apollographql/apollo-client-devtools 软件分析报告

基础信息

项目名称:apollographql/apollo-client-devtools

项目徽章:

Security Status

仓库地址:https://github.com/pterodactyl/panel

检测报告地址:https://www.murphysec.com/console/report/1721948706440548352/1721948707317157888

此报告由Murphysec提供

漏洞列表

漏洞名称 漏洞类型 MPS编号 CVE编号 漏洞等级
polished 存在拒绝服务漏洞 拒绝服务 MPS-2022-13975 低危

缺陷组件

组件名称 版本 最小修复版本 依赖关系 修复建议
polished 4.1.1 4.1.3 间接依赖 可选修复

许可证风险

许可证类型 相关组件 许可证风险
MIT 140
BSD-3-Clause 3
ISC 1
Apache-2.0 12
自定义许可证 1
0BSD 3

SBOM清单

组件名称 组件版本 是否直接依赖 仓库
@radix-ui/react-roving-focus 1.0.2 间接依赖 npm
fault 1.0.4 间接依赖 npm
csstype 3.1.1 间接依赖 npm
zen-observable 0.10.0 间接依赖 npm
hoist-non-react-statics 3.3.2 间接依赖 npm
copy-to-clipboard 3.3.1 间接依赖 npm
yaml 1.10.2 间接依赖 npm
@react-aria/switch 3.4.0 间接依赖 npm
space-separated-tokens 1.1.5 间接依赖 npm
@headlessui/react 1.7.17 间接依赖 npm
is-core-module 2.13.0 间接依赖 npm
prismjs 1.27.0 间接依赖 npm
@types/lodash 4.14.191 间接依赖 npm
regenerator-runtime 0.13.11 间接依赖 npm
stylis 4.2.0 间接依赖 npm
@react-types/checkbox 3.4.2 间接依赖 npm
@radix-ui/primitive 1.0.0 间接依赖 npm
@babel/highlight 7.22.13 间接依赖 npm
character-reference-invalid 1.1.4 间接依赖 npm
function-bind 1.1.1 间接依赖 npm
prism-react-renderer 2.0.6 间接依赖 npm
js-tokens 4.0.0 间接依赖 npm
@emotion/memoize 0.8.1 间接依赖 npm
@radix-ui/react-direction 1.0.0 间接依赖 npm
color-convert 1.9.3 间接依赖 npm
highlight.js 10.7.3 间接依赖 npm
@types/base16 1.0.2 间接依赖 npm
@react-aria/utils 3.15.0 间接依赖 npm
client-only 0.0.1 间接依赖 npm
@emotion/utils 1.2.1 间接依赖 npm
@radix-ui/react-presence 1.0.0 间接依赖 npm
react 18.2.0 间接依赖 npm
prismjs 1.29.0 间接依赖 npm
@react-types/switch 3.3.0 间接依赖 npm
supports-color 5.5.0 间接依赖 npm
@swc/helpers 0.4.14 间接依赖 npm
hastscript 6.0.0 间接依赖 npm
path-parse 1.0.7 间接依赖 npm
simple-swizzle 0.2.2 间接依赖 npm
lines-and-columns 1.1.6 间接依赖 npm
format 0.2.2 间接依赖 npm
is-alphanumerical 1.0.4 间接依赖 npm
@emotion/sheet 1.2.2 间接依赖 npm
react-json-tree 0.18.0 间接依赖 npm
xtend 4.0.2 间接依赖 npm
@radix-ui/react-primitive 1.0.1 间接依赖 npm
tippy.js 6.3.7 间接依赖 npm
compute-scroll-into-view 1.0.16 间接依赖 npm
graphql-tag 2.12.6 间接依赖 npm
zen-observable-ts 1.2.5 间接依赖 npm
json-parse-even-better-errors 2.3.1 间接依赖 npm
react-resizable-panels 0.0.55 间接依赖 npm
@emotion/weak-memoize 0.3.1 间接依赖 npm
optimism 0.16.2 间接依赖 npm
@radix-ui/react-context 1.0.0 间接依赖 npm
react-is 17.0.1 间接依赖 npm
@radix-ui/react-use-layout-effect 1.0.0 间接依赖 npm
