Skip to content

Latest commit

 

History

History
98 lines (80 loc) · 7.66 KB

File metadata and controls

98 lines (80 loc) · 7.66 KB

D-Genies untracked dependencies

Date: 2025-01-06

JS library versions

Library file Library Version npm/comment
auto-render.min.js https://github.com/KaTeX/KaTeX v0.15.3 katex@0.15.3
katex.min.js https://github.com/KaTeX/KaTeX v0.15.3 katex@0.15.3
codemirror/codemirror.js https://codemirror.net/5/ v5.65.10 (lib/codemirror.js) codemirror@5.65.10
codemirror/lint.js https://codemirror.net/5/ v5.65.10 (addon/lint/lint.js) codemirror@5.65.10
codemirror/simple.js https://codemirror.net/5/ v5.65.10 (addon/mode/simple.js) codemirror@5.65.10
chevrotain.min.js https://chevrotain.io v10.4.2 chevrotain@10.4.2
jquery.modal.min.js https://github.com/kylefox/jquery-modal v0.9.2 jquery-modal@0.9.2
tmpl.min.js https://blueimp.github.io/JavaScript-Templates/ v3.20.0 blueimp-tmpl@3.20.0
bootstrap.js Bootstrap v4.6.2 bootstrap@4.6.2
bootstrap-notify_min.js Bootstrap-notify commit 4ed0351 (3.13+) Exists but older (bootstrap-notify)
BootstrapMenu.min.js Bootstrap-Menu v1.0.14 + https://github.com/tpv-ebben/bootstrap-menu/tree/patch-1 Patch to be compatible with bootstrap 4. Npm version is bootstrap 3 only (bootstrap-menu)
canvg.js canvg v1.5 this version is not listed on npm (canvg)
chosen.jquery.min.js Chosen v1.8.2 chosen-js@1.8.2
d3.min.js D3 v4.10.0 d3@4.10.0
FileSaver.min.js FileSaver v1.3.8 file-saver@1.3.8
jquery-3.2.1.min.js jQuery v3.2.1 jquery@3.2.1
jquery.cookie-1.4.1.min.js jQuery Cookie v1.4.1 Exists but not minified (jquery.cookie@1.4.1)
jquery.fileupload.js jQuery-File-Upload v9.19.1 blueimp-file-upload@9.19.1
jquery.fileupload-process.js jQuery-File-Upload v9.19.1 blueimp-file-upload@9.19.1
jquery.fileupload-validate.js jQuery-File-Upload v9.19.1 blueimp-file-upload@9.19.1
jquery-ui.min.js jQuery-ui v1.12.1 Unable to reproduces exact file as it was created with the builder from the website that has evolved since
popper.min.js Popper v1.12.5 popper.js@1.12.5
popper.min.js.map Popper v1.12.5 popper.js@1.12.5
socket.io.slim.js Socker.io v2.0.4 EXists but not slim version (socket.io)
socket.io.slim.js.map Socker.io v2.0.4 -
sprintf.min.js sprintf-js v1.1.1 sprintf-js@1.1.1

Additional Comments:

jQuery Cookie is deprecated -> JavaScript Cookie

Bootstrap-Menu has vulnerability and is only used for contextual menu in d3js. Maybe looking for some alternative like

CSS versions

Library file Link Version npm/comment
animate.css http://daneden.me/animate v3.5.2 Exists but differs, more research needed, look like a custom build (animate.css@3.5.2)
bootstrap.min.css https://github.com/twbs/bootstrap v4.6.2 bootstrap@4.6.2
bootstrap.min.css.map https://github.com/twbs/bootstrap v4.6.2 bootstrap@4.6.2
chosen.min.css https://github.com/harvesthq/chosen v1.8.2 look like css was hand-modified in order to put chosen-sprite pngs in images dir instead current dir... (chosen-js@1.8.2)
jquery-ui.min.css http://jqueryui.com v1.12.1 -
jquery.modal.min.css https://github.com/kylefox/jquery-modal v0.9.2 jquery-modal@0.9.2
katex.min.css https://github.com/KaTeX/KaTeX v0.15.3 katex@0.15.3
codemirror/codemirror.css https://codemirror.net/5/ v5.65.10 (lib/codemirror.css) codemirror@5.65.10
codemirror/lint.css https://codemirror.net/5/ v5.65.10 (addon/lint/lint.css) codemirror@5.65.10

Helper scripts

Most of libary link from npm can be found with following command.

npm view <package@version> dist.tarball

When many possibilities exists, listing sha1 to identify libs can be done in such ways:

npm view "popper.js@1" dist.tarball | while read lib qurl; do
  url=${qurl:1:-1} \
    && wget -q "$url" \
    && mkdir "$lib" \
    && tar -zxf "$(basename $url)" -C "./$lib" --wildcards '*/popper.min.js' \
    && find "./$lib" -name popper.min.js -exec sha1sum {} \;
  rm -r "$lib" "$(basename $url)"
done | tee popper.js.sha1

or

JS_FILE="jquery.fileupload-ui.js"
npm view "blueimp-file-upload@9" dist.tarball | while read lib qurl; do
  url=${qurl:1:-1}
  archive="$(basename $url)"
  if [ ! -f "$archive" ]; then
    wget -q "$url"
  fi
  mkdir "$lib"
  tar -zxf "$archive" -C "./$lib" --wildcards '*/'"$JS_FILE" \
    && find "./$lib" -name "$JS_FILE" -exec sha1sum {} \;
  rm -r "$lib"
done | tee file-upload.sha1