Generated on Apr 28, 2024 via pnpm

solid-bucket 2.1.1

A universal API for Cloud Storage providers. Supports: Amazon AWS S3, Backblaze B2, Microsoft Azure Blob, DigitalOcean Spaces, Rackspace Cloud Storage, Wasabi Object Storage and any S3-Compatible cloud storage or Folder (e.g NAS)

cloud

bucket

storage

Package summary

issues

licenses

Package created

4 Feb 2018

Version published

1 Aug 2018

Maintainers

Total deps

332

Direct deps

License

MIT

Issues

13 critical severity issues

critical

growl@1.9.2

Growl before 1.10.0 vulnerable to Command Injection

Recommendation: Upgrade to version 1.10.0 or later

via: pkgcloud@1.7.0

minimist@0.0.8

Prototype Pollution in minimist

Recommendation: Upgrade to version 0.2.4 or later

via: pkgcloud@1.7.0

browserify-mime@1.2.9

Package has no specified license

Recommendation: Check the package code and files for license information

via: azure-storage@2.10.7

commander@0.6.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: pkgcloud@1.7.0

commander@2.3.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: pkgcloud@1.7.0

errs@0.3.2

Package has no specified license

Recommendation: Check the package code and files for license information

via: pkgcloud@1.7.0

extend@1.3.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: pkgcloud@1.7.0

filed@0.1.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: pkgcloud@1.7.0

jade@0.26.3

Package has no specified license

Recommendation: Check the package code and files for license information

via: pkgcloud@1.7.0

ms@0.7.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: @google-cloud/storage@1.7.0 & others

pkgcloud@1.7.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: pkgcloud@1.7.0

xml2js@0.1.14

Package has no specified license

Recommendation: Check the package code and files for license information

via: pkgcloud@1.7.0

xml2js@0.2.8

Package has no specified license

Recommendation: Check the package code and files for license information

via: azure-storage@2.10.7

Collapse

Expand

34 high severity issues

high

axios@0.17.1

Denial of Service in axios

Recommendation: Upgrade to version 0.18.1 or later

via: @google-cloud/storage@1.7.0 & others

minimatch@0.3.0

Regular Expression Denial of Service in minimatch

Recommendation: Upgrade to version 3.0.2 or later

via: pkgcloud@1.7.0

debug@2.2.0

debug Inefficient Regular Expression Complexity vulnerability

Recommendation: Upgrade to version 2.6.9 or later

via: @google-cloud/storage@1.7.0 & others

axios@0.18.1

axios Inefficient Regular Expression Complexity vulnerability

Recommendation: Upgrade to version 0.21.2 or later

via: @google-cloud/storage@1.7.0 & others

node-forge@0.10.0

Improper Verification of Cryptographic Signature in node-forge

Recommendation: Upgrade to version 1.3.0 or later

via: @google-cloud/storage@1.7.0

node-forge@0.10.0

Improper Verification of Cryptographic Signature in node-forge

Recommendation: Upgrade to version 1.3.0 or later

via: @google-cloud/storage@1.7.0

follow-redirects@1.5.10

Exposure of sensitive information in follow-redirects

Recommendation: Upgrade to version 1.14.7 or later

via: @google-cloud/storage@1.7.0

diff@1.4.0

Regular Expression Denial of Service (ReDoS)

Recommendation: Upgrade to version 3.5.0 or later

via: pkgcloud@1.7.0

minimatch@0.3.0

minimatch ReDoS vulnerability

Recommendation: Upgrade to version 3.0.5 or later

via: pkgcloud@1.7.0

fast-json-patch@0.5.7

Starcounter-Jack JSON-Patch Prototype Pollution vulnerability

Recommendation: Upgrade to version 3.1.1 or later

via: pkgcloud@1.7.0

diff@1.4.0

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: pkgcloud@1.7.0

glob@3.2.11

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: pkgcloud@1.7.0

liboneandone@1.2.0

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: pkgcloud@1.7.0

sax@0.5.8

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: azure-storage@2.10.7

gcloud@0.10.0

Package uses an invalid SPDX license ("Apache 2")

