Hold on, we're currently generating a fresh version of this report

Generated on Apr 20, 2024 via pnpm

strong-pm 6.0.1

StrongLoop Process Manager

Package summary

176

issues

25

licenses

Package created

21 Jul 2014

Version published

3 Apr 2017

Maintainers

18

Total deps

726

Direct deps

29

License

Artistic-2.0

Issues

176

42 critical severity issues

swagger-ui@2.0.24

Cross-Site Scripting in swagger-ui

Recommendation: Upgrade to version 2.2.1 or later

via: strong-mesh-models@8.1.1

swagger-ui@2.0.24

Cross-Site Scripting in swagger-ui

Recommendation: Upgrade to version 2.2.1 or later

via: strong-mesh-models@8.1.1

swagger-ui@2.0.24

Cross-site scripting in Swagger-UI

Recommendation: Upgrade to version 3.23.11 or later

via: strong-mesh-models@8.1.1

ejs@2.7.4

ejs template injection vulnerability

Recommendation: Upgrade to version 3.1.7 or later

via: strong-mesh-models@8.1.1

nodemailer@2.7.2

Command injection in nodemailer

Recommendation: Upgrade to version 6.4.16 or later

via: strong-mesh-models@8.1.1

shell-quote@0.0.1

Potential Command Injection in shell-quote

Recommendation: Upgrade to version 1.6.1 or later

via: strong-fork-cicada@1.1.2 & others

swagger-ui@2.0.24

Cross-Site Scripting in swagger-ui

Recommendation: Upgrade to version 2.2.1 or later

via: strong-mesh-models@8.1.1

uglify-js@2.3.6

Incorrect Handling of Non-Boolean Comparisons During Minification in uglify-js

Recommendation: Upgrade to version 2.4.24 or later

via: strong-mesh-models@8.1.1

morgan@1.6.1

Code Injection in morgan

Recommendation: Upgrade to version 1.9.1 or later

via: strong-mesh-models@8.1.1

lodash@3.10.1

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.12 or later

via: lodash@3.10.1 & others

handlebars@1.0.12

Prototype Pollution in handlebars

Recommendation: Upgrade to version 3.0.8 or later

via: strong-mesh-models@8.1.1

handlebars@1.0.12

Remote code execution in handlebars when compiling templates

Recommendation: Upgrade to version 4.7.7 or later

via: strong-mesh-models@8.1.1

underscore@1.7.0

Arbitrary Code Execution in underscore

Recommendation: Upgrade to version 1.12.1 or later

via: strong-mesh-models@8.1.1 & others

handlebars@1.0.12

Prototype Pollution in handlebars

Recommendation: Upgrade to version 4.7.7 or later

via: strong-mesh-models@8.1.1

shell-quote@0.0.1

Improper Neutralization of Special Elements used in a Command in Shell-quote

Recommendation: Upgrade to version 1.7.3 or later

via: strong-fork-cicada@1.1.2 & others

minimist@0.0.8

Prototype Pollution in minimist

Recommendation: Upgrade to version 0.2.4 or later

via: strong-mesh-models@8.1.1 & others

base64-js@0.0.2

Package has no specified license

Recommendation: Check the package code and files for license information

via: strong-mesh-models@8.1.1

bytes@1.0.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: minkelite@1.2.5

component-bind@1.0.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: strong-runner@7.0.0

component-inherit@0.0.3

Package has no specified license

Recommendation: Check the package code and files for license information

via: strong-runner@7.0.0

cookie@0.1.2

Package has no specified license

Recommendation: Check the package code and files for license information

via: minkelite@1.2.5

debug@1.0.5

Package has no specified license

Recommendation: Check the package code and files for license information

via: strong-mesh-models@8.1.1 & others

debug@2.0.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: minkelite@1.2.5

duplex@1.0.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: strong-mesh-models@8.1.1

escape-html@1.0.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: minkelite@1.2.5

handlebars@1.0.12

Package has no specified license

Recommendation: Check the package code and files for license information

via: strong-mesh-models@8.1.1

indexof@0.0.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: strong-runner@7.0.0

inherits@1.0.2

Package has no specified license

Recommendation: Check the package code and files for license information

via: strong-fork-cicada@1.1.2 & others

mime@1.2.11

Package has no specified license

Recommendation: Check the package code and files for license information

via: strong-mesh-models@8.1.1 & others

ms@0.6.2

Package has no specified license

Recommendation: Check the package code and files for license information

via: minkelite@1.2.5

ms@0.7.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: strong-mesh-models@8.1.1

msgpack-js@0.3.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: strong-mesh-models@8.1.1

