Generated on May 19, 2024 via pnpm

Npm

Home

solid-bucket 1.1.0

A universal API for Storage providers in the Cloud

Package summary

issues

licenses

Package created

4 Feb 2018

Version published

4 Feb 2018

Maintainers

Total deps

191

Direct deps

License

MIT

Issues

2 critical severity issues

critical

browserify-mime@1.2.9

Package has no specified license

Recommendation: Check the package code and files for license information

via: azure-storage@2.10.7

xml2js@0.2.8

Package has no specified license

Recommendation: Check the package code and files for license information

via: azure-storage@2.10.7

Collapse

Expand

13 high severity issues

high

axios@0.18.1

axios Inefficient Regular Expression Complexity vulnerability

Recommendation: Upgrade to version 0.21.2 or later

via: @google-cloud/storage@1.7.0

node-forge@0.10.0

Improper Verification of Cryptographic Signature in node-forge

Recommendation: Upgrade to version 1.3.0 or later

via: @google-cloud/storage@1.7.0

node-forge@0.10.0

Improper Verification of Cryptographic Signature in node-forge

Recommendation: Upgrade to version 1.3.0 or later

via: @google-cloud/storage@1.7.0

follow-redirects@1.5.10

Exposure of sensitive information in follow-redirects

Recommendation: Upgrade to version 1.14.7 or later

via: @google-cloud/storage@1.7.0

sax@0.5.8

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: azure-storage@2.10.7

aws-sdk@2.1623.0

Package uses postinstall script: "node scripts/warn-maintenance-mode.js"

via: aws-sdk@2.1623.0

axios@0.18.1

Deprecated package

via: @google-cloud/storage@1.7.0

azure-storage@2.10.7

Deprecated package

via: azure-storage@2.10.7

gcs-resumable-upload@0.10.2

Deprecated package

via: @google-cloud/storage@1.7.0

har-validator@5.1.5

Deprecated package

via: @google-cloud/storage@1.7.0 & others

querystring@0.2.0

Deprecated package

via: aws-sdk@2.1623.0

request@2.88.2

Deprecated package

via: @google-cloud/storage@1.7.0 & others

uuid@3.4.0

Deprecated package

via: @google-cloud/storage@1.7.0 & others

Collapse

Expand

10 moderate severity issues

moderate

node-forge@0.10.0

Improper Verification of Cryptographic Signature in `node-forge`

Recommendation: Upgrade to version 1.3.0 or later

via: @google-cloud/storage@1.7.0

axios@0.18.1

Axios vulnerable to Server-Side Request Forgery

Recommendation: Upgrade to version 0.21.1 or later

via: @google-cloud/storage@1.7.0

follow-redirects@1.5.10

Exposure of Sensitive Information to an Unauthorized Actor in follow-redirects

Recommendation: Upgrade to version 1.14.8 or later

via: @google-cloud/storage@1.7.0

node-forge@0.10.0

Open Redirect in node-forge

Recommendation: Upgrade to version 1.0.0 or later

via: @google-cloud/storage@1.7.0

follow-redirects@1.5.10

Follow Redirects improperly handles URLs in the url.parse() function

Recommendation: Upgrade to version 1.15.4 or later

via: @google-cloud/storage@1.7.0

axios@0.18.1

Axios Cross-Site Request Forgery Vulnerability

Recommendation: Upgrade to version 0.28.0 or later

via: @google-cloud/storage@1.7.0

tough-cookie@2.5.0

tough-cookie Prototype Pollution vulnerability

Recommendation: Upgrade to version 4.1.3 or later

via: @google-cloud/storage@1.7.0 & others

xml2js@0.2.8

xml2js is vulnerable to prototype pollution

Recommendation: Upgrade to version 0.5.0 or later

via: azure-storage@2.10.7

request@2.88.2

Server-Side Request Forgery in Request

Recommendation: None

via: @google-cloud/storage@1.7.0 & others

follow-redirects@1.5.10

follow-redirects' Proxy-Authorization header kept across hosts

Recommendation: Upgrade to version 1.15.6 or later

via: @google-cloud/storage@1.7.0

Collapse

Expand

3 low severity issues

low

node-forge@0.10.0

Prototype Pollution in node-forge debug API.

Recommendation: Upgrade to version 1.0.0 or later

via: @google-cloud/storage@1.7.0

node-forge@0.10.0

URL parsing in node-forge could lead to undesired behavior.

