github.com/johnleeming/wekanmain

johnleeming/wekan Dependency Health Report

235 dependencies · 668 connections · 1 commit tracked

9 issues found

5 license risks · 4 brittle deps

@.. @.. @.. @.. @.. @.. @.. @mete.. @.. @.. ansi-regex@2.1.1 ansi-regex@4.1.1 aproba a.. a.. are-we-t.. a.. are-we-t.. a.. a.. a.. array.. a.. asn.. asn1.js assert async-function async-genera.. a.. b.. base64-js bin.. bl bl bl bl bl bn.js@4.12.3 bn.js@4.12.3 bn.js@4.9.0 bn.js@4.9.0 bn.js@5.2.3 bn.js@5.2.3 brorand brorand b.. b.. b.. b.. b.. brows.. b.. b.. b.. b.. b.. b.. bson bson-ext b.. b.. b.. buf.. buf.. b.. b.. b.. buffer-xor b.. builtin-status-codes builtin-status-codes cal.. c.. cal.. cho.. c.. c.. c.. c.. c.. code-point-at commander console-browserify console-control-strings constants-browserify core-js core-util-is c.. c.. cssfilter d.. d.. d.. d.. d.. deep-extend d.. defin.. defin.. defin.. define-data-pro.. d.. d.. d.. d.. d.. delegates des.. d.. d.. d.. d.. detect-libc d.. d.. domain-browser d.. emoji-regex e.. es-abstract es-define-pr.. es-.. e.. e.. e.. e.. e.. e.. es-set-t.. e.. e.. e.. e.. e.. e.. e.. e.. e.. e.. e.. e.. e.. es-to.. e.. e.. e.. e.. es6-promise e.. events evp_b.. expand-template file-uri-to-path for.. fs-constants f.. f.. funct.. f.. f.. funct.. funct.. funct.. f.. f.. f.. gauge generator-fu.. g.. get.. g.. g.. g.. get-s.. g.. g.. github-from-package glo.. globa.. g.. gopd has-bigints has-prop.. has.. has-p.. h.. h.. h.. h.. h.. h.. has-symbols has-t.. has-unicode h.. h.. h.. h.. h.. h.. h.. has.. hash.js hasown hma.. https-browserify ieee754 inherits ini ini i.. i.. i.. i.. is-ar.. i.. i.. is-arguments is-arguments i.. is-argum.. i.. i.. i.. i.. is-arguments is-arguments is-ar.. i.. i.. i.. i.. is-.. i.. is-bo.. is-bo.. is-callable i.. i.. is-da.. i.. i.. i.. is-da.. i.. is-date-.. i.. is-fi.. i.. i.. is-fullwidth-code-point@3.0.0 i.. i.. is-map is-nan i.. i.. i.. i.. i.. i.. is-negative-zero i.. is-nu.. is-nu.. is-.. is-set i.. i.. i.. is-sh.. i.. i.. is-.. is-st.. is-st.. is-.. is-typed-array@1.1.15 is-typed-array@1.1.9 is-weakmap is-.. is-we.. i.. is-.. is-we.. isarray i.. isarray@1.0.0 i.. isarray@2.0.5 math-intrins.. md5.. meteor-node-stubs m.. m.. m.. m.. m.. m.. m.. m.. mimic-response minimalistic-as.. minimalistic-assert minimalistic-crypto.. minimalistic-crypto-utils min.. minimist m.. mkdirp-classic nan napi-build-utils nod.. npmlog number-is-nan object-assign o.. object-i.. object-inspect obj.. object-is object-is objec.. o.. objec.. o.. o.. o.. objec.. objec.. o.. o.. o.. o.. objec.. o.. o.. o.. o.. o.. o.. o.. o.. once os os-browserify own.. o.. o.. o.. o.. o.. o.. own-keys o.. o.. pako parse-a.. path-browserify pbk.. possible-typed-array-names prebuild-install process process-nextick-args p.. pump punycode punycode qs qs qs querystring-es3 r.. r.. r.. r.. randomby.. r.. randombytes ran.. rc r.. r.. r.. reada.. r.. r.. readable-stream.. readable-stream.. r.. r.. r.. regenerator-runtime r.. regex.. r.. regex.. r.. rip.. s.. s.. s.. s.. s.. safe-arr.. s.. s.. s.. safe-.. safe-buffer@5.1.2 safe-buffer@5.2.1 s.. safe-pus.. s.. safe-.. safe-.. s.. s.. s.. s.. s.. semver set-blocking s.. set-f.. s.. set-function.. set-func.. s.. set-f.. set.. set-p.. s.. s.. set-proto s.. s.. s.. set-proto set-p.. s.. set-p.. s.. setimmediate s.. sha.j.. s.. s.. sha.j.. s.. s.. s.. s.. s.. s.. s.. s.. side-cha.. s.. side-.. side-.. s.. s.. side-.. s.. signal-exit s.. simple-concat sim.. s.. s.. s.. s.. s.. stream-b.. strea.. s.. stream-browserify stream-browserify s.. s.. stream-h.. strea.. s.. s.. s.. stream-http s.. s.. strin.. strin.. s.. s.. s.. s.. strin.. s.. s.. s.. strin.. s.. strin.. s.. s.. s.. strin.. s.. s.. s.. strin.. s.. strin.. s.. s.. s.. s.. s.. s.. strip-json-comments tar.. tar.. t.. to-buffer t.. t.. tty-browserify t.. t.. t.. t.. tunnel-a.. tunne.. t.. t.. tunnel-agent t.. t.. t.. t.. t.. t.. t.. typed.. t.. t.. u.. u.. u.. url util util-deprecate util u.. u.. u.. vm-browserify wekan w.. w.. w.. w.. which.. w.. which-ty.. w.. wid.. wrappy xss