Package Licenses
ISC
Dependency Licenses
MIT26
| Package | Relation | Dependencies | Published |
|---|---|---|---|
| @gar/promise-retry • 1.0.3Retries a function that returns a promise, leveraging the power of the retry module. | INDIRECT | 0 | |
| @tufjs/canonical-json • 2.0.0OLPC JSON canonicalization | INDIRECT | 0 | |
| @tufjs/models • 4.1.0TUF metadata models | INDIRECT | 4 | |
| agent-base • 7.1.4Turn a function into an `http.Agent` instance | INDIRECT | 0 | |
| balanced-match • 4.0.4Match balanced character pairs, like "{" and "}" | INDIRECT | 0 | |
| brace-expansion • 5.0.9Brace expansion as known from sh/bash | INDIRECT | 1 | |
| ci-info • 4.4.0Get details about the current Continuous Integration environment | DIRECT | 0 | |
| content-type • 2.1.0Create and parse HTTP Content-Type header | INDIRECT | 0 | |
| debug • 4.4.3Lightweight debugging utility for Node.js and the browser | INDIRECT | 1 | |
| http-proxy-agent • 7.0.2An HTTP(s) proxy `http.Agent` implementation for HTTP | INDIRECT | 3 | |
| https-proxy-agent • 7.0.6An HTTP(s) proxy `http.Agent` implementation for HTTPS | INDIRECT | 3 | |
| iconv-lite • 0.7.3Convert character encodings in pure javascript. | INDIRECT | 1 | |
| ip-address • 10.5.0A library for parsing IPv4 and IPv6 IP addresses in node and the browser. | INDIRECT | 0 | |
| json-parse-even-better-errors • 5.0.0JSON.parse with context information on error | INDIRECT | 0 | |
| jsonparse • 1.3.1This is a pure-js JSON streaming parser for node.js | INDIRECT | 0 | |
| minipass-fetch • 5.0.2An implementation of window.fetch in Node.js using Minipass streams | INDIRECT | 5 | |
| minizlib • 3.1.0A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding. | INDIRECT | 1 | |
| ms • 2.1.3Tiny millisecond conversion utility | INDIRECT | 0 | |
| negotiator • 1.1.0HTTP content negotiation | INDIRECT | 1 | |
| p-map • 7.0.6Map over promises concurrently | INDIRECT | 0 | |
| safer-buffer • 2.1.2Modern Buffer API polyfill without footguns | INDIRECT | 0 | |
| smart-buffer • 4.2.0smart-buffer is a Buffer wrapper that adds automatic read & write offset tracking, string operations, data insertions, and more. | INDIRECT | 0 | |
| socks-proxy-agent • 8.0.5A SOCKS proxy `http.Agent` implementation for HTTP and HTTPS | INDIRECT | 6 | |
| socks • 2.8.9Fully featured SOCKS proxy client supporting SOCKSv4, SOCKSv4a, and SOCKSv5. Includes Bind and Associate functionality. | INDIRECT | 2 | |
| spdx-expression-parse • 4.0.0parse SPDX license expressions | INDIRECT | 2 | |
| tuf-js • 4.1.0JavaScript implementation of The Update Framework (TUF) | INDIRECT | 42 |
ISC25
| Package | Relation | Dependencies | Published |
|---|---|---|---|
| @npmcli/agent • 4.0.2the http/https agent used by the npm cli | INDIRECT | 10 | |
| @npmcli/fs • 5.0.0filesystem utilities for the npm cli | INDIRECT | 1 | |
| @npmcli/git • 7.0.2a util for spawning git from npm CLI contexts | INDIRECT | 14 | |
| @npmcli/package-json • 7.0.5Programmatic API to update package.json | DIRECT | 25 | |
| @npmcli/promise-spawn • 9.0.1spawn processes the way the npm cli likes to do | INDIRECT | 2 | |
| @npmcli/redact • 4.0.0Redact sensitive npm information from output | INDIRECT | 0 | |
| cacache • 20.0.4Fast, fault-tolerant, cross-platform, disk-based, data-agnostic, content-addressable cache. | INDIRECT | 17 | |
| fs-minipass • 3.0.3fs read and write streams based on minipass | INDIRECT | 1 | |
| hosted-git-info • 9.0.3Provides metadata and conversions from repository urls for GitHub, Bitbucket and GitLab | INDIRECT | 1 | |
