Ecosyste.ms: Packages

An open API service providing package, version and dependency metadata of many open source software ecosystems and registries.

Top 0.8% on npmjs.org
Top 0.1% downloads on npmjs.org
Top 0.1% dependent packages on npmjs.org
Top 0.1% dependent repos on npmjs.org
Top 2.5% forks on npmjs.org
Top 0.1% docker downloads on npmjs.org

npmjs.org : tar

tar for node

Registry - Source - JSON
purl: pkg:npm/tar
Keywords: npm-cli
License: ISC
Latest release: 1 day ago
First release: over 12 years ago
Dependent packages: 5,040
Dependent repositories: 3,179,743
Downloads: 118,332,692 last month
Stars: 811 on GitHub
Forks: 172 on GitHub
Docker dependents: 67,795
Docker downloads: 15,768,084,968
Total Commits: 675
Committers: 38
Average commits per author: 17.763
Development Distribution Score (DDS): 0.133
More commit stats: commits.ecosyste.ms
See more repository details: repos.ecosyste.ms
Funding links: https://github.com/sponsors/isaacs
Last synced: 1 day ago

High

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTU5NTUtOXdwci0zN2po

Arbitrary File Creation/Overwrite on Windows via insufficient relative path sanitization
Ecosystems: npm
Packages: tar
Source: github
Published: over 2 years ago

High

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWdmanItM2ptbS00Zzl2

Symlink Arbitrary File Overwrite in tar
Ecosystems: npm
Packages: tar
Source: github
Published: over 6 years ago

High

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTNqZnEtZzQ1OC03cW05

Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization
Ecosystems: npm
Packages: tar
Source: github
Published: almost 3 years ago

Moderate

GSA_kwCzR0hTQS1mNXgzLTMyZzYteHEzNs4AA6O0

Denial of service while parsing a tar file due to lack of folders count validation
Ecosystems: npm
Packages: tar, node-tar
Source: github
Published: about 1 month ago

High

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTlyMnctMzk0di01M3Fj

Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links
Ecosystems: npm
Packages: tar
Source: github
Published: over 2 years ago

High

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWo0NG0tcW02cC1ocDdt

Arbitrary File Overwrite in tar
Ecosystems: npm
Packages: tar
Source: github
Published: about 5 years ago

High

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXFxODktaHEzZi0zOTNw

Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links
Ecosystems: npm
Packages: tar
Source: github
Published: over 2 years ago

High

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXI2MjgtbWhtaC1xamh3

Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning
Ecosystems: npm
Packages: tar
Source: github
Published: almost 3 years ago