mux-demux@3.7.9

Package has no specified license

Recommendation: Check the package code and files for license information

via: strong-mesh-models@8.1.1

options@0.0.6

Package has no specified license

Recommendation: Check the package code and files for license information

via: strong-control-channel@2.2.3 & others

path-to-regexp@0.1.3

Package has no specified license

Recommendation: Check the package code and files for license information

via: minkelite@1.2.5

sprintf@0.1.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: strong-mesh-models@8.1.1

sse@0.0.7

Package has no specified license

Recommendation: Check the package code and files for license information

via: strong-mesh-models@8.1.1

statsd-udpkv-backend@0.2.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: strong-runner@7.0.0

statware@1.1.3

Package has no specified license

Recommendation: Check the package code and files for license information

via: strong-runner@7.0.0

uglify-js@2.3.6

Package has no specified license

Recommendation: Check the package code and files for license information

via: strong-mesh-models@8.1.1

uid2@0.0.3

Package has no specified license

Recommendation: Check the package code and files for license information

via: strong-mesh-models@8.1.1

underscore@1.4.4

Package has no specified license

Recommendation: Check the package code and files for license information

via: strong-runner@7.0.0

77 high severity issues

handlebars@1.0.12

Arbitrary Code Execution in handlebars

Recommendation: Upgrade to version 3.0.8 or later

via: strong-mesh-models@8.1.1

handlebars@1.0.12

Prototype Pollution in handlebars

Recommendation: Upgrade to version 3.0.8 or later

via: strong-mesh-models@8.1.1

qs@4.0.0

Prototype Pollution Protection Bypass in qs

Recommendation: Upgrade to version 6.0.4 or later

via: strong-mesh-models@8.1.1 & others

tar@2.2.2

Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization

Recommendation: Upgrade to version 3.2.2 or later

via: strong-docker-build@1.1.1 & others

base64-url@1.2.1

Out-of-bounds Read in base64-url

Recommendation: Upgrade to version 2.0.0 or later

via: strong-mesh-models@8.1.1

negotiator@0.5.3

Regular Expression Denial of Service in negotiator

Recommendation: Upgrade to version 0.6.1 or later

via: strong-mesh-models@8.1.1 & others

jszip@2.5.0

JSZip contains Path Traversal via loadAsync

Recommendation: Upgrade to version 3.8.0 or later

via: strong-runner@7.0.0

uglify-js@2.3.6

Regular Expression Denial of Service in uglify-js

Recommendation: Upgrade to version 2.6.0 or later

via: strong-mesh-models@8.1.1

fresh@0.3.0

Regular Expression Denial of Service in fresh

Recommendation: Upgrade to version 0.5.2 or later

via: strong-mesh-models@8.1.1 & others

mime@1.3.4

mime Regular Expression Denial of Service when MIME lookup performed on untrusted user input

Recommendation: Upgrade to version 1.4.1 or later

via: strong-mesh-models@8.1.1 & others

swagger-ui@2.0.24

Cross-Site Scripting in swagger-ui

Recommendation: Upgrade to version 2.2.1 or later

via: strong-mesh-models@8.1.1

debug@1.0.5

debug Inefficient Regular Expression Complexity vulnerability

Recommendation: Upgrade to version 2.6.9 or later

via: strong-mesh-models@8.1.1 & others

lodash@3.10.1

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.11 or later

via: lodash@3.10.1 & others

ms@0.6.2

Regular Expression Denial of Service in ms

Recommendation: Upgrade to version 0.7.1 or later

via: minkelite@1.2.5

handlebars@1.0.12

Arbitrary Code Execution in Handlebars

Recommendation: Upgrade to version 3.0.8 or later

via: strong-mesh-models@8.1.1

handlebars@1.0.12

Prototype Pollution in handlebars

Recommendation: Upgrade to version 3.0.7 or later

via: strong-mesh-models@8.1.1

tar@2.2.2

Arbitrary File Creation/Overwrite on Windows via insufficient relative path sanitization

Recommendation: Upgrade to version 4.4.18 or later

via: strong-docker-build@1.1.1 & others

lodash@3.10.1

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.19 or later

via: lodash@3.10.1 & others

handlebars@1.0.12

Arbitrary Code Execution in handlebars

Recommendation: Upgrade to version 3.0.8 or later

via: strong-mesh-models@8.1.1

ssh2@0.4.15

OS Command Injection in ssh2

Recommendation: Upgrade to version 1.4.0 or later

via: strong-mesh-models@8.1.1 & others

qs@4.0.0

qs vulnerable to Prototype Pollution

Recommendation: Upgrade to version 6.2.4 or later

via: strong-mesh-models@8.1.1 & others

lodash@3.10.1

Command Injection in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: lodash@3.10.1 & others

