Generated on Dec 2, 2023 via pnpm

Npm

Home

vuepress 1.9.10

Minimalistic doc generator with Vue component based layout system

documentation

generator

vue

Package summary

issues

licenses

Package created

12 Apr 2018

Version published

14 Aug 2023

Maintainers

Total deps

1173

Direct deps

License

MIT

Issues

2 critical severity issues

critical

loader-utils@0.2.17

Prototype pollution in webpack loader-utils

Recommendation: Upgrade to version 1.4.1 or later

via: @vuepress/core@1.9.10

@vue/compiler-sfc@2.7.15

Package has no specified license

Recommendation: Check the package code and files for license information

via: @vuepress/core@1.9.10

Collapse

Expand

28 high severity issues

high

json5@0.5.1

Prototype Pollution in JSON5 via Parse Method

Recommendation: Upgrade to version 1.0.2 or later

via: @vuepress/core@1.9.10

glob-parent@3.1.0

glob-parent vulnerable to Regular Expression Denial of Service in enclosure regex

Recommendation: Upgrade to version 5.1.2 or later

via: @vuepress/core@1.9.10 & others

node-forge@0.10.0

Improper Verification of Cryptographic Signature in node-forge

Recommendation: Upgrade to version 1.3.0 or later

via: @vuepress/core@1.9.10

node-forge@0.10.0

Improper Verification of Cryptographic Signature in node-forge

Recommendation: Upgrade to version 1.3.0 or later

via: @vuepress/core@1.9.10

nth-check@1.0.2

Inefficient Regular Expression Complexity in nth-check

Recommendation: Upgrade to version 2.0.1 or later

via: @vuepress/core@1.9.10

caniuse-lite@1.0.30001565

Package uses an atypical license ("CC-BY-4.0")

Recommendation: Read and validate the license terms

via: @vuepress/core@1.9.10

glob-to-regexp@0.3.0

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: @vuepress/core@1.9.10 & others

mkdirp@0.3.0

Package uses an invalid SPDX license ("MIT/X11")

Recommendation: Validate that the package complies with your license policy

via: @vuepress/core@1.9.10 & others

rc@1.2.8

Package uses a custom license expression: `(BSD-2-Clause OR MIT OR Apache-2.0)`

Recommendation: Validate that the license expression complies with your license policy

via: update-notifier@4.1.3

chokidar@2.1.8

Deprecated package

via: @vuepress/core@1.9.10

core-js@3.33.3

Package uses postinstall script: "node -e "try{require('./postinstall')}catch(e){}""

via: @vuepress/core@1.9.10

docsearch.js@2.6.3

Deprecated package

via: @vuepress/theme-default@1.9.10

esbuild@0.14.7

Package uses postinstall script: "node install.js"

via: @vuepress/core@1.9.10

fsevents@1.2.13

Deprecated package

via: @vuepress/core@1.9.10

fsevents@1.2.13

Package uses install script: "node install.js"

via: @vuepress/core@1.9.10

har-validator@5.1.5

Deprecated package

via: @vuepress/theme-default@1.9.10

highlight.js@9.18.5

Deprecated package

via: @vuepress/core@1.9.10 & others

highlight.js@9.18.5

Package uses postinstall script: "node deprecated.js"

via: @vuepress/core@1.9.10 & others

mkdirp@0.3.0

Deprecated package

via: @vuepress/core@1.9.10 & others

request@2.88.2

Deprecated package

via: @vuepress/theme-default@1.9.10

resolve-url@0.2.1

Deprecated package

via: @vuepress/core@1.9.10 & others

source-map-resolve@0.5.3

Deprecated package

via: @vuepress/core@1.9.10 & others

source-map-url@0.4.1

Deprecated package

via: @vuepress/core@1.9.10 & others

stable@0.1.8

Deprecated package

via: @vuepress/core@1.9.10

svgo@1.3.2

Deprecated package

via: @vuepress/core@1.9.10

urix@0.1.0

Deprecated package

via: @vuepress/core@1.9.10 & others

uuid@3.4.0

Deprecated package

via: @vuepress/core@1.9.10 & others

vuepress@1.9.10

Package uses postinstall script: "opencollective-postinstall || exit 0"