@wry/context 0.7.0 间接依赖 npm
tslib 2.4.1 间接依赖 npm
base16 1.0.0 间接依赖 npm
@radix-ui/react-id 1.0.0 间接依赖 npm
@types/prop-types 15.7.3 间接依赖 npm
@babel/helper-validator-identifier 7.22.5 间接依赖 npm
@radix-ui/react-tabs 1.0.2 间接依赖 npm
prop-types 15.8.1 间接依赖 npm
tinycolor2 1.4.2 间接依赖 npm
has-flag 3.0.0 间接依赖 npm
react-base16-styling 0.9.1 间接依赖 npm
@types/classnames 2.2.11 间接依赖 npm
parent-module 1.0.1 间接依赖 npm
supports-preserve-symlinks-flag 1.0.0 间接依赖 npm
find-root 1.1.0 间接依赖 npm
is-hexadecimal 1.0.4 间接依赖 npm
classnames 2.2.6 间接依赖 npm
symbol-observable 4.0.0 间接依赖 npm
@wry/equality 0.5.3 间接依赖 npm
@radix-ui/react-use-callback-ref 1.0.0 间接依赖 npm
@types/tinycolor2 1.4.2 间接依赖 npm
zen-observable 0.8.15 间接依赖 npm
@types/unist 2.0.6 间接依赖 npm
ansi-styles 3.2.1 间接依赖 npm
parse-json 5.2.0 间接依赖 npm
use-deep-compare-effect 1.6.1 间接依赖 npm
@types/parse-json 4.0.0 间接依赖 npm
is-arrayish 0.2.1 间接依赖 npm
lodash.curry 4.1.1 间接依赖 npm
lowlight 1.20.0 间接依赖 npm
character-entities 1.2.4 间接依赖 npm
@emotion/cache 11.11.0 间接依赖 npm
@react-aria/interactions 3.14.0 间接依赖 npm
@react-aria/toggle 3.5.0 间接依赖 npm
react-is 16.13.1 间接依赖 npm
parse-entities 2.0.0 间接依赖 npm
resolve-from 4.0.0 间接依赖 npm
react-syntax-highlighter 15.5.0 间接依赖 npm
comma-separated-tokens 1.0.8 间接依赖 npm
@emotion/react 11.11.1 间接依赖 npm
@react-aria/ssr 3.5.0 间接依赖 npm
error-ex 1.3.2 间接依赖 npm
@wry/trie 0.3.2 间接依赖 npm
has 1.0.3 间接依赖 npm
refractor 3.6.0 间接依赖 npm
@types/scheduler 0.16.2 间接依赖 npm
@react-stately/toggle 3.5.0 间接依赖 npm
@emotion/unitless 0.8.1 间接依赖 npm
@types/prismjs 1.26.0 间接依赖 npm
ts-invariant 0.10.3 间接依赖 npm
@react-aria/focus 3.11.0 间接依赖 npm
response-iterator 0.2.6 间接依赖 npm
@react-stately/utils 3.6.0 间接依赖 npm
lodash 4.17.21 间接依赖 npm
@popperjs/core 2.11.6 间接依赖 npm
chalk 2.4.2 间接依赖 npm
@apollo/client 3.7.10 间接依赖 npm
graphql 16.8.1 间接依赖 npm
object-assign 4.1.1 间接依赖 npm
hast-util-parse-selector 2.2.5 间接依赖 npm
@tippyjs/react 4.2.6 间接依赖 npm
@radix-ui/react-slot 1.0.1 间接依赖 npm
@types/hast 2.3.4 间接依赖 npm
resolve 1.22.4 间接依赖 npm
@apollo/space-kit 9.11.0 间接依赖 npm
@emotion/babel-plugin 11.11.0 间接依赖 npm
@radix-ui/react-collection 1.0.1 间接依赖 npm
downshift 6.1.0 间接依赖 npm
callsites 3.1.0 间接依赖 npm
@react-types/shared 3.17.0 间接依赖 npm
escape-string-regexp 1.0.5 间接依赖 npm
is-alphabetical 1.0.4 间接依赖 npm
source-map 0.5.7 间接依赖 npm
character-entities-legacy 1.1.4 间接依赖 npm
