@strapi/admin @5.13.0
rejected
This version was rejected.
It did not pass GreenFlagged's security review and is not served by the registry.
The findings and risk dispositions below explain why.
40
Risk Score
SEE LICENSE IN LICENSE
License
No
Install Scripts
62
Dependencies
26
Dev Dependencies
37471.5 KB
Package Size
Published
Strapi Admin
Maintainers
pierreburgyaurelsicokoalexandrebodinconvlyremidejbaronvoninternetmarc-roig-strapijhoward1994
Dependencies (62)
| Package | Constraint | Registry Status |
|---|---|---|
| qs | 6.11.1 | No greenflagged match |
| koa | 2.15.4 | No greenflagged match |
| ora | 5.4.1 | auto_approved |
| yup | 0.32.9 | auto_approved |
| zod | ^3.22.4 | auto_approved |
| sift | 16.0.1 | auto_approved |
| axios | 1.8.4 | No greenflagged match |
| boxen | 5.1.2 | auto_approved |
| chalk | ^4.1.2 | auto_approved |
| execa | 5.1.1 | No greenflagged match |
| immer | 9.0.21 | auto_approved |
| p-map | 4.0.0 | auto_approved |
| formik | 2.4.5 | auto_approved |
| lodash | 4.17.21 | No greenflagged match |
| rimraf | 5.0.5 | auto_approved |
| semver | 7.5.4 | auto_approved |
| bcryptjs | 2.4.3 | auto_approved |
| date-fns | 2.30.0 | auto_approved |
| fs-extra | 11.2.0 | auto_approved |
| inquirer | 8.2.5 | auto_approved |
| punycode | 2.3.1 | auto_approved |
| react-is | ^18.2.0 | auto_approved |
| cross-env | ^7.0.3 | auto_approved |
| invariant | ^2.2.4 | auto_approved |
| pluralize | 8.0.0 | auto_approved |
| react-dnd | 16.0.1 | auto_approved |
| scheduler | 0.23.0 | auto_approved |
| koa-static | 5.0.0 | auto_approved |
| react-intl | 6.6.2 | No greenflagged match |
| typescript | 5.4.4 | auto_approved |
| codemirror5 | npm:codemirror@^5.65.11 | No greenflagged match |
| koa-compose | 4.1.0 | auto_approved |
| react-query | 3.39.3 | auto_approved |
| react-redux | 8.1.3 | No greenflagged match |
| highlight.js | ^10.4.1 | auto_approved |
| jsonwebtoken | 9.0.0 | auto_approved |
| koa-passport | 6.0.0 | auto_approved |
| react-select | 5.8.0 | auto_approved |
| react-window | 1.8.10 | No greenflagged match |
| @casl/ability | 6.5.0 | No greenflagged match |
| @strapi/icons | 2.0.0-rc.23 | No greenflagged match |
| @strapi/types | 5.13.0 | auto_approved |
| @strapi/utils | 5.13.0 | auto_approved |
| node-schedule | 2.1.1 | auto_approved |
| sanitize-html | 2.13.0 | No greenflagged match |
| koa2-ratelimit | ^1.1.3 | auto_approved |
| passport-local | 1.0.0 | auto_approved |
| fast-deep-equal | 3.1.3 | auto_approved |
| is-localhost-ip | 2.0.0 | No greenflagged match |
| @reduxjs/toolkit | 1.9.7 | No greenflagged match |
| @strapi/permissions | 5.13.0 | auto_approved |
| fractional-indexing | 3.2.0 | auto_approved |
| @testing-library/dom | 10.1.0 | auto_approved |
| use-context-selector | 1.4.1 | auto_approved |
| @strapi/design-system | 2.0.0-rc.23 | No greenflagged match |
| @testing-library/react | 15.0.7 | No greenflagged match |
| @internationalized/date | 3.5.4 | auto_approved |
| @radix-ui/react-context | 1.0.1 | auto_approved |
| @radix-ui/react-toolbar | 1.0.4 | auto_approved |
| react-dnd-html5-backend | 16.0.1 | auto_approved |
| @strapi/typescript-utils | 5.13.0 | auto_approved |
| @testing-library/user-event | 14.5.2 | auto_approved |
Dev Dependencies (26)
| Package | Constraint | Registry Status |
|---|---|---|
| msw | 1.3.0 | auto_approved |
| vite | 5.4.17 | No greenflagged match |
| react | 18.3.1 | auto_approved |
| koa-body | 6.0.1 | auto_approved |
| react-dom | 18.3.1 | auto_approved |
| @types/lodash | ^4.14.191 | auto_approved |
| @types/fs-extra | 11.0.4 | No greenflagged match |
| @types/punycode | 2.1.4 | auto_approved |
| vite-plugin-dts | ^4.3.0 | auto_approved |
| @types/invariant | 2.2.36 | auto_approved |
| @types/pluralize | 0.0.32 | No greenflagged match |
| react-router-dom | 6.22.3 | auto_approved |
| styled-components | 6.1.8 | auto_approved |
| @types/codemirror5 | npm:@types/codemirror@^5.60.15 | Not imported |
| @types/markdown-it | 13.0.7 | auto_approved |
| @types/jsonwebtoken | 9.0.3 | auto_approved |
| @types/koa-passport | 6.0.1 | No greenflagged match |
| @types/react-window | 1.8.8 | No greenflagged match |
