Generated on Apr 23, 2024 via pnpm

textract 2.5.0

Extracting text from files of various type including html, pdf, doc, docx, xls, xlsx, csv, pptx, png, jpg, gif, rtf, text/*, and various open office.

textract

extract

html

Package summary

issues

licenses

Package created

26 Apr 2013

Version published

3 Jun 2019

Maintainers

Total deps

132

Direct deps

License

MIT

Issues

4 critical severity issues

critical

xmldom@0.1.27

xmldom allows multiple root nodes in a DOM

Recommendation: None

via: xmldom@0.1.27

colors@0.6.2

Package has no specified license

Recommendation: Check the package code and files for license information

via: j@0.4.3

domutils@1.5.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: cheerio@1.0.0-rc.2

frac@0.3.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: j@0.4.3

Collapse

Expand

20 high severity issues

high

jszip@2.4.0

JSZip contains Path Traversal via loadAsync

Recommendation: Upgrade to version 3.8.0 or later

via: j@0.4.3

xlsx@0.7.12

Prototype Pollution in sheetJS

Recommendation: Upgrade to version 0.19.3 or later

via: j@0.4.3

marked@0.6.2

Inefficient Regular Expression Complexity in marked

Recommendation: Upgrade to version 4.0.10 or later

via: marked@0.6.2

marked@0.6.2

Inefficient Regular Expression Complexity in marked

Recommendation: Upgrade to version 4.0.10 or later

via: marked@0.6.2

trim-newlines@1.0.0

Uncontrolled Resource Consumption in trim-newlines

Recommendation: Upgrade to version 3.0.1 or later

via: meow@3.7.0

nth-check@1.0.2

Inefficient Regular Expression Complexity in nth-check

Recommendation: Upgrade to version 2.0.1 or later

via: cheerio@1.0.0-rc.2

xlsx@0.7.12

SheetJS Regular Expression Denial of Service (ReDoS)

Recommendation: Upgrade to version 0.20.2 or later

via: j@0.4.3

css-select@1.2.0

Package uses an invalid SPDX license ("BSD-like")

Recommendation: Validate that the package complies with your license policy

via: cheerio@1.0.0-rc.2

jszip@2.4.0

Package uses an invalid SPDX license ("MIT or GPLv3")

Recommendation: Validate that the package complies with your license policy

via: j@0.4.3

pdf-text-extract@1.3.1

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: pdf-text-extract@1.3.1

spdx-exceptions@2.5.0

Package uses an atypical license ("CC-BY-3.0")

Recommendation: Read and validate the license terms

via: meow@3.7.0

xmldom@0.1.27

Package uses an invalid SPDX license ("LGPL")

Recommendation: Validate that the package complies with your license policy

via: xmldom@0.1.27

xpath@0.0.23

Package uses an invalid SPDX license ("Creative Commons")

Recommendation: Validate that the package complies with your license policy

via: xpath@0.0.23

yargs@1.3.3

Package uses an invalid SPDX license ("MIT/X11")

Recommendation: Validate that the package complies with your license policy

via: pdf-text-extract@1.3.1

babyparse@0.2.1

Deprecated package

via: j@0.4.3

harb@0.0.7

Deprecated package

via: j@0.4.3

j@0.4.3

Deprecated package

via: j@0.4.3

xlsjs@0.7.6

Deprecated package

via: j@0.4.3

xlsx@0.7.12

Deprecated package

via: j@0.4.3

xmldom@0.1.27

Deprecated package

via: xmldom@0.1.27

Collapse

Expand

10 moderate severity issues

moderate

got@5.7.1

Got allows a redirect to a UNIX socket

Recommendation: Upgrade to version 11.8.5 or later

via: got@5.7.1

xlsx@0.7.12

Denial of Service in SheetJS Pro

Recommendation: Upgrade to version 0.17.0 or later

via: j@0.4.3

xlsx@0.7.12

Denial of Service in SheetJS Pro

Recommendation: Upgrade to version 0.17.0 or later

via: j@0.4.3

xlsx@0.7.12

Denial of Service in SheetsJS Pro

Recommendation: Upgrade to version 0.17.0 or later

via: j@0.4.3

xmldom@0.1.27

Misinterpretation of malicious XML input

Recommendation: Upgrade to version 0.5.0 or later

via: xmldom@0.1.27

jszip@2.4.0

jszip Vulnerable to Prototype Pollution

Recommendation: Upgrade to version 2.7.0 or later

via: j@0.4.3

xmldom@0.1.27

Misinterpretation of malicious XML input

Recommendation: None

via: xmldom@0.1.27

xml2js@0.4.23

xml2js is vulnerable to prototype pollution

Recommendation: Upgrade to version 0.5.0 or later

via: epub2@1.3.4

jschardet@1.4.1

Package uses a problematic Weakly Protective license ("LGPL-2.1+")

Recommendation: Validate that the package complies with your license policy

via: jschardet@1.4.1

babyparse@0.2.1

Package has no specified source code repository

via: j@0.4.3

Collapse

Expand

9 low severity issues

low

marked@0.6.2

Regular Expression Denial of Service in marked

Recommendation: Upgrade to version 0.7.0 or later

via: marked@0.6.2

css-select@1.2.0

Package uses a license that is not OSI approved ("BSD-like")

Recommendation: Read and validate the license terms

via: cheerio@1.0.0-rc.2

jschardet@1.4.1

Package uses a deprecated license ("LGPL-2.1+")

via: jschardet@1.4.1

pdf-text-extract@1.3.1

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: pdf-text-extract@1.3.1

spdx-exceptions@2.5.0

Package uses a license that is not OSI approved ("CC-BY-3.0")