xt.. x.. x.. Artistic-2.0 (weak-copyleft) adds node crypto signing for browsers ⚖ ISC createECDH but browserifiable ⚖ MIT implementation of crypto for the browser ⚖ MIT Regular expression for matching ANSI escape codes ⚖ MIT Regular expression for matching ANSI escape codes ⚖ MIT A ridiculously light-weight argument validator (now browser friendly) ⚖ ISC Keep track of the overall completion of many disparate processes ⚖ ISC Get the byte length of an ArrayBuffer, even in engines without a `.byteLength` method. ⚖ MIT ES spec-compliant shim for ArrayBuffer.prototype.slice ⚖ MIT ASN.1 encoder and decoder ⚖ MIT The assert module from Node.js, for the browser. ⚖ MIT A function that returns the normally hidden `AsyncFunction` constructor ⚖ MIT A function that returns the normally hidden `AsyncGeneratorFunction` constructor ⚖ MIT Returns an array of Typed Array names that are available in the current environment ⚖ MIT 🐠 Babel is a compiler for writing next generation JavaScript. last commit: 2026-06-02 last release: 2026-05-25 ★ 43.9k ⚖ MIT Base64 encoding/decoding in pure JS ⚖ MIT Helper module for loading your native module's .node file ⚖ MIT Buffer List: collect buffers and access with a standard readable Buffer interface, streamable too! ⚖ MIT Big number implementation in pure javascript ⚖ MIT Big number implementation in pure javascript ⚖ MIT Big number implementation in pure javascript ⚖ MIT Random number generator for browsers and node.js ⚖ MIT aes, for browserify ⚖ MIT ciphers for the browser ⚖ MIT browserify-des === ⚖ MIT RSA for browserify ⚖ MIT Full zlib module for the browser ⚖ MIT A bson parser for node.js and the browser ⚖ Apache-2.0 The C++ bson parser for the node.js mongodb driver. ⚖ Apache-2.0 Node.js Buffer API, for the browser ⚖ MIT A simple module for bitwise-xor on buffers ⚖ MIT The map of HTTP status codes from the builtin http module ⚖ MIT Robustly `.call.bind()` a function ⚖ MIT Helper functions around Function call/apply/bind, for use in `call-bind` ⚖ MIT Robust call-bound JavaScript intrinsics, using `call-bind` and `get-intrinsic`. ⚖ MIT like `chown -R` ⚖ ISC abstract base class for crypto-streams ⚖ MIT ES2015 `String#codePointAt()` ponyfill ⚖ MIT node.js command-line interfaces made easy last commit: 2026-06-01 last release: 2026-05-29 ★ 28.2k ⚖ MIT Emulate console for all the browsers A library of cross-platform tested terminal/console command strings for doing things like color and cursor positioning. This is a subset of both ansi and vt100. All control codes included work on both Windows & Unix-like OSes, except where noted. ⚖ ISC node's constants module for the browser ⚖ MIT Standard Library last commit: 2026-06-04 last release: 2026-03-16 ★ 25.5k ⚖ MIT The `util.is*` functions introduced in Node v0.12. ⚖ MIT create hashes for browserify ⚖ MIT node style hmacs in the browser ⚖ MIT CSS白名单过滤器 ⚠ last commit: 2024-08-15 ★ 29 ⚖ MIT Get the ArrayBuffer out of a DataView, robustly. ⚖ MIT Get the byteLength out of a DataView, robustly. ⚖ MIT Get the byteOffset out of a DataView, robustly. ⚖ MIT Decompress a HTTP response if needed ⚖ MIT Recursive object extending ⚖ MIT Define a data property on an object. Will fall back to assignment in an engine without descriptors. ⚖ MIT Define multiple non-enumerable properties at once. Uses `Object.defineProperty` when available; falls back to standard assignment in older engines. ⚖ MIT delegate methods and accessors to another property ⚖ MIT DES implementation ⚖ MIT Node.js module to detect the C standard library (libc) implementation family and version ⚖ Apache-2.0 pure js diffie-hellman ⚖ MIT Node's domain module for the web browser. This is merely an evented try...catch with the same API as node, nothing more. ⚖ Artistic-2.0 · weak-copyleft If available, the `Object.prototype.