Generated on May 16, 2024 via pnpm

Npm

Home

svg2ttf 2.0.0

Converts SVG font to TTF font

font

ttf

svg

convertor

Package summary

issues

licenses

Package created

19 Jul 2013

Version published

24 Apr 2015

Maintainers

Total deps

Direct deps

License

MIT

Issues

2 critical severity issues

critical

xmldom@0.1.31

xmldom allows multiple root nodes in a DOM

Recommendation: None

via: xmldom@0.1.31

lodash@3.10.1

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.12 or later

via: lodash@3.10.1

Collapse

Expand

4 high severity issues

high

lodash@3.10.1

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.11 or later

via: lodash@3.10.1

lodash@3.10.1

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.19 or later

via: lodash@3.10.1

lodash@3.10.1

Command Injection in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: lodash@3.10.1

xmldom@0.1.31

Deprecated package

via: xmldom@0.1.31

Collapse

Expand

5 moderate severity issues

moderate

lodash@3.10.1

Regular Expression Denial of Service (ReDoS) in lodash

Recommendation: Upgrade to version 4.17.11 or later

via: lodash@3.10.1

xmldom@0.1.31

Misinterpretation of malicious XML input

Recommendation: Upgrade to version 0.5.0 or later

via: xmldom@0.1.31

lodash@3.10.1

Regular Expression Denial of Service (ReDoS) in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: lodash@3.10.1

xmldom@0.1.31

Misinterpretation of malicious XML input

Recommendation: None

via: xmldom@0.1.31

lodash@3.10.1

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.5 or later

via: lodash@3.10.1

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

5 Packages, Including:

argparse@1.0.10

lodash@3.10.1

microbuffer@1.0.0

svg2ttf@2.0.0

svgpath@2.0.0

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

1 Packages, Including:

sprintf-js@1.0.3

(LGPL-2.0 or MIT)

Permissive

1 Packages, Including:

xmldom@0.1.31

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of svg2ttf 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
argparse	1.0.10	29.06 kB	MIT	prod
lodash	3.10.1	169.48 kB	MIT	prod	1 3 3
microbuffer	1.0.0	5.59 kB	MIT	prod
svgpath	2.0.0	13.3 kB	MIT	prod
xmldom	0.1.31	19.5 kB	(LGPL-2.0 or MIT)	prod	1 1 2

Tree

Treemap

Recent Versions

svg2ttf 2.0.0