canonical-json@0.0.4

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: strong-mesh-models@8.1.1

esprima@1.2.5

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: strong-runner@7.0.0

estraverse@1.9.3

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: strong-runner@7.0.0

glob-to-regexp@0.0.1

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: strong-runner@7.0.0

qs@2.2.4

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: minkelite@1.2.5

qs@2.3.3

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: minkelite@1.2.5

source-map@0.1.43

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: strong-mesh-models@8.1.1

stream-counter@0.2.0

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: strong-mesh-models@8.1.1

ycssmin@1.0.1

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: strong-mesh-models@8.1.1

minkelite@1.2.5

Package uses an invalid SPDX license ("SEE LICENSE IN LICENSE.md")

Recommendation: Validate that the package complies with your license policy

via: minkelite@1.2.5

strong-mesh-models@8.1.1

Package uses an invalid SPDX license ("SEE LICENSE IN LICENSE.md")

Recommendation: Validate that the package complies with your license policy

via: strong-mesh-models@8.1.1

strong-trace@1.3.4

Package uses an invalid SPDX license ("SEE LICENSE IN LICENSE.md")

Recommendation: Validate that the package complies with your license policy

via: strong-runner@7.0.0

strongloop-license@1.5.2

Package uses an invalid SPDX license ("SEE LICENSE IN LICENSE.md")

Recommendation: Validate that the package complies with your license policy

via: strong-runner@7.0.0

loopback-explorer@1.8.0

Package uses an invalid SPDX license ("Dual MIT/StrongLoop")

Recommendation: Validate that the package complies with your license policy

via: strong-mesh-models@8.1.1

strong-spawn-npm@1.0.0

Package uses an invalid SPDX license ("Dual MIT/StrongLoop")

Recommendation: Validate that the package complies with your license policy

via: strong-spawn-npm@1.0.0

btoa@1.1.1

Package uses an invalid SPDX license ("Apache2")

Recommendation: Validate that the package complies with your license policy

via: strong-mesh-models@8.1.1

jszip@2.5.0

Package uses an invalid SPDX license ("MIT or GPLv3")

Recommendation: Validate that the package complies with your license policy

via: strong-runner@7.0.0

less@1.4.2

Package uses an invalid SPDX license ("Apache v2")

Recommendation: Validate that the package complies with your license policy

via: strong-mesh-models@8.1.1

optimist@0.3.7

Package uses an invalid SPDX license ("MIT/X11")

Recommendation: Validate that the package complies with your license policy

via: strong-mesh-models@8.1.1

rc@1.2.8

Package uses a custom license expression: `(BSD-2-Clause OR MIT OR Apache-2.0)`

Recommendation: Validate that the license expression complies with your license policy

via: loopback-connector-sqlite3@1.2.0

spdx-exceptions@2.5.0

Package uses an atypical license ("CC-BY-3.0")

Recommendation: Read and validate the license terms

via: strong-mesh-models@8.1.1 & others

swagger-client@2.0.36

Package uses an invalid SPDX license ("apache 2.0")

Recommendation: Validate that the package complies with your license policy

via: strong-mesh-models@8.1.1

swagger-ui@2.0.24

Package uses an invalid SPDX license ("Apache")

Recommendation: Validate that the package complies with your license policy

via: strong-mesh-models@8.1.1

appmetrics@3.1.3

Package uses install script: "node extract_all_binaries.js || node-gyp rebuild"

via: strong-runner@7.0.0

buildmail@4.0.1

Deprecated package

via: strong-mesh-models@8.1.1

coffee-script@1.6.3

Deprecated package

via: strong-mesh-models@8.1.1

connect@2.30.2

Deprecated package

via: strong-mesh-models@8.1.1

core-js-pure@3.37.0

Package uses postinstall script: "node -e "try{require('./postinstall')}catch(e){}""

via: strong-mesh-models@8.1.1 & others

debug@4.1.1

Deprecated package

via: strong-runner@7.0.0

ejs@2.7.4

Package uses postinstall script: "node ./postinstall.js"

