Generated on May 30, 2024 via pnpm

youtube-mp3-downloader 0.3.5

Downloads Youtube videos (in parallel, as streams), encodes the audio data as mp3 and stores them in a defineable location

Package summary

29

issues

10

licenses

Package created

31 Mar 2015

Version published

30 Jun 2015

Maintainers

1

Total deps

77

Direct deps

4

License

UNKNOWN

Issues

29

9 critical severity issues

lodash@2.4.2

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.12 or later

via: ytdl-core@0.5.1

cheerio@0.18.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: ytdl-core@0.5.1

dom-serializer@0.0.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: ytdl-core@0.5.1

domelementtype@1.1.3

Package has no specified license

Recommendation: Check the package code and files for license information

via: ytdl-core@0.5.1

domhandler@2.3.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: ytdl-core@0.5.1

domutils@1.4.3

Package has no specified license

Recommendation: Check the package code and files for license information

via: ytdl-core@0.5.1

domutils@1.5.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: ytdl-core@0.5.1

fluent-ffmpeg@2.0.1

Package has no specified license

Recommendation: Check the package code and files for license information

via: fluent-ffmpeg@2.0.1

speedometer@0.1.4

Package has no specified license

Recommendation: Check the package code and files for license information

via: progress-stream@1.2.0

11 high severity issues

lodash@2.4.2

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.11 or later

via: ytdl-core@0.5.1

lodash@2.4.2

Command Injection in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: ytdl-core@0.5.1

CSSselect@0.4.1

Package uses an invalid SPDX license ("BSD-like")

Recommendation: Validate that the package complies with your license policy

via: ytdl-core@0.5.1

CSSwhat@0.4.7

Package uses an invalid SPDX license ("BSD-like")

Recommendation: Validate that the package complies with your license policy

via: ytdl-core@0.5.1

entities@1.0.0

Package uses an invalid SPDX license ("BSD-like")

Recommendation: Validate that the package complies with your license policy

via: ytdl-core@0.5.1

clarinet@0.11.0

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: ytdl-core@0.5.1

CSSselect@0.4.1

Deprecated package

via: ytdl-core@0.5.1

CSSwhat@0.4.7

Deprecated package

via: ytdl-core@0.5.1

har-validator@5.1.5

Deprecated package

via: ytdl-core@0.5.1

request@2.88.2

Deprecated package

via: ytdl-core@0.5.1

uuid@3.4.0

Deprecated package

via: ytdl-core@0.5.1

5 moderate severity issues

lodash@2.4.2

Regular Expression Denial of Service (ReDoS) in lodash

Recommendation: Upgrade to version 4.17.11 or later

via: ytdl-core@0.5.1

lodash@2.4.2

Regular Expression Denial of Service (ReDoS) in lodash

Recommendation: Upgrade to version 4.17.21 or later

via: ytdl-core@0.5.1

tough-cookie@2.5.0

tough-cookie Prototype Pollution vulnerability

Recommendation: Upgrade to version 4.1.3 or later

via: ytdl-core@0.5.1

request@2.88.2

Server-Side Request Forgery in Request

Recommendation: None

via: ytdl-core@0.5.1

lodash@2.4.2

Prototype Pollution in lodash

Recommendation: Upgrade to version 4.17.5 or later

via: ytdl-core@0.5.1

4 low severity issues

CSSselect@0.4.1

Package uses a license that is not OSI approved ("BSD-like")

Recommendation: Read and validate the license terms

via: ytdl-core@0.5.1

CSSwhat@0.4.7

Package uses a license that is not OSI approved ("BSD-like")

Recommendation: Read and validate the license terms

via: ytdl-core@0.5.1

entities@1.0.0

Package uses a license that is not OSI approved ("BSD-like")

Recommendation: Read and validate the license terms

via: ytdl-core@0.5.1

clarinet@0.11.0

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: ytdl-core@0.5.1

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

47 Packages, Including:

ajv@6.12.6

asn1@0.2.6

assert-plus@1.0.0

async@1.2.1

asynckit@0.4.0

aws4@1.13.0

combined-stream@1.0.8

core-util-is@1.0.2

core-util-is@1.0.3

dashdash@1.14.1

delayed-stream@1.0.0

ecc-jsbn@0.1.2

extend@3.0.2

extsprintf@1.3.0

fast-deep-equal@3.1.3

fast-json-stable-stringify@2.1.0

form-data@2.3.3

getpass@0.1.7

har-validator@5.1.5

htmlparser2@3.8.3

http-signature@1.2.0

is-typedarray@1.0.0

isarray@0.0.1

isstream@0.1.2

jsbn@0.1.1

json-schema-traverse@0.4.1

jsprim@1.4.2

jstream@0.2.11

lodash@2.4.2

mime-db@1.52.0

mime-types@2.1.35

object-keys@0.4.0

performance-now@2.1.0

psl@1.9.0

punycode@2.3.1

readable-stream@1.1.14

safe-buffer@5.2.1

safer-buffer@2.1.2

sshpk@1.18.0

string_decoder@0.10.31

through2@0.2.3

underscore@1.13.6

uuid@3.4.0

verror@1.10.0

xtend@2.1.2

youtube-mp3-downloader@0.3.5

ytdl-core@0.5.1

N/A

N/A

8 Packages, Including:

cheerio@0.18.0

dom-serializer@0.0.1

domelementtype@1.1.3

domhandler@2.3.0

domutils@1.4.3

domutils@1.5.1

fluent-ffmpeg@2.0.1

speedometer@0.1.4

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

6 Packages, Including:

aws-sign2@0.7.0

caseless@0.12.0

forever-agent@0.6.1

oauth-sign@0.9.0

request@2.88.2

tunnel-agent@0.6.0

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

4 Packages, Including:

domelementtype@1.3.1

entities@1.1.2

progress-stream@1.2.0

uri-js@4.4.1

BSD-like

Invalid

Not OSI Approved

3 Packages, Including:

CSSselect@0.4.1

CSSwhat@0.4.7

entities@1.0.0

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

3 Packages, Including:

bcrypt-pbkdf@1.0.2

qs@6.5.3

tough-cookie@2.5.0

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

3 Packages, Including:

har-schema@2.0.0

inherits@2.0.4

json-stringify-safe@5.0.1

BSD

Invalid

Not OSI Approved

1 Packages, Including:

clarinet@0.11.0

(AFL-2.1 OR BSD-3-Clause)

Permissive

1 Packages, Including:

json-schema@0.4.0

The Unlicense

Public Domain

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

private-use

modify

Cannot

include-copyright

hold-liable

Must

1 Packages, Including:

tweetnacl@0.14.5

Direct Dependencies

4

All Dependencies CSV

ⓘ This is a list of youtube-mp3-downloader 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
async	1.2.1	93.15 kB	MIT	prod
fluent-ffmpeg	2.0.1	171.45 kB	UNKNOWN	prod	1
progress-stream	1.2.0	3.77 kB	BSD-2-Clause	prod	1
ytdl-core	0.5.1	2.2 MB	MIT	prod	7 11 5 4

Recent Versions