__proto__` accessor and mutator, call-bound ⚖ MIT A regular expression to match all Emoji-only symbols as per the Unicode Standard. ⚖ MIT Call a callback when a readable/writable/duplex stream has completed or failed. ⚖ MIT ECMAScript spec abstract operations. ⚖ MIT `Object.defineProperty`, but not IE 8's broken one. ⚖ MIT A simple cache for a few of the JS Error constructors. ⚖ MIT ES Object-related atoms: Object, ToObject, RequireObjectCoercible ⚖ MIT A helper to optimistically set Symbol.toStringTag, when possible. ⚖ MIT ECMAScript “ToPrimitive” algorithm. Provides ES5 and ES2015 versions. ⚖ MIT A polyfill for ES6-style Promises ⚠ last commit: 2022-11-14 ★ 7.3k ⚖ MIT Node's event emitter for all engines. ⚖ MIT The insecure key derivation algorithm from OpenSSL ⚖ MIT Expand placeholders in a template string ⚖ (MIT OR WTFPL) Convert a file: URI to a file path ⚖ MIT A better forEach ⚖ MIT Require constants across node and the browser ⚖ MIT Implementation of Function.prototype.bind ⚖ MIT An ES2015 spec-compliant `Function.prototype.name` shim ⚖ MIT Does this JS environment support the `name` property on functions? ⚖ MIT A terminal based horizontal guage ⚖ ISC A function that returns the normally hidden `GeneratorFunction` constructor ⚖ MIT Get and robustly cache all JS language-level intrinsics at first require time ⚖ MIT Robustly get the [[Prototype]] of an object ⚖ MIT Gets the description of a Symbol. Handles `Symbol()` vs `Symbol('')` properly when possible. ⚖ MIT return the github url from a package.json file ⚖ MIT ECMAScript spec-compliant polyfill/shim for `globalThis` ⚖ MIT `Object.getOwnPropertyDescriptor`, but accounts for IE's broken implementation. ⚖ MIT Determine if the JS environment has BigInt support. ⚖ MIT Does the environment have full property descriptor support? Handles IE 8's broken defineProperty/gOPD. ⚖ MIT Does this environment have the ability to get the [[Prototype]] of an object on creation with `__proto__`? ⚖ MIT Determine if the JS environment has Symbol support. Supports spec, or shams. ⚖ MIT Determine if the JS environment has `Symbol.toStringTag` support. Supports spec, or shams. ⚖ MIT Try to guess if your terminal supports unicode ⚖ ISC abstract base class for hash-streams ⚖ MIT abstract base class for hash-streams ⚖ MIT Various hash functions that could be run by both browser and node ⚖ MIT A robust, ES3 compatible, "has own property" predicate. ⚖ MIT Deterministic random bit generator (hmac) ⚖ MIT https module compatability for browserify ⚖ MIT Read/write IEEE754 floating point numbers from/to a Buffer or array-like object ⚖ BSD-3-Clause Browser-friendly inheritance fully compatible with standard node.js inherits() ⚖ ISC An ini encoder/decoder for node ⚖ ISC ES spec-like internal slots ⚖ MIT Is this an arguments object? It's a harder question than you think. ⚖ MIT Is this value a JS ArrayBuffer? ⚖ MIT Determine if a function is a native async function. ⚖ MIT Is this value an ES BigInt? ⚖ MIT Is this value a JS Boolean? This module works cross-realm/iframe, and despite ES6 @@toStringTag. ⚖ MIT Is this JS value callable? Works with Functions and GeneratorFunctions, despite ES6 @@toStringTag. ⚖ MIT Is this value a JS DataView? This module works cross-realm/iframe, does not depend on `instanceof` or mutable properties, and despite ES6 Symbol.toStringTag. ⚖ MIT Is this value a JS Date object? This module works cross-realm/iframe, and despite ES6 @@toStringTag. ⚖ MIT Is this value a JS FinalizationRegistry? This module works cross-realm/iframe, and despite ES6 @@toStringTag. ⚖ MIT Check if the character represented by a given Unicode code point is fullwidth ⚖ MIT Check if the character represented by a given Unicode code point is fullwidth ⚖ MIT Determine if a function is a native generator function. ⚖ MIT Is this value a JS Map? This module works cross-realm/iframe, and despite ES6 @@toStringTag. ⚖ MIT ES2015-compliant shim for Number.isNaN - the global isNaN returns false positives. ⚖ MIT Is this value negative zero? === will lie to you ⚖ MIT Is this value a JS Number object? This module works cross-realm/iframe, and despite ES6 @@toStringTag. ⚖ MIT Is this value a JS regex? Works cross-realm/iframe, and despite ES6 @@toStringTag ⚖ MIT Is this value a JS Set? This module works cross-realm/iframe, and