via: vuepress@1.9.10

Collapse

Expand

16 moderate severity issues

moderate

highlight.js@9.18.5

ReDOS vulnerabities: multiple grammars

Recommendation: Upgrade to version 10.4.1 or later

via: @vuepress/core@1.9.10 & others

node-forge@0.10.0

Improper Verification of Cryptographic Signature in `node-forge`

Recommendation: Upgrade to version 1.3.0 or later

via: @vuepress/core@1.9.10

got@9.6.0

Got allows a redirect to a UNIX socket

Recommendation: Upgrade to version 11.8.5 or later

via: update-notifier@4.1.3

markdown-it@8.4.2

Uncontrolled Resource Consumption in markdown-it

Recommendation: Upgrade to version 12.3.2 or later

via: @vuepress/core@1.9.10

request@2.88.2

Server-Side Request Forgery in Request

Recommendation: None

via: @vuepress/theme-default@1.9.10

node-forge@0.10.0

Open Redirect in node-forge

Recommendation: Upgrade to version 1.0.0 or later

via: @vuepress/core@1.9.10

postcss@7.0.39

PostCSS line return parsing error

Recommendation: Upgrade to version 8.4.31 or later

via: @vuepress/core@1.9.10

tough-cookie@2.5.0

tough-cookie Prototype Pollution vulnerability

Recommendation: Upgrade to version 4.1.3 or later

via: @vuepress/theme-default@1.9.10

webpack-chain@4.12.1

Package uses a problematic Weakly Protective license ("MPL-2.0")

Recommendation: Validate that the package complies with your license policy

via: @vuepress/core@1.9.10

webpack-chain@6.5.1

Package uses a problematic Weakly Protective license ("MPL-2.0")

Recommendation: Validate that the package complies with your license policy

via: @vuepress/core@1.9.10 & others

@vue/compiler-sfc@2.7.15

Package has no specified source code repository

via: @vuepress/core@1.9.10

@webassemblyjs/helper-api-error@1.9.0

Package has no specified source code repository

via: @vuepress/core@1.9.10

@webassemblyjs/helper-fsm@1.9.0

Package has no specified source code repository

via: @vuepress/core@1.9.10

@webassemblyjs/ieee754@1.9.0

Package has no specified source code repository

via: @vuepress/core@1.9.10

@webassemblyjs/leb128@1.9.0

Package has no specified source code repository

via: @vuepress/core@1.9.10

bundle-require@2.1.8

Package has no specified source code repository

via: @vuepress/core@1.9.10

Collapse

Expand

7 low severity issues

low

node-forge@0.10.0

Prototype Pollution in node-forge debug API.

Recommendation: Upgrade to version 1.0.0 or later

via: @vuepress/core@1.9.10

node-forge@0.10.0

URL parsing in node-forge could lead to undesired behavior.

Recommendation: Upgrade to version 1.0.0 or later

via: @vuepress/core@1.9.10

mdn-data@2.0.14

Package uses a license that is not OSI approved ("CC0-1.0")

Recommendation: Read and validate the license terms

via: @vuepress/core@1.9.10

mdn-data@2.0.4

Package uses a license that is not OSI approved ("CC0-1.0")

Recommendation: Read and validate the license terms

via: @vuepress/core@1.9.10

caniuse-lite@1.0.30001565

Package uses a license that is not OSI approved ("CC-BY-4.0")

Recommendation: Read and validate the license terms

via: @vuepress/core@1.9.10

glob-to-regexp@0.3.0

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: @vuepress/core@1.9.10 & others

mkdirp@0.3.0

Package uses a license that is not OSI approved ("MIT/X11")