Recommendation: Read and validate the license terms

via: meow@3.7.0

spdx-license-ids@3.0.17

Package uses a license that is not OSI approved ("CC0-1.0")

Recommendation: Read and validate the license terms

via: meow@3.7.0

xmldom@0.1.27

Package uses a license that is not OSI approved ("LGPL")

Recommendation: Read and validate the license terms

via: xmldom@0.1.27

xpath@0.0.23

Package uses a license that is not OSI approved ("Creative Commons")

Recommendation: Read and validate the license terms

via: xpath@0.0.23

yargs@1.3.3

Package uses a license that is not OSI approved ("MIT/X11")

Recommendation: Read and validate the license terms

via: pdf-text-extract@1.3.1

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

90 Packages, Including:

@types/keyv@3.1.4

@types/node@20.12.7

@types/responselike@1.0.3

adm-zip@0.4.16

array-find-index@1.0.2

babyparse@0.2.1

bluebird@3.7.2

buffer-crc32@0.2.13

buffer-from@1.1.2

camelcase-keys@2.1.0

camelcase@2.1.1

capture-stack-trace@1.0.2

cheerio@1.0.0-rc.2

commander@12.0.0

concat-stream@2.0.0

core-util-is@1.0.3

create-error-class@3.0.2

currently-unhandled@0.4.1

decamelize@1.2.0

dom-serializer@0.1.1

epub2@1.3.4

error-ex@1.3.2

fd-slicer@1.0.1

find-up@1.1.2

function-bind@1.1.2

get-stdin@4.0.1

got@5.7.1

hasown@2.0.2

html-entities@1.2.0

htmlparser2@3.10.1

iconv-lite@0.4.15

indent-string@2.1.0

is-arrayish@0.2.1

is-core-module@2.13.1

is-finite@1.1.0

is-redirect@1.0.0

is-retry-allowed@1.2.0

is-stream@1.1.0

is-utf8@0.2.1

isarray@1.0.0

load-json-file@1.1.0

lodash@4.17.21

loud-rejection@1.6.0

lowercase-keys@1.0.1

map-obj@1.0.1

marked@0.6.2

meow@3.7.0

mime@2.2.0

minimist@1.2.8

node-status-codes@1.0.0

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

15 Packages, Including:

adler-32@1.3.1

cfb@0.11.1

cfb@1.2.2

codepage@1.15.0

codepage@1.3.8

crc-32@1.2.2

exit-on-epipe@1.0.1

harb@0.0.7

j@0.4.3

spdx-correct@3.2.0

ssf@0.8.2

validate-npm-package-license@3.0.4

voc@1.2.0

xlsjs@0.7.6

xlsx@0.7.12

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

7 Packages, Including:

boolbase@1.0.0

graceful-fs@4.2.11

hosted-git-info@2.8.9

inherits@2.0.4

sax@1.3.0

semver@5.7.2

signal-exit@3.0.7

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

7 Packages, Including:

css-what@2.1.3

domelementtype@1.3.1

domhandler@2.4.2

domutils@1.7.0

entities@1.1.2

normalize-package-data@2.5.0

nth-check@1.0.2

N/A

3 Packages, Including:

colors@0.6.2

domutils@1.5.1

frac@0.3.1

BSD-like

Invalid

Not OSI Approved

1 Packages, Including:

css-select@1.2.0

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

1 Packages, Including:

duplexer2@0.1.4

GNU Library General Public License v2.1 or later

Weakly Protective

OSI Approved

Deprecated

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

Cannot

Must

1 Packages, Including:

jschardet@1.4.1

MIT or GPLv3

Invalid

1 Packages, Including:

jszip@2.4.0

BSD

Invalid

Not OSI Approved

1 Packages, Including:

pdf-text-extract@1.3.1

Creative Commons Attribution 3.0 Unported

Uncategorized

Not OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

Cannot

Must

1 Packages, Including:

spdx-exceptions@2.5.0

Creative Commons Zero v1.0 Universal

Public Domain

Not OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

Cannot

Must

1 Packages, Including:

spdx-license-ids@3.0.17

LGPL

Invalid

Not OSI Approved

1 Packages, Including:

xmldom@0.1.27

Creative Commons

Invalid

Not OSI Approved

1 Packages, Including:

xpath@0.0.23

MIT/X11

Invalid

Not OSI Approved

1 Packages, Including:

yargs@1.3.3

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of textract 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
cheerio	1.0.0-rc.2	31.52 kB	MIT	prod	1 2 1
epub2	1.3.4	16.02 kB	MIT	prod	1
got	5.7.1	7.8 kB	MIT	prod	1
html-entities	1.2.0	17.21 kB	MIT	prod
iconv-lite	0.4.15	190.82 kB	MIT	prod
j	0.4.3	7.16 kB	Apache-2.0	prod	2 9 5
jschardet	1.4.1	169.52 kB	LGPL-2.1+	prod	1 1
marked	0.6.2	23.98 kB	MIT	prod	2 1
meow	3.7.0	3.53 kB	MIT	prod	2 2
mime	2.2.0	19.1 kB	MIT	prod
pdf-text-extract	1.3.1	2.65 kB	BSD	prod	2 2
xmldom	0.1.27	19.36 kB	LGPL	prod	1 2 2 1
xpath	0.0.23	28.71 kB	Creative Commons	prod	1 1
yauzl	2.7.0	15.02 kB	MIT	prod