via: strong-mesh-models@8.1.1

har-validator@5.1.5

Deprecated package

via: strong-mesh-models@8.1.1

is-buffer@1.0.2

Deprecated package

via: minkelite@1.2.5

loopback-boot@2.28.0

Deprecated package

via: strong-mesh-models@8.1.1

loopback-datasource-juggler@2.59.3

Deprecated package

via: strong-mesh-models@8.1.1

loopback-explorer@1.8.0

Deprecated package

via: strong-mesh-models@8.1.1

loopback@2.42.0

Deprecated package

via: strong-mesh-models@8.1.1

mailcomposer@4.0.1

Deprecated package

via: strong-mesh-models@8.1.1

mkdirp@0.3.5

Deprecated package

via: strong-fork-cicada@1.1.2 & others

mkdirp@0.5.1

Deprecated package

via: strong-mesh-models@8.1.1

node-report@2.2.11

Deprecated package

via: strong-runner@7.0.0

node-uuid@1.4.8

Deprecated package

via: http-auth@2.4.11 & others

nodemailer@2.7.2

Deprecated package

via: strong-mesh-models@8.1.1

readdir-scoped-modules@1.1.0

Deprecated package

via: strong-mesh-models@8.1.1 & others

request@2.88.2

Deprecated package

via: strong-mesh-models@8.1.1

socks@1.1.9

Deprecated package

via: strong-mesh-models@8.1.1

sprintf@0.1.1

Deprecated package

via: strong-mesh-models@8.1.1

sprintf@0.1.5

Deprecated package

via: strong-mesh-models@8.1.1

sqlite3@3.1.13

Package uses install script: "node-pre-gyp install --fallback-to-build"

via: loopback-connector-sqlite3@1.2.0 & others

stable@0.1.8

Deprecated package

via: strong-mesh-models@8.1.1

strong-remoting@2.36.1

Deprecated package

via: strong-mesh-models@8.1.1

swagger-client@2.0.36

Deprecated package

via: strong-mesh-models@8.1.1

swagger-ui@2.0.24

Deprecated package

via: strong-mesh-models@8.1.1

tar@2.2.2

Deprecated package

via: strong-docker-build@1.1.1 & others

tree-sitter@0.20.4

Package uses install script: "prebuild-install || node-gyp rebuild"

via: strong-mesh-models@8.1.1 & others

uuid@3.4.0

Deprecated package

via: strong-mesh-models@8.1.1

31 moderate severity issues

lodash@3.10.1

Regular Expression Denial of Service (ReDoS) in lodash

Recommendation: Upgrade to version 4.17.11 or later

via: lodash@3.10.1 & others

mem@1.1.0

Denial of Service in mem

Recommendation: Upgrade to version 4.0.0 or later

via: strong-mesh-models@8.1.1 & others

swagger-ui@2.0.24

Reverse Tabnapping in swagger-ui

Recommendation: Upgrade to version 3.18.0 or later

via: strong-mesh-models@8.1.1

swagger-ui@2.0.24

Cross-Site Scripting in swagger-ui

Recommendation: Upgrade to version 2.2.1 or later

via: strong-mesh-models@8.1.1

swagger-ui@2.0.24

Cross-Site Scripting in swagger-ui

Recommendation: Upgrade to version 2.2.1 or later

via: strong-mesh-models@8.1.1

swagger-ui@2.0.24

Cross-Site Scripting in swagger-ui

Recommendation: Upgrade to version 2.2.1 or later

via: strong-mesh-models@8.1.1

swagger-ui@2.0.24

Cross-Site Scripting in swagger-ui

Recommendation: Upgrade to version 3.0.13 or later

via: strong-mesh-models@8.1.1

handlebars@1.0.12

Cross-Site Scripting in handlebars

Recommendation: Upgrade to version 4.0.0 or later

via: strong-mesh-models@8.1.1

cookiejar@1.3.1

cookiejar Regular Expression Denial of Service via Cookie.parse function

Recommendation: Upgrade to version 2.1.4 or later

via: strong-mesh-models@8.1.1

swagger-ui@2.0.24

Spoofing attack in swagger-ui

Recommendation: Upgrade to version 4.1.3 or later

via: strong-mesh-models@8.1.1

swagger-ui@2.0.24

Improper Neutralization of Input During Web Page Generation in swagger-ui

Recommendation: Upgrade to version 2.2.1 or later

via: strong-mesh-models@8.1.1

nodemailer@2.7.2

Header injection in nodemailer

Recommendation: Upgrade to version 6.6.1 or later

via: strong-mesh-models@8.1.1

bl@0.9.5

Remote Memory Exposure in bl

Recommendation: Upgrade to version 1.2.3 or later

via: bl@0.9.5

swagger-ui@2.0.24

Server side request forgery in SwaggerUI

Recommendation: Upgrade to version 4.1.3 or later

via: strong-mesh-models@8.1.1

jszip@2.5.0

jszip Vulnerable to Prototype Pollution

Recommendation: Upgrade to version 2.7.0 or later

via: strong-runner@7.0.0

swagger-ui@2.0.24

Cross-Site Scripting in swagger-ui

Recommendation: Upgrade to version 3.20.9 or later

via: strong-mesh-models@8.1.1

ms@0.7.1

Vercel ms Inefficient Regular Expression Complexity vulnerability

Recommendation: Upgrade to version 2.0.0 or later

via: strong-mesh-models@8.1.1 & others

lodash@3.10.1

Regular Expression Denial of Service (ReDoS) in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: lodash@3.10.1 & others