Recommendation: Validate that the package complies with your license policy

via: pkgcloud@1.7.0

mkdirp@0.3.0

Package uses an invalid SPDX license ("MIT/X11")

Recommendation: Validate that the package complies with your license policy

via: pkgcloud@1.7.0

aws-sdk@2.1608.0

Package uses postinstall script: "node scripts/warn-maintenance-mode.js"

via: aws-sdk@2.1608.0 & others

axios@0.17.1

Deprecated package

via: @google-cloud/storage@1.7.0 & others

axios@0.18.1

Deprecated package

via: @google-cloud/storage@1.7.0

azure-storage@2.10.7

Deprecated package

via: azure-storage@2.10.7

gcloud@0.10.0

Deprecated package

via: pkgcloud@1.7.0

gcs-resumable-upload@0.10.2

Deprecated package

via: @google-cloud/storage@1.7.0

grpc@1.24.11

Deprecated package

via: pkgcloud@1.7.0

grpc@1.24.11

Package uses install script: "node-pre-gyp install --fallback-to-build --library=static_library"

via: pkgcloud@1.7.0

har-validator@5.1.5

Deprecated package

via: @google-cloud/storage@1.7.0 & others

jade@0.26.3

Deprecated package

via: pkgcloud@1.7.0

minimatch@0.3.0

Deprecated package

via: pkgcloud@1.7.0

mkdirp@0.3.0

Deprecated package

via: pkgcloud@1.7.0

mkdirp@0.5.1

Deprecated package

via: pkgcloud@1.7.0

node-uuid@1.4.8

Deprecated package

via: pkgcloud@1.7.0

querystring@0.2.0

Deprecated package

via: aws-sdk@2.1608.0 & others

request@2.88.2

Deprecated package

via: @google-cloud/storage@1.7.0 & others

to-iso-string@0.0.2

Deprecated package

via: pkgcloud@1.7.0

uuid@3.4.0

Deprecated package

via: @google-cloud/storage@1.7.0 & others

Collapse

Expand

15 moderate severity issues

moderate

extend@1.3.0

Prototype Pollution in extend

Recommendation: Upgrade to version 2.0.2 or later

via: pkgcloud@1.7.0

node-forge@0.10.0

Improper Verification of Cryptographic Signature in `node-forge`

Recommendation: Upgrade to version 1.3.0 or later

via: @google-cloud/storage@1.7.0

axios@0.18.1

Axios vulnerable to Server-Side Request Forgery

Recommendation: Upgrade to version 0.21.1 or later

via: @google-cloud/storage@1.7.0 & others

protobufjs@3.8.2

Denial of Service in protobufjs

Recommendation: Upgrade to version 5.0.3 or later

via: pkgcloud@1.7.0

base64url@1.0.6

Out-of-bounds Read in base64url

Recommendation: Upgrade to version 3.0.0 or later

via: pkgcloud@1.7.0

follow-redirects@1.5.10

Exposure of Sensitive Information to an Unauthorized Actor in follow-redirects

Recommendation: Upgrade to version 1.14.8 or later