despite ES6 @@toStringTag. ⚖ MIT Is this value a JS SharedArrayBuffer? ⚖ MIT Is this value a JS String object or primitive? This module works cross-realm/iframe, and despite ES6 @@toStringTag. ⚖ MIT Determine if a value is an ES6 Symbol or not. ⚖ MIT Is this value a JS Typed Array? This module works cross-realm/iframe, does not depend on `instanceof` or mutable properties, and despite ES6 Symbol.toStringTag. ⚖ MIT Is this value a JS Typed Array? This module works cross-realm/iframe, does not depend on `instanceof` or mutable properties, and despite ES6 Symbol.toStringTag. ⚖ MIT Is this value a JS WeakMap? This module works cross-realm/iframe, and despite ES6 @@toStringTag. ⚖ MIT Is this value a JS WeakRef? This module works cross-realm/iframe, and despite ES6 @@toStringTag. ⚖ MIT Is this value a JS WeakSet? This module works cross-realm/iframe, and despite ES6 @@toStringTag. ⚖ MIT Array#isArray for older browsers ⚖ MIT Array#isArray for older browsers ⚖ MIT Array#isArray for older browsers ⚖ MIT ES Math-related intrinsics and helpers, robustly cached. ⚖ MIT node style md5 on pure JavaScript ⚖ MIT Stub implementations of Node built-in modules, a la Browserify ⚖ MIT Miller Rabin algorithm for primality test ⚖ MIT Mimic a Node.js HTTP response stream ⚖ MIT minimalistic-assert === ⚖ ISC Minimalistic tools for JS crypto modules ⚖ MIT parse argument options ⚖ MIT Mirror of mkdirp 0.5.2 ⚖ MIT Native Abstractions for Node.js: C++ header for Node 0.8 -> 26 compatibility ⚖ MIT A set of utilities to assist developers of tools that build N-API native add-ons ⚖ MIT Get the Node ABI for a given target and runtime, and vice versa. ⚖ MIT logger for npm ⚖ ISC ES2015 Number.isNaN() ponyfill ⚖ MIT ES2015 `Object.assign()` ponyfill ⚖ MIT string representations of objects in node and the browser ⚖ MIT ES2015-compliant shim for Object.is - differentiates between -0 and +0 ⚖ MIT An Object.keys replacement, in case Object.keys is not available. From https://github.com/es-shims/es5-shim ⚖ MIT ES6 spec-compliant Object.assign shim. From https://github.com/es-shims/es6-shim ⚖ MIT Run a function exactly one time ⚖ ISC NodeJS Core Module ⚠ last commit: 2021-07-13 ★ 20 ⚖ MIT The [os](https://nodejs.org/api/os.html) module from node.js, but for browsers. ⚖ MIT Robustly get an object's own property keys (strings and symbols), including non-enumerables when possible ⚖ MIT zlib port to javascript - fast, modularized, with browser support ⚖ (MIT AND Zlib) · unknown utility library for parsing asn1 files for use with browserify-sign. ⚖ ISC the path module from node core for browsers ⚖ MIT This library provides the functionality of PBKDF2 with the ability to use any supported hashing algorithm returned from crypto.getHashes() ⚖ MIT A simple list of possible Typed Array names. ⚖ MIT A command line tool to easily install prebuilt binaries for multiple version of node/iojs on a specific platform ⚖ MIT process information for node.js and browsers ⚖ MIT process.nextTick but always with args ⚖ MIT browserify version of publicEncrypt & privateDecrypt ⚖ MIT pipe streams together and close all of them if one of them closes ⚖ MIT A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms. ⚖ MIT A querystring parser that supports nesting and arrays, with a depth limit ⚖ BSD-3-Clause Node's querystring module for all engines. (ES3 compat fork) random bytes from browserify stand alone ⚖ MIT random fill from browserify stand alone ⚖ MIT hardwired configuration loader ⚖ (BSD-2-Clause OR MIT OR Apa… Streams3, a user-land copy of the stream library from Node.js ⚖ MIT Streams3, a user-land copy of the stream library from Node.js ⚖ MIT An ES2015 mostly-spec-compliant `Reflect.getPrototypeOf` sham/polyfill/replacement that works in as many engines as possible ⚖ MIT An ES2015 mostly-spec-compliant `Reflect.getPrototypeOf` sham/polyfill/replacement that works in as many engines as possible ⚖ MIT Source transformer enabling ECMAScript 6 generator functions in JavaScript-of-today. ⚠ last commit: 2024-02-29 ⚠ last release: 2017-04-28 ★ 3.8k ⚖ MIT ES6 spec-compliant RegExp.prototype.flags shim. ⚖ MIT Compute ripemd160 of bytes or strings. ⚖ MIT `Array.prototype.concat`, but made safe by ignoring Symbol.isConcatSpreadable ⚖ MIT Safer Node.js Buffer API ⚖ MIT Safer Node.js Buffer API ⚖ MIT Push an array of items into an array, while being robust against prototype modification ⚖ MIT Give a regex, get a robust predicate function that tests it against a string. ⚖ MIT The semantic version parser used by npm. ⚖ ISC set blocking stdio and stderr ensuring that terminal output does not truncate ⚖ ISC Set a function's length property ⚖ MIT Set a function's name property ⚖ MIT Robustly set the [[Prototype]] of an object ⚖ MIT A shim for the setImmediate efficient script yielding API ⚖ MIT Streamable SHA hashes in pure javascript ⚖ (MIT AND BSD-3-Clause) · unknown Streamable SHA hashes in pure javascript ⚖ MIT Store information about any JS value in a side channel. Uses WeakMap if available. ⚖ MIT Store information about any JS value in a side channel, using a linked list ⚖ MIT Store information about any JS value in a side channel, using a Map ⚖ MIT Store information about any JS value in a side channel. Uses WeakMap if available. ⚖ MIT when you want to fire an event no matter how a process exits. ⚖ ISC Super-minimalist version of `concat-stream`. Less than 15 lines! ⚖ MIT Simplest way to make http get requests. Supports HTTPS, redirects, gzip/deflate, streams in < 100 lines. ⚖ MIT Firefox 17-26 iterators throw a StopIteration object to indicate "done". This normalizes it. ⚖ MIT the stream module from node core for browsers ⚖ MIT Streaming http in the browser ⚖ MIT Get the visual width of a string - the number of columns required to display it ⚖ MIT Get the visual width of a string - the number of columns required to display it ⚖ MIT ES5 spec-compliant shim for String.prototype.trim ⚖ MIT ES2019 spec-compliant String.prototype.trimEnd shim. ⚖ MIT ES2019 spec-compliant String.prototype.trimStart shim. ⚖ MIT The string_decoder module from Node core ⚖ MIT The string_decoder module from Node core ⚖ MIT Strip ANSI escape codes ⚖ MIT Strip ANSI escape codes from a string ⚖ MIT Strip comments from JSON. Lets you use comments in your JSON files! ⚖ MIT filesystem bindings for tar-stream ⚖ MIT tar-stream is a streaming tar parser and generator and nothing else. It is streams2 and operates purely using streams which means you can easily extract/parse tarballs without ever hitting the file system. ⚖ MIT timers module for browserify ⚖ MIT Pass in a string, array, Buffer, Data View, or Uint8Array, and get a Buffer back. ⚖ MIT the tty module from node core for browsers ⚖ MIT HTTP proxy tunneling agent. Formerly part of mikeal/request, now a standalone module. ⚖ Apache-2.0 Get the ArrayBuffer out of a TypedArray, robustly. ⚖ MIT Robustly get the byte length of a Typed Array ⚖ MIT Robustly get the byte offset of a Typed Array ⚖ MIT Robustly get the length of a Typed Array ⚖ MIT Unbox a boxed JS primitive value. ⚖ MIT The core `url` packaged standalone for use with Browserify. ⚖ MIT Node.js's util module for all engines ⚖ MIT The Node.js `util.deprecate()` function with browser support ⚖ MIT vm module for the browser ⚖ MIT wekan Which kind of boxed JS primitive is this? ⚖ MIT What is the type of this builtin JS value? ⚖ MIT Which kind of Collection (Map, Set, WeakMap, WeakSet) is this JavaScript value? Works cross-realm, without `instanceof`, and despite Symbol.toStringTag. ⚖ MIT Which kind of Typed Array is this JavaScript value? Works cross-realm, without `instanceof`, and despite Symbol.toStringTag. ⚖ MIT Which kind of Typed Array is this JavaScript value? Works cross-realm, without `instanceof`, and despite Symbol.toStringTag. ⚖ MIT A wide-character aware text alignment function for use on the console or with fixed width fonts. ⚖ ISC Callback wrapping utility ⚖ ISC Sanitize untrusted HTML (to prevent XSS) with a configuration specified by a Whitelist last commit: 2026-05-06 ★ 5.3k ⚖ MIT extend like a boss ⚖ MIT stacktower.io
Dependencies