send@0.9.3

Root Path Disclosure in send

Recommendation: Upgrade to version 0.11.1 or later

via: minkelite@1.2.5

nodemailer@2.7.2

nodemailer ReDoS when trying to send a specially crafted email

Recommendation: Upgrade to version 6.9.9 or later

via: strong-mesh-models@8.1.1

minimist@0.0.8

Prototype Pollution in minimist

Recommendation: Upgrade to version 0.2.1 or later

via: strong-mesh-models@8.1.1 & others

tough-cookie@2.5.0

tough-cookie Prototype Pollution vulnerability

Recommendation: Upgrade to version 4.1.3 or later

via: strong-mesh-models@8.1.1

xml2js@0.4.23

xml2js is vulnerable to prototype pollution

Recommendation: Upgrade to version 0.5.0 or later

via: strong-mesh-models@8.1.1

request@2.88.2

Server-Side Request Forgery in Request

Recommendation: None

via: strong-mesh-models@8.1.1

express@3.21.2

Express.js Open Redirect in malformed URLs

Recommendation: Upgrade to version 4.19.2 or later

via: strong-mesh-models@8.1.1 & others

tar@2.2.2

Denial of service while parsing a tar file due to lack of folders count validation

Recommendation: Upgrade to version 6.2.1 or later

via: strong-docker-build@1.1.1 & others

eyes@0.1.8

Package has no specified source code repository

via: strong-mesh-models@8.1.1

has-binary2@1.0.3

Package has no specified source code repository

via: strong-runner@7.0.0

indexof@0.0.1

Package has no specified source code repository

via: strong-runner@7.0.0

sprintf@0.1.1

Package has no specified source code repository

via: strong-mesh-models@8.1.1

uid2@0.0.3

Package has no specified source code repository

via: strong-mesh-models@8.1.1

26 low severity issues

lodash@3.10.1

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.5 or later

via: lodash@3.10.1 & others

chownr@0.0.2

Time-of-check Time-of-use (TOCTOU) Race Condition in chownr

Recommendation: Upgrade to version 1.1.0 or later

via: strong-service-install@2.0.3

debug@4.1.1

Regular Expression Denial of Service in debug

Recommendation: Upgrade to version 4.3.1 or later

via: strong-runner@7.0.0

debug@1.0.5

Regular Expression Denial of Service in debug

Recommendation: Upgrade to version 2.6.9 or later

via: strong-mesh-models@8.1.1 & others

canonical-json@0.0.4

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: strong-mesh-models@8.1.1

esprima@1.2.5

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: strong-runner@7.0.0

estraverse@1.9.3

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: strong-runner@7.0.0

glob-to-regexp@0.0.1

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: strong-runner@7.0.0

qs@2.2.4

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: minkelite@1.2.5

qs@2.3.3

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: minkelite@1.2.5

source-map@0.1.43

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: strong-mesh-models@8.1.1

stream-counter@0.2.0

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: strong-mesh-models@8.1.1

ycssmin@1.0.1

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: strong-mesh-models@8.1.1

minkelite@1.2.5

Package uses a license that is not OSI approved ("SEE LICENSE IN LICENSE.md")

Recommendation: Read and validate the license terms

via: minkelite@1.2.5

strong-mesh-models@8.1.1

Package uses a license that is not OSI approved ("SEE LICENSE IN LICENSE.md")

Recommendation: Read and validate the license terms

via: strong-mesh-models@8.1.1

strong-trace@1.3.4

Package uses a license that is not OSI approved ("SEE LICENSE IN LICENSE.md")

Recommendation: Read and validate the license terms

via: strong-runner@7.0.0

strongloop-license@1.5.2

Package uses a license that is not OSI approved ("SEE LICENSE IN LICENSE.md")

Recommendation: Read and validate the license terms

via: strong-runner@7.0.0

loopback-explorer@1.8.0

Package uses a license that is not OSI approved ("Dual MIT/StrongLoop")

Recommendation: Read and validate the license terms

via: strong-mesh-models@8.1.1

strong-spawn-npm@1.0.0

Package uses a license that is not OSI approved ("Dual MIT/StrongLoop")

Recommendation: Read and validate the license terms

via: strong-spawn-npm@1.0.0

btoa@1.1.1

Package uses a license that is not OSI approved ("Apache2")

