Generated on Jun 9, 2024 via pnpm

Npm

Home

woocommerce-api 1.5.0

A Node.js wrapper for the WooCommerce REST API

woocommerce

rest-api

Package summary

issues

licenses

Package created

11 Jul 2015

Version published

29 Jul 2019

Maintainers

Total deps

325

Direct deps

License

MIT

Issues

1 critical severity issue

critical

cli-table@0.3.11

Package has no specified license

Recommendation: Check the package code and files for license information

via: npm-check-updates@3.1.20

Collapse

Expand

10 high severity issues

high

http-cache-semantics@3.8.1

http-cache-semantics vulnerable to Regular Expression Denial of Service

Recommendation: Upgrade to version 4.1.1 or later

via: npm-check-updates@3.1.20

ip@1.1.5

ip SSRF improper categorization in isPublic

Recommendation: None

via: npm-check-updates@3.1.20

rc@1.2.8

Package uses a custom license expression: `(BSD-2-Clause OR MIT OR Apache-2.0)`

Recommendation: Validate that the license expression complies with your license policy

via: npm-check-updates@3.1.20

semver-utils@1.1.4

Package uses an invalid SPDX license ("APACHEv2")

Recommendation: Validate that the package complies with your license policy

via: npm-check-updates@3.1.20

spdx-exceptions@2.5.0

Package uses an atypical license ("CC-BY-3.0")

Recommendation: Read and validate the license terms

via: npm-check-updates@3.1.20

har-validator@5.1.5

Deprecated package

via: request@2.88.0

libnpmconfig@1.2.1

Deprecated package

via: npm-check-updates@3.1.20

node-fetch-npm@2.0.4

Deprecated package

via: npm-check-updates@3.1.20

request@2.88.0

Deprecated package

via: request@2.88.0

uuid@3.4.0

Deprecated package

via: request@2.88.0

Collapse

Expand

5 moderate severity issues

moderate

got@9.6.0

Got allows a redirect to a UNIX socket

Recommendation: Upgrade to version 11.8.5 or later

via: npm-check-updates@3.1.20

ip@1.1.5

NPM IP package incorrectly identifies some private IP addresses as public

Recommendation: Upgrade to version 1.1.9 or later

via: npm-check-updates@3.1.20

tough-cookie@2.4.3

tough-cookie Prototype Pollution vulnerability

Recommendation: Upgrade to version 4.1.3 or later

via: request@2.88.0

request@2.88.0

Server-Side Request Forgery in Request

Recommendation: None

via: request@2.88.0

tar@4.4.19

Denial of service while parsing a tar file due to lack of folders count validation

Recommendation: Upgrade to version 6.2.1 or later

via: npm-check-updates@3.1.20

Collapse

Expand

3 low severity issues

low

semver-utils@1.1.4

Package uses a license that is not OSI approved ("APACHEv2")

Recommendation: Read and validate the license terms

via: npm-check-updates@3.1.20

spdx-exceptions@2.5.0

Package uses a license that is not OSI approved ("CC-BY-3.0")

Recommendation: Read and validate the license terms

via: npm-check-updates@3.1.20

spdx-license-ids@3.0.18

Package uses a license that is not OSI approved ("CC0-1.0")