| @types/sanitize-html | 2.13.0 | auto_approved |
| @strapi/data-transfer | 5.13.0 | auto_approved |
| @types/passport-local | 1.0.36 | No greenflagged match |
| @strapi/admin-test-utils | 5.13.0 | Not imported |
| @types/markdown-it-emoji | 2.0.4 | No greenflagged match |
| @vitejs/plugin-react-swc | 3.6.0 | No greenflagged match |
| @types/markdown-it-footnote | 3.0.3 | Not imported |
| @types/markdown-it-container | 2.0.9 | Not imported |
Transitive Dependency Tree
381 transitive deps
max depth 10
├─
@casl/ability
6.5.0
├─
@internationalized/date
3.5.4
→ 3.5.4
├─
@radix-ui/react-context
1.0.1
→ 1.0.1
├─
@radix-ui/react-toolbar
1.0.4
→ 1.0.4
├─
@reduxjs/toolkit
1.9.7
├─
@strapi/design-system
2.0.0-rc.23
├─
@strapi/icons
2.0.0-rc.23
├─
@strapi/permissions
5.13.0
→ 5.13.0
├─
@strapi/types
5.13.0
→ 5.13.0
├─
@strapi/typescript-utils
5.13.0
→ 5.13.0
├─
@strapi/utils
5.13.0
→ 5.13.0
├─
@testing-library/dom
10.1.0
→ 10.1.0
├─
@testing-library/react
15.0.7
├─
@testing-library/user-event
14.5.2
→ 14.5.2
├─
axios
1.8.4
├─
bcryptjs
2.4.3
→ 2.4.3
├─
boxen
5.1.2
→ 5.1.2
├─
chalk
^4.1.2
→ 4.1.2
├─
codemirror5
npm:codemirror@^5.65.11
├─
cross-env
^7.0.3
→ 7.0.3
├─
date-fns
2.30.0
→ 2.30.0
├─
execa
5.1.1
├─
fast-deep-equal
3.1.3
→ 3.1.3
├─
formik
2.4.5
→ 2.4.5
├─
fractional-indexing
3.2.0
→ 3.2.0
├─
fs-extra
11.2.0
→ 11.2.0
├─
highlight.js
^10.4.1
→ 10.7.3
├─
immer
9.0.21
→ 9.0.21
├─
inquirer
8.2.5
→ 8.2.5
├─
invariant
^2.2.4
→ 2.2.4
├─
is-localhost-ip
2.0.0
├─
jsonwebtoken
9.0.0
→ 9.0.0
├─
koa
2.15.4
├─
koa-compose
4.1.0
→ 4.1.0
├─
koa-passport
6.0.0
→ 6.0.0
├─
koa-static
5.0.0
→ 5.0.0
├─
koa2-ratelimit
^1.1.3
→ 1.1.3
├─
lodash
4.17.21
├─
node-schedule
2.1.1
→ 2.1.1
├─
ora
5.4.1
→ 5.4.1
├─
p-map
4.0.0
→ 4.0.0
├─
passport-local
1.0.0
→ 1.0.0
├─
pluralize
8.0.0
→ 8.0.0
├─
punycode
2.3.1
→ 2.3.1
├─
qs
6.11.1
├─
react-dnd
16.0.1
→ 16.0.1
├─
react-dnd-html5-backend
16.0.1
→ 16.0.1
├─
react-intl
6.6.2
├─
react-is
^18.2.0
→ 18.3.1
├─
react-query
3.39.3
→ 3.39.3
├─
react-redux
8.1.3
├─
react-select
5.8.0
→ 5.8.0
├─
react-window
1.8.10
├─
rimraf
5.0.5
→ 5.0.5
├─
sanitize-html
2.13.0
├─
scheduler
0.23.0
→ 0.23.0
├─
semver
7.5.4
→ 7.5.4
├─
sift
16.0.1
→ 16.0.1
├─
typescript
5.4.4
→ 5.4.4
├─
use-context-selector
1.4.1
→ 1.4.1
├─
yup
0.32.9
→ 0.32.9
├─
zod
^3.22.4
→ 3.25.76
├─
@babel/code-frame
^7.10.4
→ 7.29.7
├─
@babel/runtime
^7.5.5
→ 7.29.7
├─
@babel/runtime
^7.21.0
→ 7.29.7
├─
@babel/runtime
^7.12.5
→ 7.29.7
├─
@babel/runtime
^7.12.0
→ 7.29.7
├─
@babel/runtime
^7.10.5
→ 7.29.7
├─
@babel/runtime
^7.13.10
→ 7.29.7
├─
@casl/ability
6.5.0
├─
@emotion/cache
^11.4.0
→ 11.14.0
├─
@emotion/react
^11.8.1
→ 11.14.0
├─
@floating-ui/dom
^1.0.1
→ 1.7.6
├─
@koa/cors
5.0.0
→ 5.0.0
├─
@koa/router
12.0.2
├─
@radix-ui/primitive
1.0.1
→ 1.0.1
├─
@radix-ui/react-context
1.0.1
→ 1.0.1
├─
@radix-ui/react-direction
1.0.1
→ 1.0.1
├─
@radix-ui/react-primitive
1.0.3
→ 1.0.3
├─
@radix-ui/react-roving-focus
1.0.4
→ 1.0.4
├─
@radix-ui/react-separator
1.0.3
→ 1.0.3
├─
@radix-ui/react-toggle-group
1.0.4
→ 1.0.4
├─
@react-dnd/invariant
^4.0.1
→ 4.0.2
├─
@react-dnd/shallowequal
^4.0.1
→ 4.0.2
├─
@sindresorhus/slugify
1.1.0
→ 1.1.0
├─
@strapi/database
5.13.0
→ 5.13.0
├─
@strapi/logger
5.13.0
→ 5.13.0
├─
@strapi/permissions
5.13.0
→ 5.13.0
├─
@strapi/utils
5.13.0
→ 5.13.0
├─
@swc/helpers
^0.5.0
→ 0.5.23
├─
@types/aria-query
^5.0.1
→ 5.0.4
├─
@types/hoist-non-react-statics
^3.3.1
→ 3.3.7
├─
@types/lodash
^4.14.165
→ 4.17.24
├─
@types/react-transition-group
^4.4.0
→ 4.4.12
├─
aggregate-error
^3.0.0
→ 3.1.0
├─
ansi-align
^3.0.0
→ 3.0.1
├─
ansi-escapes
^4.2.1
→ 4.3.2
├─
ansi-styles
^4.1.0
→ 4.3.0
├─
aria-query
5.3.0
→ 5.3.0
├─
bl
^4.1.0
→ 4.1.0
├─
camelcase
^6.2.0
→ 6.3.0
├─
chalk
^4.1.0
→ 4.1.2
├─
chalk
4.1.2
→ 4.1.2
├─
chalk
^4.1.1
→ 4.1.2
├─
cli-boxes
^2.2.1
├─
cli-cursor
^3.1.0
→ 3.1.0
├─
cli-cursor
^3.1.0
├─
cli-spinners
^2.5.0
→ 2.9.2
├─
cli-table3
0.6.5
→ 0.6.5
├─
cli-width
^3.0.0
├─
commander
8.3.0
→ 8.3.0
├─
cron-parser
^4.2.0
├─
cross-spawn
^7.0.1
→ 7.0.6
├─
date-fns
2.30.0
→ 2.30.0
├─
debug
^3.1.0
→ 3.2.7
├─
deepmerge
^2.1.1
→ 2.2.1
├─
dnd-core
^16.0.1
→ 16.0.1
├─
dom-accessibility-api
^0.5.9
├─
execa
5.1.1
├─
external-editor
^3.0.3
→ 3.1.0
├─