Recommendation: Read and validate the license terms

via: strong-mesh-models@8.1.1

less@1.4.2

Package uses a license that is not OSI approved ("Apache v2")

Recommendation: Read and validate the license terms

via: strong-mesh-models@8.1.1

optimist@0.3.7

Package uses a license that is not OSI approved ("MIT/X11")

Recommendation: Read and validate the license terms

via: strong-mesh-models@8.1.1

spdx-exceptions@2.5.0

Package uses a license that is not OSI approved ("CC-BY-3.0")

Recommendation: Read and validate the license terms

via: strong-mesh-models@8.1.1 & others

spdx-license-ids@3.0.17

Package uses a license that is not OSI approved ("CC0-1.0")

Recommendation: Read and validate the license terms

via: strong-mesh-models@8.1.1 & others

swagger-client@2.0.36

Package uses a license that is not OSI approved ("apache 2.0")

Recommendation: Read and validate the license terms

via: strong-mesh-models@8.1.1

swagger-ui@2.0.24

Package uses a license that is not OSI approved ("Apache")

Recommendation: Read and validate the license terms

via: strong-mesh-models@8.1.1

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

527 Packages, Including:

@babel/runtime-corejs3@7.24.4

@types/node@10.17.60

@types/ramda@0.29.12

accept-language@3.0.18

accepts@1.1.4

accepts@1.2.13

accepts@1.3.8

addressparser@1.0.1

after@0.8.2

ago@1.0.0

ajv@6.12.6

apache-crypt@1.1.2

apache-md5@1.0.6

argparse@1.0.10

array-buffer-byte-length@1.0.1

array-flatten@1.1.1

arraybuffer.prototype.slice@1.0.3

arraybuffer.slice@0.0.7

asap@2.0.6

asn1@0.2.6

assert-plus@1.0.0

async@0.2.10

async@0.9.2

async@1.0.0

async@1.5.2

async@2.6.4

asynckit@0.4.0

available-typed-arrays@1.0.7

aws4@1.12.0

ax@0.1.8

axios@1.6.8

backo2@1.0.2

balanced-match@1.0.2

base64-arraybuffer@0.1.4

base64-js@1.0.2

base64-js@1.5.1

base64id@2.0.0

basic-auth-connect@1.0.0

basic-auth@1.0.4

batch@0.5.3

bcp47@1.1.2

bcryptjs@2.4.3

bl@0.9.5

bl@1.2.3

bl@4.1.0

blob@0.0.5

bluebird@3.7.2

body-parser@1.13.3

body-parser@1.20.2

body-parser@1.9.3

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

47 Packages, Including:

@swagger-api/apidom-ast@0.99.1

@swagger-api/apidom-core@0.99.1

@swagger-api/apidom-error@0.99.0

@swagger-api/apidom-json-pointer@0.99.1

@swagger-api/apidom-ns-api-design-systems@0.99.1

@swagger-api/apidom-ns-asyncapi-2@0.99.1

@swagger-api/apidom-ns-json-schema-draft-4@0.99.1

@swagger-api/apidom-ns-json-schema-draft-6@0.99.1

@swagger-api/apidom-ns-json-schema-draft-7@0.99.1

@swagger-api/apidom-ns-openapi-2@0.99.1

@swagger-api/apidom-ns-openapi-3-0@0.99.1

@swagger-api/apidom-ns-openapi-3-1@0.99.1

@swagger-api/apidom-ns-workflows-1@0.99.1

@swagger-api/apidom-parser-adapter-api-design-systems-json@0.99.1

@swagger-api/apidom-parser-adapter-api-design-systems-yaml@0.99.1

@swagger-api/apidom-parser-adapter-asyncapi-json-2@0.99.1

@swagger-api/apidom-parser-adapter-asyncapi-yaml-2@0.99.1

@swagger-api/apidom-parser-adapter-json@0.99.1

@swagger-api/apidom-parser-adapter-openapi-json-2@0.99.1

@swagger-api/apidom-parser-adapter-openapi-json-3-0@0.99.1

@swagger-api/apidom-parser-adapter-openapi-json-3-1@0.99.1

@swagger-api/apidom-parser-adapter-openapi-yaml-2@0.99.1

@swagger-api/apidom-parser-adapter-openapi-yaml-3-0@0.99.1

@swagger-api/apidom-parser-adapter-openapi-yaml-3-1@0.99.1

@swagger-api/apidom-parser-adapter-workflows-json-1@0.99.1

@swagger-api/apidom-parser-adapter-workflows-yaml-1@0.99.1

@swagger-api/apidom-parser-adapter-yaml-1-2@0.99.1