235

Connections

668

Vulnerabilities

0

License Risks

5

Security Overview

License Risks

5 packages with non-permissive or unknown licenses

Weak Copyleft (1)

  • •domain-browser(Artistic-2.0)

Unknown (4)

  • •pako
  • •console-browserify
  • •sha.js@2.4.12

Brittle Dependencies

4 unmaintained or at-risk packages

  • •cssfilter(low activity or limited maintainers)via xss
  • •es6-promise(low activity or limited maintainers)
  • •os(low activity or limited maintainers)
  • •regenerator-runtime(archived)via babel-runtime

Heaviest Dependencies

Direct DependencyTransitive Deps% of Total
meteor-node-stubs17173.1%
bson-ext6929.5%
xss20.9%

Add to your README

Click a card to copy the markdown to your clipboard.

Get dependency diffs on every PR
- uses: stacktower-io/stacktower-action@v1
  with:
    api-key: ${{ secrets.STACKTOWER_API_KEY }}
    fail-on-vuln: true
Starts from package.json - Free with any account

Commit History

CommitDepsRenderedCompare
2352mo agocurrent

Sign in to access full commit history.

Explore more repositories on Stacktower·How tower diagrams work

Cookie Preferences

We use essential cookies for authentication. We also use analytics cookies to understand how you use Stacktower and improve the experience. Read our Privacy Policy.

  1. Server error
    Something went wrong. Please try again later.
  2. Server error
    Something went wrong. Please try again later.