fast-deep-equal
^3.1.3
→ 3.1.3
├─
figures
^3.0.0
→ 3.2.0
├─
fs-extra
11.2.0
→ 11.2.0
├─
glob
^10.3.7
→ 10.5.0
├─
graceful-fs
^4.2.0
→ 4.2.11
├─
hoist-non-react-statics
^3.3.0
→ 3.3.2
├─
hoist-non-react-statics
^3.3.2
→ 3.3.2
├─
http-errors
2.0.0
→ 2.0.0
├─
is-interactive
^1.0.0
├─
is-unicode-supported
^0.1.0
→ 0.1.0
├─
jsonfile
^6.0.1
→ 6.2.1
├─
jws
^3.2.2
├─
koa
2.15.4
├─
koa-body
6.0.1
→ 6.0.1
├─
koa-send
^5.0.0
→ 5.0.1
├─
lodash
^4.17.20
→ 4.18.1
├─
lodash
^4.17.21
→ 4.18.1
├─
lodash
4.17.21
├─
lodash-es
^4.17.15
→ 4.18.1
├─
lodash-es
^4.17.21
→ 4.18.1
├─
log-symbols
^4.1.0
→ 4.1.0
├─
long-timeout
0.1.1
→ 0.1.1
├─
loose-envify
^1.1.0
→ 1.4.0
├─
loose-envify
^1.0.0
→ 1.4.0
├─
lru-cache
^6.0.0
→ 6.0.0
├─
lz-string
^1.5.0
→ 1.5.0
├─
match-sorter
^6.0.2
→ 6.4.0
├─
memoize-one
^6.0.0
→ 6.0.0
├─
ms
^2.1.1
→ 2.1.3
├─
mute-stream
0.0.8
→ 0.0.8
├─
nanoclone
^0.2.1
→ 0.2.1
├─
node-machine-id
1.1.12
→ 1.1.12
├─
node-schedule
2.1.1
→ 2.1.1
├─
ora
^5.4.1
→ 5.4.1
├─
p-map
4.0.0
→ 4.0.0
├─
passport
^0.6.0
→ 0.6.0
├─
passport-strategy
1.x.x
→ 1.0.0
├─
preferred-pm
3.1.2
→ 3.1.2
├─
prettier
3.3.3
→ 3.3.3
├─
pretty-format
^27.0.2
→ 27.5.1
├─
prop-types
^15.6.0
→ 15.8.1
├─
property-expr
^2.0.4
→ 2.0.6
├─
qs
6.11.1
├─
react-fast-compare
^2.0.1
→ 2.0.4
├─
react-transition-group
^4.3.0
→ 4.4.5
├─
run-async
^2.4.0
├─
rxjs
^7.5.5
→ 7.8.2
├─
semver
^7.3.8
→ 7.8.4
├─
sift
16.0.1
→ 16.0.1
├─
sorted-array-functions
^1.3.0
→ 1.3.0
├─
string-width
^4.1.0
→ 4.2.3
├─
string-width
^4.2.2
→ 4.2.3
├─
strip-ansi
^6.0.0
→ 6.0.1
├─
supports-color
^7.1.0
→ 7.2.0
├─
through
^2.3.6
→ 2.3.8
├─
tiny-warning
^1.0.2
→ 1.0.3
├─
toposort
^2.0.2
→ 2.0.2
├─
tslib
^2.0.0
→ 2.8.1
├─
type-fest
^0.20.2
→ 0.20.2
├─
typedoc
0.25.10
→ 0.25.10
├─
typedoc-github-wiki-theme
1.1.0
├─
typedoc-plugin-markdown
3.17.1
→ 3.17.1
├─
typescript
5.4.4
→ 5.4.4
├─
universalify
^2.0.0
→ 2.0.1
├─
use-isomorphic-layout-effect
^1.1.2
→ 1.2.1
├─
wcwidth
^1.0.1
→ 1.0.1
├─
widest-line
^3.1.0
├─
wrap-ansi
^7.0.0
→ 7.0.0
├─
yup
0.32.9
→ 0.32.9
├─
zod
^3.22.4
→ 3.25.76
├─
@babel/helper-validator-identifier
^7.29.7
→ 7.29.7
├─
@babel/runtime
^7.13.10
→ 7.29.7
├─
@babel/runtime
^7.18.3
→ 7.29.7
├─
@babel/runtime
^7.5.5
→ 7.29.7
├─
@babel/runtime
^7.10.5
→ 7.29.7
├─
@babel/runtime
^7.21.0
→ 7.29.7
├─
@babel/runtime
^7.23.8
→ 7.29.7
├─
@casl/ability
6.5.0
├─
@emotion/babel-plugin
^11.13.5
→ 11.13.5
├─
@emotion/cache
^11.14.0
→ 11.14.0
├─
@emotion/memoize
^0.9.0
→ 0.9.0
├─
@emotion/serialize
^1.3.3
→ 1.3.3
├─
@emotion/sheet
^1.4.0
→ 1.4.0
├─
@emotion/use-insertion-effect-with-fallbacks
^1.2.0
→ 1.2.0
├─
@emotion/utils
^1.4.2
→ 1.4.2
├─
@emotion/weak-memoize
^0.4.0
→ 0.4.0
├─
@floating-ui/core
^1.7.5
→ 1.7.5
├─
@floating-ui/utils
^0.2.11
→ 0.2.11
├─
@paralleldrive/cuid2
2.2.2
→ 2.2.2
├─
@radix-ui/primitive
1.0.1
→ 1.0.1
├─
@radix-ui/react-collection
1.0.3
→ 1.0.3
├─
@radix-ui/react-compose-refs
1.0.1
→ 1.0.1
├─
@radix-ui/react-context
1.0.1
→ 1.0.1
├─
@radix-ui/react-direction
1.0.1
→ 1.0.1
├─
@radix-ui/react-id
1.0.1
→ 1.0.1
├─
@radix-ui/react-primitive
1.0.3
→ 1.0.3
├─
@radix-ui/react-roving-focus
1.0.4
→ 1.0.4
├─
@radix-ui/react-slot
1.0.2
→ 1.0.2
├─
@radix-ui/react-toggle
1.0.3
→ 1.0.3
├─
@radix-ui/react-use-callback-ref
1.0.1
→ 1.0.1
├─
@radix-ui/react-use-controllable-state
1.0.1
→ 1.0.1
├─
@react-dnd/asap
^5.0.1
→ 5.0.2
├─
@react-dnd/invariant
^4.0.1
→ 4.0.2
├─
@sindresorhus/slugify
1.1.0
→ 1.1.0
├─
@sindresorhus/transliterate
^0.1.1
→ 0.1.2
├─
@strapi/utils
5.13.0
→ 5.13.0
├─
@types/co-body
^6.1.0
→ 6.1.3
├─
@types/formidable
^2.0.5
→ 2.0.6
├─
@types/koa
^2.13.5
→ 2.15.2
├─
@types/lodash
^4.14.165
→ 4.17.24
├─
aggregate-error
^3.0.0
→ 3.1.0
├─
ajv
8.16.0
├─
ansi-regex
^5.0.1
→ 5.0.1
├─
ansi-styles
^4.0.0
→ 4.3.0
├─
ansi-styles
^5.0.0
→ 5.2.0
├─
ansi-styles
^4.1.0
→ 4.3.0
├─
bl
^4.1.0
→ 4.1.0
├─
buffer
^5.5.0
→ 5.7.1
├─
chalk
^4.1.0
→ 4.1.2
├─
chardet
^0.7.0
├─
clean-stack
^2.0.0
├─
cli-cursor
^3.1.0
├─
cli-spinners
^2.5.0
→ 2.9.2
├─
co-body
^6.1.0
→ 6.2.0
├─
color-convert
^2.0.1
├─
cron-parser
^4.2.0
├─
date-fns
2.30.0
→ 2.30.0
├─
debug
4.3.4
→ 4.3.4
├─
debug
^4.1.1
→ 4.4.3
├─
defaults
^1.0.3
→ 1.0.4
├─
depd
2.0.0
→ 2.0.0
├─
dequal
^2.0.3
→ 2.0.3
├─
dom-helpers
^5.0.1