@swagger-api/apidom-reference@0.99.1

appmetrics-dash@3.4.0

appmetrics@3.1.3

aws-sign2@0.7.0

caseless@0.12.0

detect-libc@2.0.3

docker-modem@1.0.9

dockerode@2.5.8

ejs@2.7.4

forever-agent@0.6.1

g11n-pipeline@2.0.6

js2xmlparser@1.0.0

oauth-sign@0.9.0

request@2.88.2

short-unique-id@5.0.3

spdx-correct@3.2.0

swagger-client@3.27.0

ts-toolbelt@9.6.0

tunnel-agent@0.6.0

validate-npm-package-license@3.0.4

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

44 Packages, Including:

base64-url@1.2.1

block-stream@0.0.9

chownr@0.0.2

chownr@1.1.4

dezalgo@1.0.4

fs.realpath@1.0.0

fstream-ignore@1.0.5

fstream-npm@1.2.1

fstream@1.0.12

glob@7.2.3

graceful-fs@4.2.11

har-schema@2.0.0

heapdump@0.3.15

hosted-git-info@2.8.9

inflight@1.0.6

inherits@2.0.3

inherits@2.0.4

ini@1.3.8

isexe@2.0.0

json-stringify-safe@5.0.1

lru-cache@4.1.5

lru-cache@6.0.0

minimatch@3.1.2

minimatch@7.4.6

npm-normalize-package-bin@1.0.1

once@1.4.0

pseudomap@1.0.2

read-installed@4.0.3

read-package-json@2.1.2

readdir-scoped-modules@1.1.0

rimraf@2.7.1

sax@1.3.0

semver@5.7.2

semver@7.6.0

setprototypeof@1.2.0

signal-exit@3.0.7

slide@1.1.6

split-ca@1.0.1

tar@2.2.2

uid-number@0.0.5

which@1.3.1

wrappy@1.0.2

yallist@2.1.2

yallist@4.0.0

N/A

N/A

26 Packages, Including:

base64-js@0.0.2

bytes@1.0.0

component-bind@1.0.0

component-inherit@0.0.3

cookie@0.1.2

debug@1.0.5

debug@2.0.0

duplex@1.0.0

escape-html@1.0.1

handlebars@1.0.12

indexof@0.0.1

inherits@1.0.2

mime@1.2.11

ms@0.6.2

ms@0.7.1

msgpack-js@0.3.0

mux-demux@3.7.9

options@0.0.6

path-to-regexp@0.1.3

sprintf@0.1.1

sse@0.0.7

statsd-udpkv-backend@0.2.1

statware@1.1.3

uglify-js@2.3.6

uid2@0.0.3

underscore@1.4.4

Artistic License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

use-trademark

hold-liable

Must

rename

state-changes

include-original

include-install-instructions

18 Packages, Including:

loopback-connector-sqlite3@1.2.0

strong-cluster-control@2.2.4

strong-control-channel@2.2.3

strong-docker-build@1.1.1

strong-globalize@2.10.0

strong-globalize@4.1.3

strong-log-transformer@1.0.6

strong-npm-ls@1.0.10

strong-pm@6.0.1

strong-remoting@2.36.1

strong-runner@7.0.0

strong-service-install@2.0.3

strong-service-systemd@1.2.3

strong-service-upstart@1.1.3

strong-statsd@2.0.7

strong-supervisor@6.2.0

strong-tunnel@1.1.6

strong-url-defaults@1.2.3

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

17 Packages, Including:

bcrypt-pbkdf@1.0.2

charenc@0.0.2

crypt@0.0.2

ieee754@1.2.1

md5@2.0.0

md5@2.3.0

qs@4.0.0

qs@6.11.0

qs@6.12.1

qs@6.5.3

ramda-adjunct@4.1.1

sprintf-js@1.0.3

sprintf-js@1.1.3

sprintf@0.1.5

sqlite3@3.1.13

tough-cookie@2.5.0

unix-crypt-td-js@1.1.4

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

16 Packages, Including:

async-listener@0.6.10

continuation-local-storage@3.2.1

domelementtype@1.3.1

domelementtype@2.3.0

domhandler@2.4.2

domutils@1.7.0

dotenv@1.2.0

emitter-listener@1.1.2

entities@1.1.2

entities@2.2.0

esprima@4.0.1

estraverse@4.3.0

isemail@1.2.0

normalize-package-data@2.5.0

shimmer@1.2.1

uri-js@4.4.1

BSD

Invalid

Not OSI Approved

9 Packages, Including:

canonical-json@0.0.4

esprima@1.2.5

estraverse@1.9.3

glob-to-regexp@0.0.1

qs@2.2.4

qs@2.3.3

source-map@0.1.43

stream-counter@0.2.0

ycssmin@1.0.1

SEE LICENSE IN LICENSE.md

Invalid

Not OSI Approved

4 Packages, Including:

minkelite@1.2.5

strong-mesh-models@8.1.1

strong-trace@1.3.4

strongloop-license@1.5.2

(MIT OR Apache-2.0)