Recommendation: Upgrade to version 1.0.0 or later

via: @google-cloud/storage@1.7.0

sax@0.5.8

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: azure-storage@2.10.7

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

149 Packages, Including:

abort-controller@3.0.0

agent-base@4.3.0

ajv@6.12.6

array-uniq@1.0.3

arrify@1.0.1

asn1@0.2.6

assert-plus@1.0.0

async@2.6.4

asynckit@0.4.0

available-typed-arrays@1.0.7

aws4@1.12.0

axios@0.18.1

base64-js@1.5.1

bindings@1.5.0

buffer-from@1.1.2

buffer@4.9.2

call-bind@1.0.7

capture-stack-trace@1.0.2

combined-stream@1.0.8

compressible@2.0.18

concat-stream@1.6.2

core-util-is@1.0.2

core-util-is@1.0.3

create-error-class@3.0.2

crypto-random-string@1.0.0

dashdash@1.14.1

debug@3.1.0

debug@3.2.7

define-data-property@1.1.4

delayed-stream@1.0.0

dot-prop@4.2.1

duplexify@3.7.1

ecc-jsbn@0.1.2

end-of-stream@1.4.4

ent@2.2.0

es-define-property@1.0.0

es-errors@1.3.0

es6-promise@4.2.8

es6-promisify@5.0.0

event-target-shim@5.0.1

events@1.1.1

extend@3.0.2

extsprintf@1.3.0

fast-crc32c@1.0.7

fast-deep-equal@3.1.3

fast-json-stable-stringify@2.1.0

file-uri-to-path@1.0.0

follow-redirects@1.5.10

for-each@0.3.3

form-data@2.3.3

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

15 Packages, Including:

@google-cloud/common@0.17.0

@google-cloud/storage@1.7.0

aws-sdk@2.1623.0

aws-sign2@0.7.0

azure-storage@2.10.7

caseless@0.12.0

ecdsa-sig-formatter@1.0.11

forever-agent@0.6.1

gaxios@1.8.4

google-auth-library@1.6.1

jmespath@0.16.0

oauth-sign@0.9.0

request@2.88.2

retry-axios@0.3.2

tunnel-agent@0.6.0

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

13 Packages, Including:

graceful-fs@4.2.11

har-schema@2.0.0

inherits@2.0.4

json-stringify-safe@5.0.1

log-driver@1.2.7

lru-cache@4.1.5

once@1.4.0

pseudomap@1.0.2

sax@1.2.1

signal-exit@3.0.7

wrappy@1.0.2

write-file-atomic@2.4.3

yallist@2.1.2

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

5 Packages, Including:

bcrypt-pbkdf@1.0.2

buffer-equal-constant-time@1.0.1

ieee754@1.1.13

qs@6.5.3

tough-cookie@2.5.0

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

3 Packages, Including:

configstore@3.1.5

uri-js@4.4.1

webidl-conversions@3.0.1

N/A

2 Packages, Including:

browserify-mime@1.2.9

xml2js@0.2.8

(AFL-2.1 OR BSD-3-Clause)

Permissive

1 Packages, Including:

json-schema@0.4.0

(BSD-3-Clause OR GPL-2.0)

Permissive

1 Packages, Including:

node-forge@0.10.0

BSD

Invalid

Not OSI Approved

1 Packages, Including:

sax@0.5.8

The Unlicense

Public Domain

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

private-use

modify

Cannot

include-copyright

hold-liable

Must

1 Packages, Including:

tweetnacl@0.14.5

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of solid-bucket 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
@google-cloud/storage	1.7.0	47.78 kB	Apache-2.0	prod	9 9 2
aws-sdk	2.1623.0	91.03 MB	Apache-2.0	prod	2
azure-storage	2.10.7	311.64 kB	Apache-2.0	prod	2 5 3 1
fast-crc32c	1.0.7	28.85 kB	MIT	prod

Tree

Treemap

All Versions

2.1.1

2.0.1

2.0.0

1.4.6

solid-bucket 1.1.0

Issues

2 critical severity issues

13 high severity issues

10 moderate severity issues

3 low severity issues

Licenses

MIT License

Apache License 2.0

ISC License

BSD 3-Clause "New" or "Revised" License

BSD 2-Clause "Simplified" License

N/A

(AFL-2.1 OR BSD-3-Clause)

(BSD-3-Clause OR GPL-2.0)

BSD

The Unlicense

Direct Dependencies

Visualizations

All Versions

Scan your app for security vulnerabilities and license issues

Log into your account

Create your account

solid-bucket 1.1.0

Issues

2 critical severity issues

13 high severity issues

10 moderate severity issues

3 low severity issues

Licenses

MIT License

Apache License 2.0

ISC License

BSD 3-Clause "New" or "Revised" License

BSD 2-Clause "Simplified" License

N/A

(AFL-2.1 OR BSD-3-Clause)

(BSD-3-Clause OR GPL-2.0)

BSD

The Unlicense

Direct Dependencies

Visualizations

All Versions

Scan your app for security vulnerabilities and license issues