→ 5.2.1
├─
emoji-regex
^8.0.0
├─
escape-string-regexp
^1.0.5
→ 1.0.5
├─
escape-string-regexp
^4.0.0
→ 4.0.0
├─
execa
5.1.1
├─
find-up
^5.0.0
→ 5.0.0
├─
find-yarn-workspace-root2
1.2.16
→ 1.2.16
├─
foreground-child
^3.1.0
→ 3.3.1
├─
formidable
^2.0.1
→ 2.1.5
├─
fs-extra
11.2.0
→ 11.2.0
├─
graceful-fs
^4.2.0
→ 4.2.11
├─
handlebars
^4.7.7
├─
has-flag
^4.0.0
→ 4.0.0
├─
hoist-non-react-statics
^3.3.0
→ 3.3.2
├─
hoist-non-react-statics
^3.3.1
→ 3.3.2
├─
http-errors
2.0.0
→ 2.0.0
├─
http-errors
^1.7.3
→ 1.8.1
├─
iconv-lite
^0.4.24
→ 0.4.24
├─
indent-string
^4.0.0
→ 4.0.0
├─
inherits
^2.0.4
→ 2.0.4
├─
inherits
2.0.4
→ 2.0.4
├─
is-fullwidth-code-point
^3.0.0
├─
is-interactive
^1.0.0
├─
is-unicode-supported
^0.1.0
→ 0.1.0
├─
jackspeak
^3.1.2
→ 3.4.3
├─
js-tokens
^4.0.0
→ 4.0.0
├─
js-tokens
^3.0.0 || ^4.0.0
→ 4.0.0
├─
jsonfile
^6.0.1
→ 6.2.1
├─
knex
3.0.1
├─
lodash
^4.17.20
→ 4.18.1
├─
lodash
4.17.21
├─
lodash-es
^4.17.15
→ 4.18.1
├─
log-symbols
^4.1.0
→ 4.1.0
├─
long-timeout
0.1.1
→ 0.1.1
├─
loose-envify
^1.4.0
→ 1.4.0
├─
lunr
^2.3.9
→ 2.3.9
├─
marked
^4.3.0
→ 4.3.0
├─
minimatch
^9.0.3
→ 9.0.9
├─
minimatch
^9.0.4
→ 9.0.9
├─
minipass
^7.1.2
→ 7.1.3
├─
ms
^2.1.1
→ 2.1.3
├─
nanoclone
^0.2.1
→ 0.2.1
├─
node-machine-id
1.1.12
→ 1.1.12
├─
object-assign
^4.1.1
→ 4.1.1
├─
p-map
4.0.0
→ 4.0.0
├─
package-json-from-dist
^1.0.0
→ 1.0.1
├─
passport-strategy
1.x.x
→ 1.0.0
├─
path-exists
^4.0.0
→ 4.0.0
├─
path-key
^3.1.0
→ 3.1.1
├─
path-scurry
^1.11.1
→ 1.11.1
├─
pause
0.0.1
→ 0.0.1
├─
picocolors
^1.1.1
→ 1.1.1
├─
preferred-pm
3.1.2
→ 3.1.2
├─
prop-types
^15.6.2
→ 15.8.1
├─
property-expr
^2.0.4
→ 2.0.6
├─
qs
6.11.1
├─
react-is
^16.13.1
→ 16.13.1
├─
react-is
^16.7.0
→ 16.13.1
├─
react-is
^17.0.1
→ 17.0.2
├─
readable-stream
^3.4.0
→ 3.6.2
├─
redux
^4.2.0
→ 4.2.1
├─
remove-accents
0.5.0
→ 0.5.0
├─
resolve-path
^1.4.0
→ 1.4.0
├─
restore-cursor
^3.1.0
→ 3.1.0
├─
semver
7.5.4
→ 7.5.4
├─
setprototypeof
1.2.0
→ 1.2.0
├─
shebang-command
^2.0.0
→ 2.0.0
├─
shiki
^0.14.7
├─
sift
16.0.1
→ 16.0.1
├─
sorted-array-functions
^1.3.0
→ 1.3.0
├─
statuses
2.0.1
├─
string-width
^4.2.0
→ 4.2.3
├─
string-width
^4.1.0
→ 4.2.3
├─
strip-ansi
^6.0.0
→ 6.0.1
├─
strip-ansi
^6.0.1
→ 6.0.1
├─
stylis
4.2.0
→ 4.2.0
├─
supports-color
^7.1.0
→ 7.2.0
├─
tmp
^0.0.33
├─
toidentifier
1.0.1
→ 1.0.1
├─
toposort
^2.0.2
→ 2.0.2
├─
tslib
^2.1.0
→ 2.8.1
├─
tslib
^2.8.0
→ 2.8.1
├─
type-fest
^0.21.3
→ 0.21.3
├─
umzug
3.8.1
├─
universalify
^2.0.0
→ 2.0.1
├─
utils-merge
^1.0.1
→ 1.0.1
├─
vary
^1.1.2
→ 1.1.2
├─
wcwidth
^1.0.1
→ 1.0.1
├─
which
^2.0.1
→ 2.0.2
├─
which-pm
2.0.0
→ 2.0.0
├─
winston
3.10.0
→ 3.10.0
├─
yallist
^4.0.0
→ 4.0.0
├─
yup
0.32.9
→ 0.32.9
├─
zod
^3.22.4
→ 3.25.76
├─
zod
^3.19.1
→ 3.25.76
├─
@babel/helper-module-imports
^7.16.7
→ 7.29.7
├─
@babel/runtime
^7.18.3
→ 7.29.7
├─
@babel/runtime
^7.13.10
→ 7.29.7
├─
@babel/runtime
^7.10.5
→ 7.29.7
├─
@babel/runtime
^7.21.0
→ 7.29.7
├─
@babel/runtime
^7.9.2
→ 7.29.7
├─
@babel/runtime
^7.8.7
→ 7.29.7
├─
@colors/colors
1.5.0
→ 1.5.0
├─
@dabh/diagnostics
^2.0.2
→ 2.0.8
├─
@emotion/hash
^0.9.2
→ 0.9.2
├─
@emotion/memoize
^0.9.0
→ 0.9.0
├─
@emotion/serialize
^1.3.3
→ 1.3.3
├─
@emotion/sheet
^1.4.0
→ 1.4.0
├─
@emotion/unitless
^0.10.0
→ 0.10.0
├─
@emotion/utils
^1.4.2
→ 1.4.2
├─
@emotion/weak-memoize
^0.4.0
→ 0.4.0
├─
@floating-ui/utils
^0.2.11
→ 0.2.11
├─
@hapi/bourne
^3.0.0
→ 3.0.0
├─
@isaacs/cliui
^8.0.2
→ 8.0.2
├─
@noble/hashes
^1.1.5
→ 1.8.0
├─
@paralleldrive/cuid2
^2.2.2
→ 2.3.1
├─
@radix-ui/primitive
1.0.1
→ 1.0.1
├─
@radix-ui/react-collection
1.0.3
→ 1.0.3
├─
@radix-ui/react-compose-refs
1.0.1
→ 1.0.1
├─
@radix-ui/react-context
1.0.1
→ 1.0.1
├─
@radix-ui/react-direction
1.0.1
→ 1.0.1
├─
@radix-ui/react-id
1.0.1
→ 1.0.1
├─
@radix-ui/react-primitive
1.0.3
→ 1.0.3
├─
@radix-ui/react-slot
1.0.2
→ 1.0.2
├─
@radix-ui/react-use-callback-ref
1.0.1
→ 1.0.1
├─
@radix-ui/react-use-controllable-state
1.0.1
→ 1.0.1
├─
@radix-ui/react-use-layout-effect
1.0.1
→ 1.0.1
├─
@sindresorhus/slugify
1.1.0
→ 1.1.0
├─
@sindresorhus/transliterate
^0.1.1
→ 0.1.2
├─
@types/accepts
*
→ 1.3.7
├─
@types/content-disposition
*
→ 0.5.9
├─
@types/cookies
*
→ 0.9.2
├─
@types/http-assert
*
→ 1.5.6
├─
@types/http-errors
*
→ 2.0.5
├─