Permissive

2 Packages, Including:

JSONStream@1.3.2

JSONStream@1.3.5

Dual MIT/StrongLoop

Invalid

Not OSI Approved

2 Packages, Including:

loopback-explorer@1.8.0

strong-spawn-npm@1.0.0

BSD-3-Clause OR MIT

Permissive

1 Packages, Including:

amdefine@1.0.1

Python License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

state-changes

1 Packages, Including:

argparse@2.0.1

Apache2

Invalid

Not OSI Approved

1 Packages, Including:

btoa@1.1.1

(MIT OR WTFPL)

Permissive

1 Packages, Including:

expand-template@2.0.3

(AFL-2.1 OR BSD-3-Clause)

Permissive

1 Packages, Including:

json-schema@0.4.0

MIT or GPLv3

Invalid

1 Packages, Including:

jszip@2.5.0

Apache v2

Invalid

Not OSI Approved

1 Packages, Including:

less@1.4.2

MIT/X11

Invalid

Not OSI Approved

1 Packages, Including:

optimist@0.3.7

(BSD-2-Clause OR MIT OR Apache-2.0)

Expression

1 Packages, Including:

rc@1.2.8

Creative Commons Attribution 3.0 Unported

Uncategorized

Not OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

Cannot

Must

1 Packages, Including:

spdx-exceptions@2.5.0

Creative Commons Zero v1.0 Universal

Public Domain

Not OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

Cannot

Must

1 Packages, Including:

spdx-license-ids@3.0.17

apache 2.0

Invalid

Not OSI Approved

1 Packages, Including:

swagger-client@2.0.36

Apache

Invalid

Not OSI Approved

1 Packages, Including:

swagger-ui@2.0.24

The Unlicense

Public Domain

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

private-use

modify

Cannot

include-copyright

hold-liable

Must

1 Packages, Including:

tweetnacl@0.14.5

Direct Dependencies

29

All Dependencies CSV

ⓘ This is a list of strong-pm 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
async	0.9.2	20.46 kB	MIT	prod optional
bl	0.9.5	9.06 kB	MIT	prod	1
compression	1.7.4	7.64 kB	MIT	prod
concat-stream	1.6.2	3.72 kB	MIT	prod
debug	2.6.9	16.13 kB	MIT	prod optional
dockerode	2.5.8	32.13 kB	Apache-2.0	prod
errorhandler	1.5.1	5.75 kB	MIT	prod
express	4.19.2	209.73 kB	MIT	prod
extsprintf	1.4.1	10.72 kB	MIT	prod
http-auth	2.4.11	10.03 kB	MIT	prod	1
lodash	3.10.1	169.48 kB	MIT	prod	1 3 2 1
loopback-connector-sqlite3	1.2.0	16.86 kB	Artistic-2.0	prod optional	1 5 1 1
minkelite	1.2.5	124.99 kB	SEE LICENSE IN LICENSE.md	prod optional	7 12 3 4
mkdirp	0.5.6	2.95 kB	MIT	prod
posix-getopt	1.2.1	7.9 kB	MIT	prod
rimraf	2.7.1	5.53 kB	ISC	prod
serve-favicon	2.5.0	6.67 kB	MIT	prod
strong-control-channel	2.2.3	29.54 kB	Artistic-2.0	prod	1
strong-docker-build	1.1.1	9.14 kB	Artistic-2.0	prod	1 6 3 1
strong-fork-cicada	1.1.2	9.33 kB	MIT	prod	3 1
strong-mesh-models	8.1.1	51.02 kB	SEE LICENSE IN LICENSE.md	prod	27 56 25 15
strong-npm-ls	1.0.10	7.92 kB	Artistic-2.0	prod	2 2
strong-runner	7.0.0	11.96 kB	Artistic-2.0	prod	12 13 4 8
strong-service-install	2.0.3	14.09 kB	Artistic-2.0	prod	1 3 2 2
strong-spawn-npm	1.0.0	9.09 kB	Dual MIT/StrongLoop	prod	1 1
strong-tunnel	1.1.6	10.26 kB	Artistic-2.0	prod	1
strong-url-defaults	1.2.3	9.12 kB	Artistic-2.0	prod
tar	2.2.2	211.58 kB	ISC	prod	3 1
userhome	1.0.0	1.99 kB	MIT	prod

Recent Versions