Recommendation: Read and validate the license terms

via: npm-check-updates@3.1.20

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

236 Packages, Including:

@sindresorhus/is@0.14.0

@szmarczak/http-timer@1.1.2

@types/keyv@3.1.4

@types/node@20.14.2

@types/responselike@1.0.3

agent-base@4.2.1

agent-base@4.3.0

agentkeepalive@3.5.3

ajv@6.12.6

ansi-regex@2.1.1

ansi-regex@3.0.1

ansi-regex@4.1.1

ansi-regex@5.0.1

ansi-styles@2.2.1

ansi-styles@3.2.1

argparse@1.0.10

asn1@0.2.6

assert-plus@1.0.0

asynckit@0.4.0

aws4@1.13.0

balanced-match@1.0.2

bluebird@3.5.5

boxen@3.2.0

brace-expansion@1.1.11

buffer-from@1.1.2

builtins@1.0.3

cacheable-request@6.1.0

camelcase@5.3.1

chalk@1.1.3

chalk@2.4.2

ci-info@2.0.0

cipher-base@1.0.4

cli-boxes@2.2.1

clone-response@1.0.3

color-convert@1.9.3

color-name@1.1.3

colors@1.0.3

combined-stream@1.0.8

commander@2.20.3

concat-map@0.0.1

concat-stream@1.6.2

core-util-is@1.0.2

core-util-is@1.0.3

create-hash@1.2.0

create-hmac@1.1.7

cross-spawn@5.1.0

crypto-random-string@1.0.0

cyclist@1.0.2

dashdash@1.14.1

debug@3.1.0

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

55 Packages, Including:

ansi-align@3.0.1

aproba@1.2.0

cacache@12.0.4

chownr@1.1.4

cint@8.2.1

copy-concurrently@1.0.5

figgy-pudding@3.5.2

fs-minipass@1.2.7

fs-write-stream-atomic@1.0.10

fs.realpath@1.0.0

glob@7.2.3

graceful-fs@4.2.11

har-schema@2.0.0

hosted-git-info@2.8.9

ignore-walk@3.0.4

infer-owner@1.0.4

inflight@1.0.6

inherits@2.0.4

ini@1.3.8

isexe@2.0.0

json-stringify-safe@5.0.1

libnpmconfig@1.2.1

lru-cache@4.1.5

lru-cache@5.1.1

make-fetch-happen@5.0.2

minimatch@3.1.2

minipass@2.9.0

move-concurrently@1.0.1

npm-bundled@1.1.2

npm-normalize-package-bin@1.0.1

npm-package-arg@6.1.1

npm-packlist@1.4.8

npm-pick-manifest@3.0.2

npm-registry-fetch@4.0.7

once@1.4.0

osenv@0.1.5

promise-inflight@1.0.1

pseudomap@1.0.2

rimraf@2.7.1

run-queue@1.0.3

semver@5.7.2

semver@6.3.1

signal-exit@3.0.7

spawn-please@0.3.0

ssri@6.0.2

tar@4.4.19

unique-filename@1.1.1

unique-slug@2.0.2

validate-npm-package-name@3.0.0

which@1.3.1

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

10 Packages, Including:

aws-sign2@0.7.0

caseless@0.12.0

fast-diff@1.3.0

forever-agent@0.6.1

npm-check-updates@3.1.20

oauth-sign@0.9.0

request@2.88.0

spdx-correct@3.2.0

tunnel-agent@0.6.0

validate-npm-package-license@3.0.4

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

8 Packages, Including:

configstore@4.0.0

esprima@4.0.1

http-cache-semantics@3.8.1

http-cache-semantics@4.1.1

mississippi@3.0.0

normalize-package-data@2.5.0

update-notifier@3.0.1

uri-js@4.4.1

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

5 Packages, Including:

bcrypt-pbkdf@1.0.2

duplexer3@0.1.5

qs@6.5.3

sprintf-js@1.0.3

tough-cookie@2.4.3

(MIT OR Apache-2.0)

Permissive

1 Packages, Including:

JSONStream@1.3.5

N/A

1 Packages, Including:

cli-table@0.3.11

(AFL-2.1 OR BSD-3-Clause)

Permissive

1 Packages, Including:

json-schema@0.4.0

(WTFPL OR MIT)

Permissive

1 Packages, Including:

path-is-inside@1.0.2

(BSD-2-Clause OR MIT OR Apache-2.0)

Expression

1 Packages, Including:

rc@1.2.8

APACHEv2

Invalid

Not OSI Approved

1 Packages, Including:

semver-utils@1.1.4

(MIT AND BSD-3-Clause)

Permissive

1 Packages, Including:

sha.js@2.4.11

Creative Commons Attribution 3.0 Unported

Uncategorized

Not OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

Cannot

Must

1 Packages, Including:

spdx-exceptions@2.5.0

Creative Commons Zero v1.0 Universal

Public Domain

Not OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

Cannot

Must

1 Packages, Including:

spdx-license-ids@3.0.18

The Unlicense

Public Domain

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

private-use

modify

Cannot

include-copyright

hold-liable

Must

1 Packages, Including:

tweetnacl@0.14.5

(MIT OR CC0-1.0)

Public Domain

1 Packages, Including:

type-fest@0.3.1

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of woocommerce-api 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
bluebird	3.5.5	133.31 kB	MIT	prod peer
create-hmac	1.1.7	2.37 kB	MIT	prod
npm-check-updates	3.1.20	18.43 kB	Apache-2.0	prod	1 7 3 3
oauth-1.0a	2.2.6	13.79 kB	MIT	prod
request	2.88.0	56.66 kB	Apache-2.0	prod	3 2

Tree

Treemap

All Versions

woocommerce-api 1.5.0

Issues

1 critical severity issue

10 high severity issues

5 moderate severity issues

3 low severity issues

Licenses

MIT License

ISC License

Apache License 2.0

BSD 2-Clause "Simplified" License

BSD 3-Clause "New" or "Revised" License

(MIT OR Apache-2.0)

N/A

(AFL-2.1 OR BSD-3-Clause)

(WTFPL OR MIT)

(BSD-2-Clause OR MIT OR Apache-2.0)

APACHEv2

(MIT AND BSD-3-Clause)

Creative Commons Attribution 3.0 Unported

Creative Commons Zero v1.0 Universal

The Unlicense

(MIT OR CC0-1.0)

Direct Dependencies

Visualizations

All Versions

Scan your app for security vulnerabilities and license issues

Log into your account

Create your account

woocommerce-api 1.5.0

Issues

1 critical severity issue

10 high severity issues

5 moderate severity issues

3 low severity issues

Licenses

MIT License

ISC License

Apache License 2.0

BSD 2-Clause "Simplified" License

BSD 3-Clause "New" or "Revised" License

(MIT OR Apache-2.0)

N/A

(AFL-2.1 OR BSD-3-Clause)

(WTFPL OR MIT)

(BSD-2-Clause OR MIT OR Apache-2.0)

APACHEv2

(MIT AND BSD-3-Clause)

Creative Commons Attribution 3.0 Unported

Creative Commons Zero v1.0 Universal

The Unlicense

(MIT OR CC0-1.0)

Direct Dependencies

Visualizations

All Versions

Scan your app for security vulnerabilities and license issues