@types/keygrip
*
→ 1.0.6
├─
@types/koa-compose
*
→ 3.2.9
├─
@types/lodash
^4.14.165
→ 4.17.24
├─
@types/node
*
→ 25.9.3
├─
@types/qs
*
→ 6.15.1
├─
aggregate-error
^3.0.0
→ 3.1.0
├─
ansi-regex
^5.0.1
→ 5.0.1
├─
ansi-styles
^4.1.0
→ 4.3.0
├─
async
^3.2.3
→ 3.2.6
├─
babel-plugin-macros
^3.1.0
→ 3.1.0
├─
base64-js
^1.3.1
→ 1.5.1
├─
brace-expansion
^2.0.2
→ 2.1.1
├─
buffer
^5.5.0
→ 5.7.1
├─
chalk
^4.1.0
→ 4.1.2
├─
clean-stack
^2.0.0
├─
clone
^1.0.2
→ 1.0.4
├─
color-convert
^2.0.1
├─
convert-source-map
^1.5.0
→ 1.9.0
├─
cross-spawn
^7.0.6
→ 7.0.6
├─
csstype
^3.0.2
→ 3.2.3
├─
date-fns
2.30.0
→ 2.30.0
├─
defaults
^1.0.3
→ 1.0.4
├─
depd
~1.1.2
→ 1.1.2
├─
depd
2.0.0
→ 2.0.0
├─
dezalgo
^1.0.4
→ 1.0.4
├─
emoji-regex
^8.0.0
├─
escape-string-regexp
^4.0.0
→ 4.0.0
├─
escape-string-regexp
^2.0.0
→ 2.0.0
├─
execa
5.1.1
├─
find-root
^1.1.0
├─
find-up
^5.0.0
→ 5.0.0
├─
find-yarn-workspace-root2
1.2.16
→ 1.2.16
├─
graceful-fs
^4.2.0
→ 4.2.11
├─
has-flag
^4.0.0
→ 4.0.0
├─
http-errors
2.0.0
→ 2.0.0
├─
http-errors
~1.6.2
→ 1.6.3
├─
ieee754
^1.1.13
→ 1.2.1
├─
indent-string
^4.0.0
→ 4.0.0
├─
inflation
^2.0.0
→ 2.1.0
├─
inherits
2.0.4
→ 2.0.4
├─
inherits
^2.0.4
→ 2.0.4
├─
inherits
^2.0.3
→ 2.0.4
├─
is-fullwidth-code-point
^3.0.0
├─
is-stream
^2.0.0
→ 2.0.1
├─
is-unicode-supported
^0.1.0
→ 0.1.0
├─
isexe
^2.0.0
→ 2.0.0
├─
js-tokens
^3.0.0 || ^4.0.0
→ 4.0.0
├─
jsonfile
^6.0.1
→ 6.2.1
├─
load-yaml-file
^0.2.0
→ 0.2.0
├─
locate-path
^6.0.0
→ 6.0.0
├─
lodash
^4.17.20
→ 4.18.1
├─
lodash
4.17.21
├─
lodash-es
^4.17.15
→ 4.18.1
├─
lodash.deburr
^4.1.0
→ 4.1.0
├─
logform
^2.4.0
→ 2.7.0
├─
loose-envify
^1.4.0
→ 1.4.0
├─
lru-cache
^10.2.0
→ 10.4.3
├─
lru-cache
^6.0.0
→ 6.0.0
├─
micromatch
^4.0.2
→ 4.0.8
├─
minipass
^5.0.0 || ^6.0.2 || ^7.0.0
→ 7.1.3
├─
ms
2.1.2
→ 2.1.2
├─
ms
^2.1.3
→ 2.1.3
├─
nanoclone
^0.2.1
→ 0.2.1
├─
node-machine-id
1.1.12
→ 1.1.12
├─
object-assign
^4.1.1
→ 4.1.1
├─
once
^1.4.0
→ 1.4.0
├─
one-time
^1.0.0
→ 1.0.0
├─
onetime
^5.1.0
→ 5.1.2
├─
p-map
4.0.0
→ 4.0.0
├─
path-exists
^4.0.0
→ 4.0.0
├─
path-is-absolute
1.0.1
→ 1.0.1
├─
pkg-dir
^4.2.0
→ 4.2.0
├─
preferred-pm
3.1.2
→ 3.1.2
├─
property-expr
^2.0.4
→ 2.0.6
├─
qs
^6.11.0
→ 6.15.2
├─
qs
^6.5.2
→ 6.15.2
├─
raw-body
^2.3.3
→ 2.5.3
├─
react-is
^16.7.0
→ 16.13.1
├─
react-is
^16.13.1
→ 16.13.1
├─
readable-stream
^3.4.0
→ 3.6.2
├─
safe-stable-stringify
^2.3.1
→ 2.5.0
├─
safer-buffer
>= 2.1.2 < 3
→ 2.1.2
├─
setprototypeof
1.2.0
→ 1.2.0
├─
shebang-regex
^3.0.0
├─
signal-exit
^4.0.1
→ 4.1.0
├─
signal-exit
^3.0.2
→ 3.0.7
├─
source-map
^0.5.7
→ 0.5.7
├─
stack-trace
0.0.x
→ 0.0.10
├─
statuses
2.0.1
├─
statuses
>= 1.5.0 < 2
├─
string_decoder
^1.1.1
→ 1.3.0
├─
strip-ansi
^6.0.1
→ 6.0.1
├─
stylis
4.2.0
→ 4.2.0
├─
supports-color
^7.1.0
→ 7.2.0
├─
toidentifier
1.0.1
→ 1.0.1
├─
toposort
^2.0.2
→ 2.0.2
├─
triple-beam
^1.3.0
→ 1.4.1
├─
type-is
^1.6.16
→ 1.6.18
├─
universalify
^2.0.0
→ 2.0.1
├─
util-deprecate
^1.0.1
→ 1.0.2
├─
which-pm
2.0.0
→ 2.0.0
├─
winston-transport
^4.5.0
→ 4.9.0
├─
yup
0.32.9
→ 0.32.9
├─
zod
^3.22.4
→ 3.25.76
├─
@babel/runtime
^7.12.5
→ 7.29.7
├─
@babel/runtime
^7.21.0
→ 7.29.7
├─
@babel/runtime
^7.10.5
→ 7.29.7
├─
@babel/runtime
^7.13.10
→ 7.29.7
├─
@babel/traverse
^7.29.7
→ 7.29.7
├─
@babel/types
^7.29.7
→ 7.29.7
├─
@colors/colors
1.6.0
→ 1.6.0
├─
@emotion/hash
^0.9.2
→ 0.9.2
├─
@emotion/memoize
^0.9.0
→ 0.9.0
├─
@emotion/unitless
^0.10.0
→ 0.10.0
├─
@emotion/utils
^1.4.2
→ 1.4.2
├─
@noble/hashes
^1.1.5
→ 1.8.0
├─
@radix-ui/react-compose-refs
1.0.1
→ 1.0.1
├─
@radix-ui/react-context
1.0.1
→ 1.0.1
├─
@radix-ui/react-primitive
1.0.3
→ 1.0.3
├─
@radix-ui/react-slot
1.0.2
→ 1.0.2
├─
@radix-ui/react-use-callback-ref
1.0.1
→ 1.0.1
├─
@radix-ui/react-use-layout-effect
1.0.1
→ 1.0.1
├─
@sindresorhus/transliterate
^0.1.1
→ 0.1.2
├─
@so-ric/colorspace
^1.1.6
→ 1.1.6
├─
@types/connect
*
→ 3.4.38
├─
@types/express
*
→ 5.0.6
├─
@types/keygrip
*
→ 1.0.6
├─
@types/lodash
^4.14.165
→ 4.17.24
├─
@types/node
*
→ 25.9.3
├─
@types/triple-beam
^1.3.2
├─
aggregate-error
^3.0.0
→ 3.1.0
├─
ansi-regex
^5.0.1
→ 5.0.1
├─
ansi-styles
^4.1.0
→ 4.3.0
├─
asap
^2.0.0
→ 2.0.6
├─
balanced-match
^1.0.0
→ 1.0.2
├─
base64-js
^1.3.1
→ 1.5.1
├─
braces
^3.0.3
→ 3.0.3
├─
bytes
~3.1.2
→ 3.1.2
