Skip to main content
FOSSA Logo

npm packages

License and vulnerability reference for 3 npm packages. Each page shows the top-level declared license, CVE-linked advisories, published versions, and the licenses carried by the package's transitive dependencies.

Packages
3
Most common license
MIT
Latest release indexed
Oct 2026

Most in-demand npm packages

Licenses shown are each package's top-level declared license.

  • The library for web and native user interfaces.

    v7.1.1MIT

    No known CVE-linked advisories
  • A JavaScript implementation of various web standards, for use with Node.js

    v30.1.2MIT

    No known CVE-linked advisories
  • A pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module.

    v0.6.0MIT

    Critical severity advisories

Recently updated

Licenses shown are each package's top-level declared license.

  • jsdomA JavaScript implementation of various web standards, for use with Node.js
    v30.1.2 Oct 2026MITNo known CVE-linked advisories
  • eslint-plugin-react-hooksThe library for web and native user interfaces.
    v7.1.1 Apr 2026MITNo known CVE-linked advisories
  • xmldomA pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module.
    v0.6.0 Apr 2021MITCritical severity advisories

Browse all 3 npm packages

Fewer than 25 published npm packages, so the full list is on this page.

Licenses shown are each package's top-level declared license.

  • eslint-plugin-react-hooksThe library for web and native user interfaces.
    v7.1.1MITNo known CVE-linked advisories
  • jsdomA JavaScript implementation of various web standards, for use with Node.js
    v30.1.2MITNo known CVE-linked advisories
  • xmldomA pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module.
    v0.6.0MITCritical severity advisories

These pages read declared metadata. Run the same license and vulnerability view across your npm dependencies, where a full scan resolves what metadata leaves out.

Scan free

Dependency graph and package metadata from deps.dev (Google Open Source Insights), used under CC BY 4.0.

Vulnerability data from the Open Source Vulnerability (OSV) database, including the GitHub Advisory Database and the PyPI Advisory Database, used under CC BY 4.0. Only CVE-linked advisories are shown.

License and vulnerability information on this page is derived from public package metadata and public advisory databases. It is not legal advice, and it reflects the top-level declared license only. Verify the license and terms of any software for your own needs.