parse-ini

v1.0.6npm· JavaScript

Parse ini file to get the content and variables of the ini file as node object.

The verdict

Has 1 high-severity advisory. Verify a patched version exists before using. Check the OSV link for the fixed-in version.

Check the OSV link for the fixed-in version.

Live from the npm registry · derived rules, not AI

How it scores

MaintenanceAbandoned

PopularityUnknown

Security1 advisory

LicensePermissive

DepsZero deps

Maintenance

Last published 8 years ago.

Popularity

Download count unavailable.

Security

1 known advisory (worst: high severity).

License

MIT

Dependencies

No runtime dependencies

Security advisories

Live from OSV.dev · cached 24h

HIGH
parse-ini is vulnerable to Prototype Pollution in index.js()
GHSA-x72j-hv9f-qqh4 Published 2026-05-07

Recent releases