├─
clean-stack
^2.0.0
├─
clone
^1.0.2
→ 1.0.4
├─
color-convert
^2.0.1
├─
cosmiconfig
^7.0.0
→ 7.1.0
├─
csstype
^3.0.2
→ 3.2.3
├─
depd
2.0.0
→ 2.0.0
├─
depd
~1.1.2
→ 1.1.2
├─
enabled
2.0.x
├─
escape-string-regexp
^2.0.0
→ 2.0.0
├─
escape-string-regexp
^4.0.0
→ 4.0.0
├─
fecha
^4.2.0
→ 4.2.3
├─
find-up
^4.0.0
→ 4.1.0
├─
find-up
^5.0.0
→ 5.0.0
├─
find-yarn-workspace-root2
1.2.16
→ 1.2.16
├─
fn.name
1.x.x
→ 1.1.0
├─
graceful-fs
^4.1.5
→ 4.2.11
├─
has-flag
^4.0.0
→ 4.0.0
├─
http-errors
~2.0.1
→ 2.0.1
├─
iconv-lite
~0.4.24
→ 0.4.24
├─
ieee754
^1.1.13
→ 1.2.1
├─
indent-string
^4.0.0
→ 4.0.0
├─
inherits
2.0.3
→ 2.0.3
├─
inherits
^2.0.3
→ 2.0.4
├─
inherits
2.0.4
→ 2.0.4
├─
js-tokens
^3.0.0 || ^4.0.0
→ 4.0.0
├─
js-yaml
^3.13.0
→ 3.14.2
├─
kuler
^2.0.0
├─
load-yaml-file
^0.2.0
→ 0.2.0
├─
locate-path
^6.0.0
→ 6.0.0
├─
lodash
^4.17.20
→ 4.18.1
├─
lodash-es
^4.17.15
→ 4.18.1
├─
lodash.deburr
^4.1.0
→ 4.1.0
├─
logform
^2.7.0
→ 2.7.0
├─
media-typer
0.3.0
→ 0.3.0
├─
micromatch
^4.0.2
→ 4.0.8
├─
mime-types
~2.1.24
→ 2.1.35
├─
mimic-fn
^2.1.0
→ 2.1.0
├─
ms
^2.1.1
→ 2.1.3
├─
nanoclone
^0.2.1
→ 0.2.1
├─
p-locate
^5.0.0
→ 5.0.0
├─
path-exists
^4.0.0
→ 4.0.0
├─
path-key
^3.1.0
→ 3.1.1
├─
picomatch
^2.3.1
→ 2.3.2
├─
pify
^4.0.1
→ 4.0.1
├─
pkg-dir
^4.2.0
→ 4.2.0
├─
property-expr
^2.0.4
→ 2.0.6
├─
readable-stream
^3.6.2
→ 3.6.2
├─
resolve
^1.19.0
→ 1.22.11
├─
safe-buffer
~5.2.0
→ 5.2.1
├─
safe-stable-stringify
^2.3.1
→ 2.5.0
├─
setprototypeof
1.1.0
→ 1.1.0
├─
setprototypeof
1.2.0
→ 1.2.0
├─
shebang-command
^2.0.0
→ 2.0.0
├─
side-channel
^1.1.0
→ 1.1.1
├─
statuses
2.0.1
├─
statuses
>= 1.4.0 < 2
├─
string-width
^5.1.2
→ 5.1.2
├─
string-width-cjs
npm:string-width@^4.2.0
├─
string_decoder
^1.1.1
→ 1.3.0
├─
strip-ansi
^7.0.1
→ 7.2.0
├─
strip-ansi-cjs
npm:strip-ansi@^6.0.1
├─
strip-bom
^3.0.0
→ 3.0.0
├─
supports-color
^7.1.0
→ 7.2.0
├─
toidentifier
1.0.1
→ 1.0.1
├─
toposort
^2.0.2
→ 2.0.2
├─
triple-beam
^1.3.0
→ 1.4.1
├─
undici-types
>=7.24.0 <7.24.7
→ 7.24.6
├─
universalify
^2.0.0
→ 2.0.1
├─
unpipe
~1.0.0
→ 1.0.0
├─
util-deprecate
^1.0.1
→ 1.0.2
├─
which
^2.0.1
→ 2.0.2
├─
which-pm
2.0.0
→ 2.0.0
├─
wrap-ansi
^8.1.0
→ 8.1.0
├─
wrap-ansi-cjs
npm:wrap-ansi@^7.0.0
├─
wrappy
1
→ 1.0.2
├─
yallist
^4.0.0
→ 4.0.0
├─
@babel/code-frame
^7.29.7
→ 7.29.7
├─
@babel/generator
^7.29.7
→ 7.29.7
├─
@babel/helper-globals
^7.29.7
→ 7.29.7
├─
@babel/helper-string-parser
^7.29.7
→ 7.29.7
├─
@babel/helper-validator-identifier
^7.29.7
→ 7.29.7
├─
@babel/parser
^7.29.7
→ 7.29.7
├─
@babel/runtime
^7.13.10
→ 7.29.7
├─
@babel/template
^7.29.7
→ 7.29.7
├─
@babel/types
^7.29.7
→ 7.29.7
├─
@colors/colors
1.6.0
→ 1.6.0
├─
@radix-ui/react-compose-refs
1.0.1
→ 1.0.1
├─
@radix-ui/react-slot
1.0.2
→ 1.0.2
├─
@types/body-parser
*
→ 1.19.6
├─
@types/express-serve-static-core
^5.0.0
→ 5.1.1
├─
@types/node
*
→ 25.9.3
├─
@types/parse-json
^4.0.0
→ 4.0.2
├─
@types/serve-static
^2
→ 2.2.0
├─
@types/triple-beam
^1.3.2
├─
ansi-regex
^6.2.2
→ 6.2.2
├─
ansi-styles
^6.1.0
→ 6.2.3
├─
argparse
^1.0.7
→ 1.0.10
├─
braces
^3.0.3
→ 3.0.3
├─
clean-stack
^2.0.0
├─
color
^5.0.2
→ 5.0.3
├─
color-convert
^2.0.1
├─
debug
^4.3.1
→ 4.4.3
├─
depd
~2.0.0
→ 2.0.0
├─
eastasianwidth
^0.2.0
→ 0.2.0
├─
emoji-regex
^9.2.2
├─
es-errors
^1.3.0
→ 1.3.0
├─
escape-string-regexp
^2.0.0
→ 2.0.0
├─
esprima
^4.0.0
→ 4.0.1
├─
fecha
^4.2.0
→ 4.2.3
├─
fill-range
^7.1.1
→ 7.1.1
├─
find-up
^4.0.0
→ 4.1.0
├─
graceful-fs
^4.1.5
→ 4.2.11
├─
has-flag
^4.0.0
→ 4.0.0
├─
import-fresh
^3.2.1
├─
indent-string
^4.0.0
→ 4.0.0
├─
inherits
^2.0.3
→ 2.0.4
├─
inherits
~2.0.4
→ 2.0.4
├─
is-core-module
^2.16.1
→ 2.16.2
├─
isexe
^2.0.0
→ 2.0.0
├─
js-yaml
^3.13.0
→ 3.14.2
├─
load-yaml-file
^0.2.0
→ 0.2.0
├─
locate-path
^6.0.0
→ 6.0.0
├─
locate-path
^5.0.0
→ 5.0.0
├─
lodash.deburr
^4.1.0
→ 4.1.0
├─
micromatch
^4.0.2
→ 4.0.8
├─
mime-db
1.52.0
├─
ms
^2.1.1
→ 2.1.3
├─
object-inspect
^1.13.4
→ 1.13.4
├─
p-limit
^3.0.2
→ 3.1.0
├─
p-locate
^5.0.0
→ 5.0.0
├─
parse-json
^5.0.0
→ 5.2.0
├─
path-exists
^4.0.0
→ 4.0.0
├─
path-parse
^1.0.7
→ 1.0.7
├─
path-type
^4.0.0
→ 4.0.0
├─
picomatch
^2.3.1
→ 2.3.2
├─
pify
^4.0.1
→ 4.0.1
├─
pkg-dir
^4.2.0
→ 4.2.0
├─
safe-buffer
~5.2.0
→ 5.2.1
├─
safe-stable-stringify
^2.3.1
→ 2.5.0
├─
safer-buffer
