Generated on Dec 2, 2023 via pnpm

yuidocjs 0.10.2

YUIDoc, YUI's JavaScript Documentation engine.

Package summary

41

issues

7

licenses

Package created

10 Jan 2012

Version published

11 Jul 2016

Maintainers

6

Total deps

115

Direct deps

7

License

BSD-3-Clause

Issues

41

9 critical severity issues

asn1@0.1.11

Package has no specified license

Recommendation: Check the package code and files for license information

via: yui@3.18.1

assert-plus@0.1.5

Package has no specified license

Recommendation: Check the package code and files for license information

via: yui@3.18.1

aws-sign2@0.5.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: yui@3.18.1

combined-stream@0.0.7

Package has no specified license

Recommendation: Check the package code and files for license information

via: yui@3.18.1

ctype@0.5.3

Package has no specified license

Recommendation: Check the package code and files for license information

via: yui@3.18.1

delayed-stream@0.0.5

Package has no specified license

Recommendation: Check the package code and files for license information

via: yui@3.18.1

forever-agent@0.5.2

Package has no specified license

Recommendation: Check the package code and files for license information

via: yui@3.18.1

mime@1.2.11

Package has no specified license

Recommendation: Check the package code and files for license information

via: yui@3.18.1

oauth-sign@0.3.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: yui@3.18.1

20 high severity issues

qs@1.0.2

Prototype Pollution Protection Bypass in qs

Recommendation: Upgrade to version 6.0.4 or later

via: yui@3.18.1

hawk@1.1.1

Regular Expression Denial of Service in hawk

Recommendation: Upgrade to version 3.1.3 or later

via: yui@3.18.1

mime@1.2.11

mime Regular Expression Denial of Service when MIME lookup performed on untrusted user input

Recommendation: Upgrade to version 1.4.1 or later

via: yui@3.18.1

hoek@0.9.1

Prototype Pollution in hoek

Recommendation: Upgrade to version 4.2.1 or later

via: yui@3.18.1

qs@1.0.2

qs vulnerable to Prototype Pollution

Recommendation: Upgrade to version 6.2.4 or later

via: yui@3.18.1

hawk@1.1.1

Uncontrolled Resource Consumption in Hawk

Recommendation: Upgrade to version 9.0.1 or later

via: yui@3.18.1

boom@0.4.2

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: yui@3.18.1

cryptiles@0.2.2

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: yui@3.18.1

hawk@1.1.1

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: yui@3.18.1

hoek@0.9.1

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: yui@3.18.1

qs@1.0.2

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: yui@3.18.1

sntp@0.2.4

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: yui@3.18.1

yui@3.18.1

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: yui@3.18.1

boom@0.4.2

Deprecated package

via: yui@3.18.1

cryptiles@0.2.2

Deprecated package

via: yui@3.18.1

hawk@1.1.1

Deprecated package

via: yui@3.18.1

hoek@0.9.1

Deprecated package

via: yui@3.18.1

node-uuid@1.4.8

Deprecated package

via: yui@3.18.1

request@2.40.0

Deprecated package

via: yui@3.18.1

sntp@0.2.4

Deprecated package

via: yui@3.18.1

5 moderate severity issues

tunnel-agent@0.4.3

Memory Exposure in tunnel-agent

Recommendation: Upgrade to version 0.6.0 or later

via: yui@3.18.1

markdown-it@4.4.0

Uncontrolled Resource Consumption in markdown-it

Recommendation: Upgrade to version 12.3.2 or later

via: markdown-it@4.4.0

request@2.40.0

Server-Side Request Forgery in Request

Recommendation: None

via: yui@3.18.1

request@2.40.0

Remote Memory Exposure in request

Recommendation: Upgrade to version 2.68.0 or later

via: yui@3.18.1

mdn-links@0.1.0

Package has no specified source code repository

via: mdn-links@0.1.0

7 low severity issues

boom@0.4.2

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: yui@3.18.1

cryptiles@0.2.2

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: yui@3.18.1

hawk@1.1.1

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: yui@3.18.1

hoek@0.9.1

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: yui@3.18.1

qs@1.0.2

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: yui@3.18.1

sntp@0.2.4

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: yui@3.18.1

yui@3.18.1

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: yui@3.18.1

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

81 Packages, Including:

accepts@1.3.8

argparse@1.0.10

array-flatten@1.1.1

async@0.9.2

balanced-match@1.0.2

body-parser@1.20.1

brace-expansion@1.1.11

bytes@3.1.2

call-bind@1.0.5

concat-map@0.0.1

content-disposition@0.5.4

content-type@1.0.5

cookie-signature@1.0.6

cookie@0.5.0

debug@2.6.9

define-data-property@1.1.1

depd@2.0.0

destroy@1.2.0

ee-first@1.1.1

encodeurl@1.0.2

escape-html@1.0.3

etag@1.8.1

express@4.18.2

finalhandler@1.2.0

form-data@0.1.4

forwarded@0.2.0

fresh@0.5.2

function-bind@1.1.2

get-intrinsic@1.2.2

gopd@1.0.1

has-property-descriptors@1.0.1

has-proto@1.0.1

has-symbols@1.0.3

hasown@2.0.0

http-errors@2.0.0

http-signature@0.10.1

iconv-lite@0.4.24

ipaddr.js@1.9.1

linkify-it@1.2.4

markdown-it@4.4.0

mdn-links@0.1.0

mdurl@1.0.1

media-typer@0.3.0

merge-descriptors@1.0.1

methods@1.1.2

mime-db@1.52.0

mime-types@1.0.2

mime-types@2.1.35

mime@1.6.0

ms@2.0.0

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

11 Packages, Including:

fs.realpath@1.0.0

glob@7.2.3

graceful-fs@4.2.11

inflight@1.0.6

inherits@2.0.4

json-stringify-safe@5.0.1

minimatch@3.1.2

once@1.4.0

rimraf@2.7.1

setprototypeof@1.2.0

wrappy@1.0.2

N/A

N/A

9 Packages, Including:

asn1@0.1.11

assert-plus@0.1.5

aws-sign2@0.5.0

combined-stream@0.0.7

ctype@0.5.3

delayed-stream@0.0.5

forever-agent@0.5.2

mime@1.2.11

oauth-sign@0.3.0

BSD

Invalid

Not OSI Approved

7 Packages, Including:

boom@0.4.2

cryptiles@0.2.2

hawk@1.1.1

hoek@0.9.1

qs@1.0.2

sntp@0.2.4

yui@3.18.1

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

4 Packages, Including:

qs@6.11.0

sprintf-js@1.0.3

tough-cookie@4.1.3

yuidocjs@0.10.2

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

2 Packages, Including:

request@2.40.0

tunnel-agent@0.4.3

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

1 Packages, Including:

entities@1.1.2

Direct Dependencies

7

All Dependencies CSV

ⓘ This is a list of yuidocjs 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
express	4.18.2	54.5 kB	MIT	prod
graceful-fs	4.2.11	9.57 kB	ISC	prod
markdown-it	4.4.0	137.03 kB	MIT	prod	1
mdn-links	0.1.0	33.1 kB	MIT	prod	1
minimatch	3.1.2	11.66 kB	ISC	prod
rimraf	2.7.1	5.53 kB	ISC	prod
yui	3.18.1	2.76 MB	BSD	prod	9 20 3 7

Recent Versions