Recommendation: Read and validate the license terms

via: @vuepress/core@1.9.10 & others

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

1026 Packages, Including:

@babel/code-frame@7.23.5

@babel/compat-data@7.23.5

@babel/core@7.23.5

@babel/generator@7.23.5

@babel/helper-annotate-as-pure@7.22.5

@babel/helper-builder-binary-assignment-operator-visitor@7.22.15

@babel/helper-compilation-targets@7.22.15

@babel/helper-create-class-features-plugin@7.23.5

@babel/helper-create-regexp-features-plugin@7.22.15

@babel/helper-define-polyfill-provider@0.4.3

@babel/helper-environment-visitor@7.22.20

@babel/helper-function-name@7.23.0

@babel/helper-hoist-variables@7.22.5

@babel/helper-member-expression-to-functions@7.23.0

@babel/helper-module-imports@7.22.15

@babel/helper-module-transforms@7.23.3

@babel/helper-optimise-call-expression@7.22.5

@babel/helper-plugin-utils@7.22.5

@babel/helper-remap-async-to-generator@7.22.20

@babel/helper-replace-supers@7.22.20

@babel/helper-simple-access@7.22.5

@babel/helper-skip-transparent-expression-wrappers@7.22.5

@babel/helper-split-export-declaration@7.22.6

@babel/helper-string-parser@7.23.4

@babel/helper-validator-identifier@7.22.20

@babel/helper-validator-option@7.23.5

@babel/helper-wrap-function@7.22.20

@babel/helpers@7.23.5

@babel/highlight@7.23.4

@babel/parser@7.23.5

@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression@7.23.3

@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining@7.23.3

@babel/plugin-bugfix-v8-static-class-fields-redefine-readonly@7.23.3

@babel/plugin-proposal-class-properties@7.18.6

@babel/plugin-proposal-decorators@7.23.5

@babel/plugin-proposal-private-property-in-object@7.21.0-placeholder-for-preset-env.2