>= 2.1.2 < 3
→ 2.1.2
├─
setprototypeof
~1.2.0
→ 1.2.0
├─
shebang-regex
^3.0.0
├─
side-channel-list
^1.0.1
→ 1.0.1
├─
side-channel-map
^1.0.1
→ 1.0.1
├─
side-channel-weakmap
^1.0.2
→ 1.0.2
├─
statuses
~2.0.2
→ 2.0.2
├─
string-width
^5.0.1
→ 5.1.2
├─
string_decoder
^1.1.1
→ 1.3.0
├─
strip-ansi
^7.0.1
→ 7.2.0
├─
strip-bom
^3.0.0
→ 3.0.0
├─
supports-preserve-symlinks-flag
^1.0.0
→ 1.0.0
├─
text-hex
1.0.x
├─
toidentifier
~1.0.1
→ 1.0.1
├─
triple-beam
^1.3.0
→ 1.4.1
├─
undici-types
>=7.24.0 <7.24.7
→ 7.24.6
├─
util-deprecate
^1.0.1
→ 1.0.2
├─
yaml
^1.10.0
→ 1.10.3
├─
@babel/code-frame
^7.29.7
→ 7.29.7
├─
@babel/code-frame
^7.0.0
→ 7.29.7
├─
@babel/helper-string-parser
^7.29.7
→ 7.29.7
├─
@babel/helper-validator-identifier
^7.29.7
→ 7.29.7
├─
@babel/parser
^7.29.7
→ 7.29.7
├─
@babel/runtime
^7.13.10
→ 7.29.7
├─
@babel/types
^7.29.7
→ 7.29.7
├─
@jridgewell/gen-mapping
^0.3.12
→ 0.3.13
├─
@jridgewell/trace-mapping
^0.3.28
→ 0.3.31
├─
@radix-ui/react-compose-refs
1.0.1
→ 1.0.1
├─
@types/connect
*
→ 3.4.38
├─
@types/http-errors
*
→ 2.0.5
├─
@types/node
*
→ 25.9.3
├─
@types/qs
*
→ 6.15.1
├─
@types/range-parser
*
→ 1.2.7
├─
@types/send
*
→ 1.2.1
├─
ansi-regex
^6.2.2
→ 6.2.2
├─
argparse
^1.0.7
→ 1.0.10
├─
braces
^3.0.3
→ 3.0.3
├─
call-bound
^1.0.2
→ 1.0.4
├─
color-convert
^3.1.3
├─
color-string
^2.1.3
→ 2.1.4
├─
eastasianwidth
^0.2.0
→ 0.2.0
├─
emoji-regex
^9.2.2
├─
error-ex
^1.3.1
→ 1.3.4
├─
es-errors
^1.3.0
→ 1.3.0
├─
esprima
^4.0.0
→ 4.0.1
├─
fill-range
^7.1.1
→ 7.1.1
├─
find-up
^4.0.0
→ 4.1.0
├─
get-intrinsic
^1.2.5
→ 1.3.1
├─
graceful-fs
^4.1.5
→ 4.2.11
├─
hasown
^2.0.3
→ 2.0.4
├─
js-tokens
^4.0.0
→ 4.0.0
├─
js-yaml
^3.13.0
→ 3.14.2
├─
jsesc
^3.0.2
→ 3.0.2
├─
json-parse-even-better-errors
^2.3.0
→ 2.3.1
├─
lines-and-columns
^1.1.6
→ 1.2.4
├─
locate-path
^5.0.0
→ 5.0.0
├─
ms
^2.1.3
→ 2.1.3
├─
object-inspect
^1.13.3
→ 1.13.4
├─
object-inspect
^1.13.4
→ 1.13.4
├─
p-limit
^3.0.2
→ 3.1.0
├─
p-locate
^5.0.0
→ 5.0.0
├─
p-locate
^4.1.0
→ 4.1.0
├─
path-exists
^4.0.0
→ 4.0.0
├─
picocolors
^1.1.1
→ 1.1.1
├─
picomatch
^2.3.1
→ 2.3.2
├─
pify
^4.0.1
→ 4.0.1
├─
safe-buffer
~5.2.0
→ 5.2.1
├─
side-channel-map
^1.0.1
→ 1.0.1
├─
sprintf-js
~1.0.2
→ 1.0.3
├─
strip-ansi
^7.0.1
→ 7.2.0
├─
strip-bom
^3.0.0
→ 3.0.0
├─
to-regex-range
^5.0.1
→ 5.0.1
├─
undici-types
>=7.24.0 <7.24.7
→ 7.24.6
├─
yocto-queue
^0.1.0
├─
@babel/helper-string-parser
^7.29.7
→ 7.29.7
├─
@babel/helper-validator-identifier
^7.29.7
→ 7.29.7
├─
@babel/runtime
^7.13.10
→ 7.29.7
├─
@babel/types
^7.29.7
→ 7.29.7
├─
@jridgewell/resolve-uri
^3.1.0
→ 3.1.2
├─
@jridgewell/sourcemap-codec
^1.4.14
→ 1.5.5
├─
@jridgewell/sourcemap-codec
^1.5.0
→ 1.5.5
├─
@jridgewell/trace-mapping
^0.3.24
→ 0.3.31
├─
@types/node
*
→ 25.9.3
├─
ansi-regex
^6.2.2
→ 6.2.2
├─
argparse
^1.0.7
→ 1.0.10
├─
async-function
^1.0.0
├─
async-generator-function
^1.0.0
→ 1.0.0
├─
call-bind-apply-helpers
^1.0.2
→ 1.0.2
├─
call-bound
^1.0.2
→ 1.0.4
├─
color-name
^2.0.0
→ 2.0.2
├─
es-define-property
^1.0.1
→ 1.0.1
├─
es-errors
^1.3.0
→ 1.3.0
├─
es-object-atoms
^1.1.1
→ 1.1.2
├─
esprima
^4.0.0
→ 4.0.1
├─
fill-range
^7.1.1
→ 7.1.1
├─
function-bind
^1.1.2
→ 1.1.2
├─
generator-function
^2.0.0
→ 2.0.1
├─
get-intrinsic
^1.3.0
→ 1.3.1
├─
get-intrinsic
^1.2.5
→ 1.3.1
├─
get-proto
^1.0.1
├─
gopd
^1.2.0
→ 1.2.0
├─
has-symbols
^1.1.0
→ 1.1.0
├─
hasown
^2.0.2
→ 2.0.4
├─
is-arrayish
^0.2.1
├─
is-number
^7.0.0
→ 7.0.0
├─
js-tokens
^4.0.0
→ 4.0.0
├─
locate-path
^5.0.0
→ 5.0.0
├─
math-intrinsics
^1.1.0
→ 1.1.0
├─
object-inspect
^1.13.3
→ 1.13.4
├─
p-limit
^3.0.2
→ 3.1.0
├─
p-limit
^2.2.0
→ 2.2.2
├─
p-locate
^4.1.0
→ 4.1.0
├─
path-exists
^4.0.0
→ 4.0.0
├─
picocolors
^1.1.1
→ 1.1.1
├─
sprintf-js
~1.0.2
→ 1.0.3
├─
to-regex-range
^5.0.1
→ 5.0.1
├─
undici-types
>=7.24.0 <7.24.7
→ 7.24.6
├─
yocto-queue
^0.1.0
├─
@babel/helper-string-parser
^7.29.7
→ 7.29.7
├─
@babel/helper-validator-identifier
^7.29.7
→ 7.29.7
├─
@jridgewell/resolve-uri
^3.1.0
→ 3.1.2
├─
@jridgewell/sourcemap-codec
^1.4.14
→ 1.5.5
├─
async-function
^1.0.0
├─
async-generator-function
^1.0.0
→ 1.0.0
├─
call-bind-apply-helpers
^1.0.2
→ 1.0.2
├─
es-define-property
^1.0.1
→ 1.0.1
├─
es-errors
^1.3.0
→ 1.3.0
├─
es-object-atoms
^1.1.1
→ 1.1.2
├─
