node-import

v0.9.2npm· JavaScript

Imports dependencies and run it directly or concatenate them and exports to file.

The verdict

Has 1 high-severity advisory. Verify a patched version exists before using. Check the OSV link for the fixed-in version.

Check the OSV link for the fixed-in version.

Live from the npm registry · derived rules, not AI

How it scores

MaintenanceAbandoned

PopularityNiche

Security1 advisory

LicensePermissive

DepsModerate

Maintenance

Last published 11 years ago.

Popularity

16 downloads / week

Security

1 known advisory (worst: high severity).

License

MIT

Dependencies

7 direct dependencies

Security advisories

Live from OSV.dev · cached 24h

HIGH
node-import `params` argument can be controlled by users without any sanitization
GHSA-pc62-cq5x-3j5g Published 2022-07-26

Recent releases