@babel/plugin-syntax-async-generators@7.8.4

@babel/plugin-syntax-class-properties@7.12.13

@babel/plugin-syntax-class-static-block@7.14.5

@babel/plugin-syntax-decorators@7.23.3

@babel/plugin-syntax-dynamic-import@7.8.3

@babel/plugin-syntax-export-namespace-from@7.8.3

@babel/plugin-syntax-import-assertions@7.23.3

@babel/plugin-syntax-import-attributes@7.23.3

@babel/plugin-syntax-import-meta@7.10.4

@babel/plugin-syntax-json-strings@7.8.3

@babel/plugin-syntax-jsx@7.23.3

@babel/plugin-syntax-logical-assignment-operators@7.10.4

@babel/plugin-syntax-nullish-coalescing-operator@7.8.3

@babel/plugin-syntax-numeric-separator@7.10.4

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

70 Packages, Including:

@webassemblyjs/helper-fsm@1.9.0

abbrev@1.1.1

ansi-align@3.0.1

anymatch@2.0.0

anymatch@3.1.3

aproba@1.2.0

boolbase@1.0.0

browserify-sign@4.2.2

cacache@12.0.4

chownr@1.1.4

cliui@5.0.0

copy-concurrently@1.0.5

electron-to-chromium@1.4.601

figgy-pudding@3.5.2

fs-write-stream-atomic@1.0.10

fs.realpath@1.0.0

get-caller-file@2.0.5

glob-parent@3.1.0

glob-parent@5.1.2

glob@7.2.3

graceful-fs@4.2.11

har-schema@2.0.0

icss-replace-symbols@1.1.0

icss-utils@4.1.1

infer-owner@1.0.4

inflight@1.0.6

inherits@2.0.3

inherits@2.0.4

ini@1.3.7

ini@1.3.8

is-resolvable@1.1.0

isexe@2.0.0

json-stringify-safe@5.0.1

killable@1.0.1

lru-cache@4.1.5

lru-cache@5.1.1

minimalistic-assert@1.0.1

minimatch@3.1.2

move-concurrently@1.0.1

once@1.4.0

parse-asn1@5.1.6

picocolors@0.2.1

picocolors@1.0.0

postcss-modules-extract-imports@2.0.0

postcss-modules-scope@2.2.0

postcss-modules-values@2.0.0

promise-inflight@1.0.1

pseudomap@1.0.2

remove-trailing-separator@1.1.0

require-main-filename@2.0.0

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

28 Packages, Including:

configstore@5.0.1

css-select@2.1.0

css-select@4.3.0

css-what@3.4.2

css-what@6.1.0

default-gateway@4.2.0

domelementtype@1.3.1

domelementtype@2.3.0

domhandler@4.3.1

domutils@1.7.0

domutils@2.8.0

entities@1.1.2

entities@2.2.0

eslint-scope@4.0.3

esprima@4.0.1

esrecurse@4.3.0

estraverse@4.3.0

estraverse@5.3.0

esutils@2.0.3

http-cache-semantics@4.1.1

mississippi@3.0.0

nth-check@1.0.2

nth-check@2.1.1

regjsparser@0.9.1

terser@4.8.1

uglify-js@3.4.10

update-notifier@4.1.3

uri-js@4.4.1

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

17 Packages, Including:

@xtuc/ieee754@1.2.0

bcrypt-pbkdf@1.0.2

duplexer3@0.1.5

highlight.js@9.18.5

ieee754@1.2.1

qs@6.11.0

qs@6.11.2

qs@6.5.3

serialize-javascript@4.0.0

serialize-javascript@6.0.1

source-map-js@1.0.2

source-map@0.5.6

source-map@0.5.7

source-map@0.6.1

source-map@0.7.4

sprintf-js@1.0.3

tough-cookie@2.5.0

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

13 Packages, Including:

@ampproject/remapping@2.2.1

@xtuc/long@4.2.2

ansi-html-community@0.0.8

aws-sign2@0.7.0

caseless@0.12.0

faye-websocket@0.11.4

forever-agent@0.6.1

hogan.js@3.0.2

oauth-sign@0.9.0

request@2.88.2

tunnel-agent@0.6.0

websocket-driver@0.7.4

websocket-extensions@0.1.4

The Unlicense

Public Domain

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

private-use

modify

Cannot

include-copyright

hold-liable

Must

2 Packages, Including:

markdown-it-anchor@5.3.0

tweetnacl@0.14.5

Creative Commons Zero v1.0 Universal

Public Domain

Not OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

Cannot

Must

2 Packages, Including:

mdn-data@2.0.14

mdn-data@2.0.4

(MIT OR CC0-1.0)

Public Domain

2 Packages, Including:

type-fest@0.21.3

type-fest@0.8.1

Mozilla Public License 2.0

Weakly Protective

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

place-warranty

use-patent-claims

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

disclose-source

include-original

2 Packages, Including:

webpack-chain@4.12.1

webpack-chain@6.5.1

N/A

1 Packages, Including:

@vue/compiler-sfc@2.7.15

(MIT OR Apache-2.0)

Permissive

1 Packages, Including:

atob@2.1.2

Creative Commons Attribution 4.0 International

Uncategorized

Not OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

Cannot

Must

1 Packages, Including:

caniuse-lite@1.0.30001565

BSD

Invalid

Not OSI Approved

1 Packages, Including:

glob-to-regexp@0.3.0

(AFL-2.1 OR BSD-3-Clause)

Permissive

1 Packages, Including:

json-schema@0.4.0

MIT/X11

Invalid

Not OSI Approved

1 Packages, Including:

mkdirp@0.3.0

(BSD-3-Clause OR GPL-2.0)

Permissive

1 Packages, Including:

node-forge@0.10.0

(MIT AND Zlib)

Permissive

1 Packages, Including:

pako@1.0.11

(WTFPL OR MIT)

Permissive

1 Packages, Including:

path-is-inside@1.0.2

(BSD-2-Clause OR MIT OR Apache-2.0)

Expression

1 Packages, Including:

rc@1.2.8

(MIT AND BSD-3-Clause)

Permissive

1 Packages, Including:

sha.js@2.4.11

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of vuepress 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
@vuepress/core	1.9.10	37.27 kB	MIT	prod	2 23 13 7
@vuepress/theme-default	1.9.10	18.86 kB	MIT	prod	14 4 2
@vuepress/types	1.9.10	12.22 kB	MIT	prod	2 2
cac	6.7.14	21.41 kB	MIT	prod
envinfo	7.11.0	49.56 kB	MIT	prod
opencollective-postinstall	2.0.3	1.9 kB	MIT	prod
update-notifier	4.1.3	6.08 kB	BSD-2-Clause	prod	1 1