Home
Docs
GitHub
Pricing
Blog
Log In

Run Sandworm Audit for your App

Get started
Hold on, we're currently generating a fresh version of this report
Generated on Apr 30, 2024 via pnpm

svg2ttf 1.0.4

Convert SVG graphics to TTF font
Package summary
Share
14
issues
4
critical severity
vulnerability
3
license
1
4
high severity
vulnerability
2
meta
2
6
moderate severity
vulnerability
6
3
licenses
5
MIT
1
N/A
1
(LGPL-2.0 or MIT)
Package created
19 Jul 2013
Version published
9 Aug 2013
Maintainers
1
Total deps
7
Direct deps
4
License
UNKNOWN

Issues

14

4 critical severity issues

critical
Recommendation: None
via: xmldom@0.1.31
Recommendation: Upgrade to version 1.12.1 or later
via: argparse@0.1.16
Recommendation: Upgrade to version 4.17.12 or later
via: lodash@1.3.1
Recommendation: Check the package code and files for license information
via: jDataView@2.2.5
Collapse
Expand

4 high severity issues

high
Recommendation: Upgrade to version 4.17.11 or later
via: lodash@1.3.1
Recommendation: Upgrade to version 4.17.21 or later
via: lodash@1.3.1
via: jDataView@2.2.5
via: xmldom@0.1.31
Collapse
Expand

6 moderate severity issues

moderate
Recommendation: Upgrade to version 4.17.11 or later
via: lodash@1.3.1
Recommendation: Upgrade to version 3.3.5 or later
via: argparse@0.1.16
Recommendation: Upgrade to version 0.5.0 or later
via: xmldom@0.1.31
Recommendation: Upgrade to version 4.17.21 or later
via: lodash@1.3.1
Recommendation: None
via: xmldom@0.1.31
Recommendation: Upgrade to version 4.17.5 or later
via: lodash@1.3.1
Collapse
Expand

Licenses

MIT License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
Cannot
hold-liable
Must
include-copyright
include-license
5 Packages, Including:
argparse@0.1.16
lodash@1.3.1
svg2ttf@1.0.4
underscore.string@2.4.0
underscore@1.7.0

N/A

N/A
1 Packages, Including:
jDataView@2.2.5

(LGPL-2.0 or MIT)

Permissive
1 Packages, Including:
xmldom@0.1.31
Disclaimer

This deed highlights only some of the key features and terms of the actual license. It is not a license and has no legal value. You should carefully review all of the terms and conditions of the actual license before using the licensed material.

Sandworm is not a law firm and does not provide legal services. Distributing, displaying, or linking to this deed or the license that it summarizes does not create a lawyer-client or any other relationship.

Direct Dependencies

4
All Dependencies CSV
β“˜ This is a list of svg2ttf 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.
NameVersionSizeLicenseTypeVulnerabilities
argparse0.1.1630.15 kBMIT
prod
1
1
jDataView2.2.59.21 kBUNKNOWN
prod
1
1
lodash1.3.1250.86 kBMIT
prod
1
2
3
xmldom0.1.3119.5 kB(LGPL-2.0 or MIT)
prod
1
1
2

Visualizations