function-bind
^1.1.2
→ 1.1.2
├─
generator-function
^2.0.0
→ 2.0.1
├─
get-intrinsic
^1.3.0
→ 1.3.1
├─
get-proto
^1.0.1
├─
gopd
^1.2.0
→ 1.2.0
├─
has-symbols
^1.1.0
→ 1.1.0
├─
hasown
^2.0.2
→ 2.0.4
├─
is-number
^7.0.0
→ 7.0.0
├─
math-intrinsics
^1.1.0
→ 1.1.0
├─
p-limit
^2.2.0
→ 2.2.2
├─
p-locate
^4.1.0
→ 4.1.0
├─
p-try
^2.0.0
→ 2.2.0
├─
sprintf-js
~1.0.2
→ 1.0.3
├─
to-regex-range
^5.0.1
→ 5.0.1
├─
undici-types
>=7.24.0 <7.24.7
→ 7.24.6
├─
yocto-queue
^0.1.0
├─
async-function
^1.0.0
├─
async-generator-function
^1.0.0
→ 1.0.0
├─
call-bind-apply-helpers
^1.0.2
→ 1.0.2
├─
es-define-property
^1.0.1
→ 1.0.1
├─
es-errors
^1.3.0
→ 1.3.0
├─
es-object-atoms
^1.1.1
→ 1.1.2
├─
function-bind
^1.1.2
→ 1.1.2
├─
generator-function
^2.0.0
→ 2.0.1
├─
get-proto
^1.0.1
├─
gopd
^1.2.0
→ 1.2.0
├─
has-symbols
^1.1.0
→ 1.1.0
├─
hasown
^2.0.2
→ 2.0.4
├─
is-number
^7.0.0
→ 7.0.0
├─
math-intrinsics
^1.1.0
→ 1.1.0
├─
p-limit
^2.2.0
→ 2.2.2
├─
p-try
^2.0.0
→ 2.2.0
Risk Dispositions (1 applicable to this version, 0 other)
Accepted rules are downgraded to INFO on future analyses; rejected rules escalate to CRITICAL.
| Rule | Source | Disposition | Author | Reason | |
|---|---|---|---|---|---|
osv:GHSA-hvp3-26wx-g2w4 |
osv | reject | AI | AI (osv): Advisory affects all versions < 5.33.3; fix available; generalizes to all unpatched versions. |
SAST Findings (2)
CRITICAL
GHSA-hvp3-26wx-g2w4: Strapi: Password Reset Does Not Revoke Existing Refresh Sessions
osv
[Always reject] ### Summary of CVE-2026-22706 Vulnerability Details - CVE: CVE-2026-22706 - CVSS v3.1 Vector: `CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N` (2.1 — Low) - Affected Versions: `@strapi/admin` and `@strapi/plugin-users-permissions` <=5.33.2 - How to Patch: Immediately update your Strapi to >=5.33.3 ### Description of CVE-2026-22706 In Strapi versions prior to 5.33.3, changing or resetting a user's password did not invalidate the user's existing refresh-token sessions by default. The refresh-token invalidation step in the users-permissions and admin authentication controllers was conditional on a caller-supplied `deviceId`. When a password change or reset request did not include a `deviceId`, no refresh tokens were revoked, leaving every prior session active. An attacker who had previously obtained a refresh token could continue minting new access tokens after the legitimate user reset their password, allowing persistent unauthorized access for the lifetime of the refresh token (up to 30 days by default). Rotating credentials no longer terminated an active attacker session, defeating password reset as a containment measure. The patch invalidates all refresh tokens associated with the user on every password change and password reset, regardless of whether a `deviceId` is supplied. A new device-scoped session is then issued to the caller as part of the response. ### IoC's for CVE-2026-22706 Indicators that an instance running an unpatched version may have been exploited: - Successful `POST /api/auth/refresh` or `POST /admin/access-token` requests using a refresh token issued before the user's most recent password change. Reviewable by correlating refresh-token `iat` claims against password-change events in audit logs - New access-token issuances for a user whose password was reset within the past 30 days, originating from an IP or User-Agent that did not perform the reset - Multiple active refresh tokens for a single user across distinct IPs after a password reset event - Database query: rows in `strapi_session` with `created_at` earlier than the user's most recent password-reset timestamp and `status = 'active'` ### References * OWASP ASVS 4.0 – V2.1.1: Session invalidation on credential change * OWASP Top 10 – A2: Broken Authentication ### Credits - bugbunny.ai - AndyAnh174 (concurrent report, 2026-04-09 — originally filed as GHSA-c6gj-8rxm-jrf2, closed as duplicate) - Aastha2602 (concurrent report, 2026-03-10 — originally filed as GHSA-5qvg-4jch-gvf4, closed as duplicate)
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
Review Summary
Risk score: 40. Findings: 1 critical (+40), 25 info (+0).
Commit: 7ada9131954e Browse source
Published to npm: