading control characters.

Recommendation: Upgrade to version 1.5.9 or later

via: url-parse@1.4.7

url-parse@1.4.7

url-parse Incorrectly parses URLs that include an '@'

Recommendation: Upgrade to version 1.5.7 or later

via: url-parse@1.4.7

lodash@4.17.20

Regular Expression Denial of Service (ReDoS) in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: async@2.6.1 & others

Collapse

Expand

1 low severity issue

low

css-select@1.2.0

Package uses a license that is not OSI approved ("BSD-like")

Recommendation: Read and validate the license terms

via: cheerio@1.0.0-rc.2

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

29 Packages, Including:

@types/node@20.12.12

async@2.6.1

async@3.2.5

cheerio@1.0.0-rc.2

cp-file@6.0.0

crypto-random-string@1.0.0

date-fns@1.29.0

dom-serializer@0.1.1

htmlparser2@3.10.1

iconv-lite@0.5.2

lodash@4.17.20

make-dir@1.3.0

mitt@1.1.3

nested-error-stacks@2.1.1

normalize-url@3.3.0

parse5@3.0.3

pify@3.0.0

querystringify@2.2.0

readable-stream@3.6.2

requires-port@1.0.0

robots-parser@2.4.0

safe-buffer@5.2.1

safer-buffer@2.1.2

sitemap-generator@8.5.1

string_decoder@1.3.0

undici-types@5.26.5

urijs@1.19.11

url-parse@1.4.7

util-deprecate@1.0.2

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

7 Packages, Including:

css-what@2.1.3

domelementtype@1.3.1

domhandler@2.4.2

domutils@1.7.0

entities@1.1.2

nth-check@1.0.2

simplecrawler@1.1.9

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

3 Packages, Including:

boolbase@1.0.0

graceful-fs@4.2.11

inherits@2.0.4

BSD-like

Invalid

Not OSI Approved

1 Packages, Including:

css-select@1.2.0

N/A

1 Packages, Including:

domutils@1.5.1

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of sitemap-generator 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
async	2.6.1	120.35 kB	MIT	prod	2 1
cheerio	1.0.0-rc.2	31.52 kB	MIT	prod	1 3 1 1
cp-file	6.0.0	4.39 kB	MIT	prod
crypto-random-string	1.0.0	1.78 kB	MIT	prod
date-fns	1.29.0	104.35 kB	MIT	prod
lodash	4.17.20	309.26 kB	MIT	prod	1 1
mitt	1.1.3	5.59 kB	MIT	prod
normalize-url	3.3.0	3.54 kB	MIT	prod
simplecrawler	1.1.9	40.66 kB	BSD-2-Clause	prod
url-parse	1.4.7	14 kB	MIT	prod	1 5