| ini • 6.0.0An ini encoder/decoder for node | INDIRECT | 0 | |
| make-fetch-happen • 15.0.6Opinionated, caching, retrying fetch client | INDIRECT | 39 | |
| minipass-collect • 2.0.1A Minipass stream that collects all the data into a single chunk | INDIRECT | 1 | |
| minipass-pipeline • 1.2.4create a pipeline of streams using Minipass | INDIRECT | 2 | |
| minipass-sized • 2.0.0A Minipass stream that raises an error if you get a different number of bytes than expected | INDIRECT | 1 | |
| minipass • 3.3.6minimal implementation of a PassThrough stream | INDIRECT | 1 | |
| npm-normalize-package-bin • 5.0.0Turn any flavor of allowable package.json bin into a normalized object | INDIRECT | 0 | |
| npm-package-arg • 13.0.2Parse the things that can be arguments to `npm install` | DIRECT | 5 | |
| npm-pick-manifest • 11.0.3Resolves a matching manifest from a package metadata document according to standard npm semver resolution rules. | INDIRECT | 8 | |
| npm-registry-fetch • 19.1.1Fetch-based http client for use with npm registry APIs | DIRECT | 44 | |
| proc-log • 6.1.0just emit 'log' events on the process object | DIRECT | 0 | |
| semver • 7.8.5The semantic version parser used by npm. | DIRECT | 0 | |
| ssri • 13.0.1Standard Subresource Integrity library -- parses, serializes, generates, and verifies integrity metadata according to the SRI spec. | DIRECT | 1 | |
| validate-npm-package-name • 7.0.2Give me a string and I'll tell you if it's a valid npm package name | INDIRECT | 0 | |
| which • 6.0.1Like which(1) unix command. Find the first instance of an executable in the PATH. | INDIRECT | 1 | |
| yallist • 4.0.0Yet Another Linked List | INDIRECT | 0 |
Apache-2.07
| Package | Relation | Dependencies | Published |
|---|---|---|---|
| @sigstore/bundle • 4.0.0Sigstore bundle type | INDIRECT | 1 | |
| @sigstore/core • 3.2.1Base library for Sigstore | INDIRECT | 0 | |
| @sigstore/protobuf-specs • 0.5.2code-signing for npm packages | INDIRECT | 0 | |
| @sigstore/sign • 4.1.1Sigstore signing library | INDIRECT | 43 | |
| @sigstore/tuf • 4.0.2Client for the Sigstore TUF repository | INDIRECT | 44 | |
| @sigstore/verify • 3.1.1Verification of Sigstore signatures | INDIRECT | 3 | |
| sigstore • 4.1.1code-signing for npm packages | DIRECT | 49 |
BlueOak-1.0.07
| Package | Relation | Dependencies | Published |
|---|---|---|---|
| glob • 13.0.6the most correct and second fastest glob implementation in JavaScript | INDIRECT | 6 | |
| isexe • 4.0.0Minimal module to check if a file is executable. | INDIRECT | 0 | |
| lru-cache • 11.5.2A cache object that deletes the least-recently-used items. | INDIRECT | 0 | |
| minimatch • 10.2.6a glob matcher in javascript | INDIRECT | 2 | |
| minipass-flush • 1.0.7A Minipass stream that calls a flush function before emitting 'end' | INDIRECT | 2 | |
| minipass • 7.1.3minimal implementation of a PassThrough stream | INDIRECT | 0 | |
| path-scurry • 2.0.2walk paths fast and efficiently | INDIRECT | 2 |
BSD-2-Clause2
| Package | Relation | Dependencies | Published |
|---|---|---|---|
| http-cache-semantics • 4.2.0Parses Cache-Control and other headers. Helps building correct HTTP caches and proxies | INDIRECT | 0 | |
| npm-install-checks • 8.0.0Check the engines and platform fields in package.json | INDIRECT | 1 |
CC-BY-3.01
| Package | Relation | Dependencies | Published |
|---|---|---|---|
| spdx-exceptions • 2.5.0list of SPDX standard license exceptions | INDIRECT | 0 |
CC0-1.01
| Package | Relation | Dependencies | Published |
|---|---|---|---|
| spdx-license-ids • 3.0.23A list of SPDX license identifiers | INDIRECT | 0 |