via: @google-cloud/storage@1.7.0

node-forge@0.10.0

Open Redirect in node-forge

Recommendation: Upgrade to version 1.0.0 or later

via: @google-cloud/storage@1.7.0

ms@0.7.1

Vercel ms Inefficient Regular Expression Complexity vulnerability

Recommendation: Upgrade to version 2.0.0 or later

via: @google-cloud/storage@1.7.0 & others

follow-redirects@1.5.10

Follow Redirects improperly handles URLs in the url.parse() function

Recommendation: Upgrade to version 1.15.4 or later

via: @google-cloud/storage@1.7.0

minimist@0.0.8

Prototype Pollution in minimist

Recommendation: Upgrade to version 0.2.1 or later

via: pkgcloud@1.7.0

axios@0.18.1

Axios Cross-Site Request Forgery Vulnerability

Recommendation: Upgrade to version 0.28.0 or later

via: @google-cloud/storage@1.7.0 & others

tough-cookie@2.5.0

tough-cookie Prototype Pollution vulnerability

Recommendation: Upgrade to version 4.1.3 or later

via: @google-cloud/storage@1.7.0 & others

xml2js@0.2.8

xml2js is vulnerable to prototype pollution

Recommendation: Upgrade to version 0.5.0 or later

via: azure-storage@2.10.7 & others

request@2.88.2

Server-Side Request Forgery in Request

Recommendation: None

via: @google-cloud/storage@1.7.0 & others

follow-redirects@1.5.10

follow-redirects' Proxy-Authorization header kept across hosts

Recommendation: Upgrade to version 1.15.6 or later

via: @google-cloud/storage@1.7.0

Collapse

Expand

9 low severity issues

low

node-forge@0.10.0

Prototype Pollution in node-forge debug API.

Recommendation: Upgrade to version 1.0.0 or later

via: @google-cloud/storage@1.7.0

node-forge@0.10.0

URL parsing in node-forge could lead to undesired behavior.

Recommendation: Upgrade to version 1.0.0 or later

via: @google-cloud/storage@1.7.0

debug@2.2.0

Regular Expression Denial of Service in debug

Recommendation: Upgrade to version 2.6.9 or later

via: @google-cloud/storage@1.7.0 & others

diff@1.4.0

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: pkgcloud@1.7.0

glob@3.2.11

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: pkgcloud@1.7.0

liboneandone@1.2.0

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: pkgcloud@1.7.0

sax@0.5.8

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: azure-storage@2.10.7

gcloud@0.10.0

Package uses a license that is not OSI approved ("Apache 2")

Recommendation: Read and validate the license terms

via: pkgcloud@1.7.0

mkdirp@0.3.0

Package uses a license that is not OSI approved ("MIT/X11")

Recommendation: Read and validate the license terms

via: pkgcloud@1.7.0

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

233 Packages, Including:

@types/bytebuffer@5.0.48

@types/long@3.0.32

@types/node@20.12.7

abort-controller@3.0.0

agent-base@4.3.0

agent-base@6.0.2

ajv@6.12.6

ansi-regex@2.1.1

ansi-regex@5.0.1

array-uniq@1.0.3

arrify@1.0.1

asn1@0.2.6

assert-plus@1.0.0

async@2.6.4

asynckit@0.4.0

available-typed-arrays@1.0.7

aws4@1.12.0

axios@0.17.1

axios@0.18.1

balanced-match@1.0.2

base64-js@1.5.1

base64url@0.0.6

base64url@1.0.6

bindings@1.5.0

brace-expansion@1.1.11

buffer-from@1.1.2

buffer@4.9.2

call-bind@1.0.7

camelcase-keys@1.0.0

camelcase@1.2.1

camelcase@2.1.1

capture-stack-trace@1.0.2

code-point-at@1.1.0

colour@0.7.1

combined-stream@1.0.8

compressible@2.0.18

concat-map@0.0.1

concat-stream@1.4.11

concat-stream@1.6.2

core-util-is@1.0.2

core-util-is@1.0.3

create-error-class@3.0.2

crypto-random-string@1.0.0

dashdash@1.14.1

debug@2.2.0

debug@3.1.0

debug@3.2.7

debug@4.3.4

decamelize@1.2.0

define-data-property@1.1.4

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

43 Packages, Including:

abbrev@1.1.1

aproba@2.0.0

are-we-there-yet@2.0.0

chownr@2.0.0

cliui@3.2.0

color-support@1.1.3

console-control-strings@1.1.0

fs-minipass@2.1.0

fs.realpath@1.0.0

gauge@3.0.2

glob@7.2.3

graceful-fs@4.2.11

har-schema@2.0.0

has-unicode@2.0.1

inflight@1.0.6

inherits@2.0.4

json-stringify-safe@5.0.1

log-driver@1.2.7

lru-cache@2.7.3

lru-cache@4.1.5

lru-cache@6.0.0

minimatch@3.1.2

minipass@3.3.6

minipass@5.0.0

nopt@5.0.0

npmlog@5.0.1

once@1.4.0

pseudomap@1.0.2

rimraf@3.0.2

sax@1.2.1

sax@1.3.0

semver@6.3.1

semver@7.6.0

set-blocking@2.0.0

sigmund@1.0.1

signal-exit@3.0.7

tar@6.2.1

wide-align@1.1.5

wrappy@1.0.2

write-file-atomic@2.4.3

y18n@3.2.2

yallist@2.1.2

yallist@4.0.0

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

26 Packages, Including:

@google-cloud/common@0.17.0

@google-cloud/storage@1.7.0

ascli@0.3.0

ascli@1.0.1

aws-sdk@2.1608.0

aws-sign2@0.7.0

azure-storage@2.10.7

bufferview@1.0.1

bytebuffer@3.5.5

bytebuffer@5.0.1

caseless@0.12.0

detect-libc@2.0.3

ecdsa-sig-formatter@1.0.11

forever-agent@0.6.1

gaxios@1.8.4

google-auth-library@1.6.1

grpc@1.24.11

jmespath@0.16.0

long@2.4.0

long@3.2.0

oauth-sign@0.9.0

protobufjs@3.8.2

protobufjs@5.0.3

request@2.88.2

retry-axios@0.3.2

tunnel-agent@0.6.0

N/A

11 Packages, Including:

browserify-mime@1.2.9

commander@0.6.1

commander@2.3.0

errs@0.3.2

extend@1.3.0

filed@0.1.0

jade@0.26.3

ms@0.7.1

pkgcloud@1.7.0

xml2js@0.1.14

xml2js@0.2.8

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

7 Packages, Including:

@mapbox/node-pre-gyp@1.0.11

bcrypt-pbkdf@1.0.2

buffer-equal-constant-time@1.0.1

ieee754@1.1.13

qs@6.12.1

qs@6.5.3

tough-cookie@2.5.0

BSD

Invalid

Not OSI Approved

4 Packages, Including:

diff@1.4.0

glob@3.2.11

liboneandone@1.2.0

sax@0.5.8

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

3 Packages, Including:

configstore@3.1.5

uri-js@4.4.1

webidl-conversions@3.0.1

Apache 2

Invalid

Not OSI Approved

1 Packages, Including:

gcloud@0.10.0

(AFL-2.1 OR BSD-3-Clause)

Permissive

1 Packages, Including:

json-schema@0.4.0

MIT/X11

Invalid

Not OSI Approved

1 Packages, Including:

mkdirp@0.3.0

(BSD-3-Clause OR GPL-2.0)

Permissive

1 Packages, Including:

node-forge@0.10.0

The Unlicense

Public Domain

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

private-use

modify

Cannot

include-copyright

hold-liable

Must

1 Packages, Including:

tweetnacl@0.14.5

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of solid-bucket 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
@google-cloud/storage	1.7.0	47.78 kB	Apache-2.0	prod	1 12 10 3
aws-sdk	2.1608.0	91.06 MB	Apache-2.0	prod	2
axios	0.17.1	79.28 kB	MIT	prod peer	1 4 3 1
azure-storage	2.10.7	311.64 kB	Apache-2.0	prod	2 5 3 1
fast-crc32c	1.0.7	28.85 kB	MIT	prod
form-data	2.5.1	9.87 kB	MIT	prod
pkgcloud	1.7.0	190.05 kB	UNKNOWN	prod	11 24 8 6