react-copy-to-clipboard 5.1.0 间接依赖 npm
@types/react 17.0.53 间接依赖 npm
dequal 2.0.2 间接依赖 npm
@babel/runtime 7.21.0 间接依赖 npm
@emotion/hash 0.9.1 间接依赖 npm
color-string 1.9.1 间接依赖 npm
safe-buffer 5.1.2 间接依赖 npm
@emotion/serialize 1.1.2 间接依赖 npm
is-arrayish 0.3.2 间接依赖 npm
@emotion/use-insertion-effect-with-fallbacks 1.0.1 间接依赖 npm
property-information 5.6.0 间接依赖 npm
escape-string-regexp 4.0.0 间接依赖 npm
babel-plugin-macros 3.1.0 间接依赖 npm
@heroicons/react 2.0.18 间接依赖 npm
react-dom 18.2.0 间接依赖 npm
import-fresh 3.3.0 间接依赖 npm
tslib 2.1.0 间接依赖 npm
@babel/code-frame 7.22.13 间接依赖 npm
@radix-ui/react-compose-refs 1.0.0 间接依赖 npm
loose-envify 1.4.0 间接依赖 npm
@react-aria/visually-hidden 3.7.0 间接依赖 npm
@babel/helper-string-parser 7.22.5 间接依赖 npm
@babel/helper-module-imports 7.22.5 间接依赖 npm
cosmiconfig 7.1.0 间接依赖 npm
color 3.2.1 间接依赖 npm
scheduler 0.23.0 间接依赖 npm
to-fast-properties 2.0.0 间接依赖 npm
@babel/types 7.22.11 间接依赖 npm
polished 4.1.1 间接依赖 npm
@radix-ui/react-use-controllable-state 1.0.0 间接依赖 npm
color-name 1.1.3 间接依赖 npm
convert-source-map 1.7.0 间接依赖 npm
toggle-selection 1.0.6 间接依赖 npm
path-type 4.0.0 间接依赖 npm
@graphql-typed-document-node/core 3.2.0 间接依赖 npm
tslib 2.5.0 间接依赖 npm
clsx 1.2.1 间接依赖 npm
is-decimal 1.0.4 间接依赖 npm
(0)
上一篇 2023年11月8日
下一篇 2023年11月8日

相关推荐

  • albertosottile/py2exe 软件分析报告

    基础信息 项目名称:albertosottile/py2exe 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1715616231105101824/1715616231730053120 此报告由Murphyse…

    软件分析 2023年10月23日
    0
  • kklldog/AgileConfig 软件分析报告

    基础信息 项目名称:kklldog/AgileConfig 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1719491451167571968/1719491451335344128 此报告由Murphysec提…

    软件分析 2023年11月1日
    0
  • jpadilla/ember-fastboot-docker 软件分析报告

    基础信息 项目名称:jpadilla/ember-fastboot-docker 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1721320916091699200/1724297328491188224 此报告…

    软件分析 2023年11月14日
    0
  • bitkeeper-scm/little-lang 软件分析报告

    基础信息 项目名称:bitkeeper-scm/little-lang 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1716355284862812160/1716355284917338112 此报告由Murp…

    软件分析 2023年10月23日
    0
  • barrettj/BJImageCropper 软件分析报告

    基础信息 项目名称:barrettj/BJImageCropper 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1720857228291145728/1720857228379226112 此报告由Murphy…

    软件分析 2023年11月5日
    0