基础信息
项目名称：apache/dubbo-js
项目徽章：
仓库地址：https://github.com/pterodactyl/panel
检测报告地址：https://www.murphysec.com/console/report/1727360558348324864/1727360558411239424
此报告由Murphysec提供
漏洞列表
暂无
缺陷组件
暂无
许可证风险
| 许可证类型 | 相关组件 | 许可证风险 |
|---|---|---|
| MIT | 58 | 低 |
| Apache-2.0 | 2 | 低 |
| BSD-3-Clause | 4 | 低 |
| ISC | 4 | 低 |
| BSD-2-Clause | 1 | 低 |
SBOM清单
| 组件名称 | 组件版本 | 是否直接依赖 | 仓库 |
|---|---|---|---|
| quick-format-unescaped | 4.0.4 | 间接依赖 | npm |
| lru-cache | 6.0.0 | 间接依赖 | npm |
| ipaddr.js | 1.9.1 | 间接依赖 | npm |
| @fastify/error | 3.3.0 | 间接依赖 | npm |
| @bufbuild/protoc-gen-es | 1.3.0 | 间接依赖 | npm |
| process-warning | 2.2.0 | 间接依赖 | npm |
| find-my-way | 7.6.2 | 间接依赖 | npm |
| fastify | 4.21.0 | 间接依赖 | npm |
| ajv-formats | 2.1.1 | 间接依赖 | npm |
| light-my-request | 5.10.0 | 间接依赖 | npm |
| fastify-plugin | 4.5.1 | 间接依赖 | npm |
| punycode | 2.3.0 | 间接依赖 | npm |
| secure-json-parse | 2.7.0 | 间接依赖 | npm |
| ajv | 8.12.0 | 间接依赖 | npm |
| sonic-boom | 3.3.0 | 间接依赖 | npm |
| atomic-sleep | 1.0.0 | 间接依赖 | npm |
| @apachedubbo/protoc-gen-apache-dubbo-es | 3.0.0-alpha | 间接依赖 | npm |
| @fastify/ajv-compiler | 3.5.0 | 间接依赖 | npm |
| debug | 4.3.4 | 间接依赖 | npm |
| archy | 1.0.0 | 间接依赖 | npm |
| real-require | 0.2.0 | 间接依赖 | npm |
| ieee754 | 1.2.1 | 间接依赖 | npm |
| pino-std-serializers | 6.2.2 | 间接依赖 | npm |
| require-from-string | 2.0.2 | 间接依赖 | npm |
| mnemonist | 0.39.5 | 间接依赖 | npm |
| react-dom | 18.2.0 | 间接依赖 | npm |
| pino | 8.15.0 | 间接依赖 | npm |
| json-schema-traverse | 1.0.0 | 间接依赖 | npm |
| typescript | 4.5.2 | 间接依赖 | npm |
| @apachedubbo/dubbo-fastify | 3.0.0-alpha | 间接依赖 | npm |
| base64-js | 1.5.1 | 间接依赖 | npm |
| semver | 7.5.4 | 间接依赖 | npm |
| on-exit-leak-free | 2.1.0 | 间接依赖 | npm |
| thread-stream | 2.4.0 | 间接依赖 | npm |
| event-target-shim | 5.0.1 | 间接依赖 | npm |
| @fastify/cors | 8.3.0 | 间接依赖 | npm |
| safe-regex2 | 2.0.0 | 间接依赖 | npm |
| headers-polyfill | 3.1.2 | 间接依赖 | npm |
| ms | 2.1.2 | 间接依赖 | npm |
| js-tokens | 4.0.0 | 间接依赖 | npm |
| pino-abstract-transport | 1.0.0 | 间接依赖 | npm |
| safe-buffer | 5.2.1 | 间接依赖 | npm |
| uri-js | 4.4.1 | 间接依赖 | npm |
| avvio | 8.2.1 | 间接依赖 | npm |
| fast-json-stringify | 5.8.0 | 间接依赖 | npm |
| @bufbuild/protobuf | 1.3.0 | 间接依赖 | npm |
| fast-deep-equal | 3.1.3 | 间接依赖 | npm |
| abort-controller | 3.0.0 | 间接依赖 | npm |
| reusify | 1.0.4 | 间接依赖 | npm |
| proxy-addr | 2.0.7 | 间接依赖 | npm |
| split2 | 4.2.0 | 间接依赖 | npm |
| fast-uri | 2.2.0 | 间接依赖 | npm |
| fast-querystring | 1.1.2 | 间接依赖 | npm |
| @fastify/fast-json-stringify-compiler | 4.3.0 | 间接依赖 | npm |
| process | 0.11.10 | 间接依赖 | npm |
| @apachedubbo/dubbo-node | 3.0.0-alpha | 间接依赖 | npm |
| abstract-logging | 2.0.1 | 间接依赖 | npm |
| obliterator | 2.0.4 | 间接依赖 | npm |
| @apachedubbo/dubbo | 3.0.0-alpha | 间接依赖 | npm |
| fast-content-type-parse | 1.0.0 | 间接依赖 | npm |
| fast-decode-uri-component | 1.0.1 | 间接依赖 | npm |
| buffer | 6.0.3 | 间接依赖 | npm |
| loose-envify | 1.4.0 | 间接依赖 | npm |
| readable-stream | 4.4.2 | 间接依赖 | npm |
| events | 3.3.0 | 间接依赖 | npm |
| safe-stable-stringify | 2.4.3 | 间接依赖 | npm |
| scheduler | 0.23.0 | 间接依赖 | npm |
| @bufbuild/protoplugin | 1.3.0 | 间接依赖 | npm |
| rfdc | 1.3.0 | 间接依赖 | npm |
| @fastify/deepmerge | 1.3.0 | 间接依赖 | npm |
| forwarded | 0.2.0 | 间接依赖 | npm |
| string_decoder | 1.3.0 | 间接依赖 | npm |
| ret | 0.2.2 | 间接依赖 | npm |
| fast-redact | 3.3.0 | 间接依赖 | npm |
| @apachedubbo/dubbo-web | 3.0.0-alpha | 间接依赖 | npm |
| fastq | 1.15.0 | 间接依赖 | npm |
| @typescript/vfs | 1.5.0 | 间接依赖 | npm |
| set-cookie-parser | 2.6.0 | 间接依赖 | npm |
| tiny-lru | 11.0.1 | 间接依赖 | npm |
| cookie | 0.5.0 | 间接依赖 | npm |
| yallist | 4.0.0 | 间接依赖 | npm |
| react | 18.2.0 | 间接依赖 | npm |