View nodebb on Snyk Open Source Advisor

Unable to verify the project's public source code repository.

Package Health Score

19 / 100

security
Security issues found
popularity
Limited
maintenance
Inactive
community
Limited

Explore Similar Packages

Security

Security issues found

All security vulnerabilities belong to production dependencies of direct and indirect packages.

Security and license risk for significant versions

All Versions

Version				Vulnerabilities	License Risk
1.4.0	\|	12/2016	Popular	0 C 5 H 2 M 0 L	1 H 0 M 0 L
0.8.2	\|	09/2015		0 C 5 H 2 M 0 L	1 H 0 M 0 L
0.7.0	\|	05/2015		0 C 5 H 3 M 0 L	0 H 0 M 0 L
0.6.1	\|	02/2015		0 C 5 H 4 M 0 L	0 H 0 M 0 L
0.4.3	\|	06/2014		0 C 5 H 3 M 0 L	0 H 0 M 0 L

License

GPL-3.0

Non-Permissive License

We noticed that this project uses a license which requires less permissive conditions such as disclosing the source code, stating changes or redistributing the source under the same license. It is advised to further consult the license terms before use.

Security Policy

Is your project affected by vulnerabilities?

Scan your projects for vulnerabilities. Fix quickly with automated fixes. Get started with Snyk for free.

Get started free

Popularity

Limited

Weekly Downloads (166)

GitHub Stars: ?
Forks: ?
Contributors: -

Direct Usage Popularity

The npm package nodebb receives a total of 166 downloads a week. As such, we scored nodebb popularity level to be Limited.

Based on project statistics from the GitHub repository for the npm package nodebb, we found that it has been starred ? times.

Downloads are calculated as moving averages for a period of the last 12 months, excluding weekends and known missing data points.

Community

Limited

Readme.md: Yes
Contributing.md: No
Code of Conduct: No
Contributors: 0
Funding: No

This project has seen only 10 or less contributors.

Embed Package Health Score Badge

Maintenance

Inactive

Commit Frequency

Unavailable commit data

Open Issues: ?
Open PR: ?
Last Release: 8 years ago
Last Commit: unknown

Further analysis of the maintenance status of nodebb based on released npm versions cadence, the repository activity, and other data points determined that its maintenance is Inactive.

An important project maintenance signal to consider for nodebb is that it hasn't seen any new versions released to npm in the past 12 months, and could be considered as a discontinued project, or that which receives low attention from its maintainers.

In the past month we didn't find any pull request activity or change in issues status has been detected for the GitHub repository.

Keep your project healthy

Check your package.json

Ensure all the packages you're using are healthy and well-maintained

Snyk Vulnerability Scanner

Get health score & security insights directly in your IDE

Package

Node.js Compatibility: >=4

Age: 10 years
Dependencies: 76 Direct
Versions: 7
Install Size: 0 B
Dist-tags: 1
# of Files: 0
Maintainers: 4
TS Typings: No

nodebb has more than a single and default latest tag published for the npm package. This means, there may be other tags available for this package, such as next to indicate future releases, or stable to indicate stable releases.

Readme

NodeBB Forum Software is powered by Node.js and built on either a Redis or MongoDB database. It utilizes web sockets for instant interactions and real-time notifications. NodeBB has many modern features out of the box such as social network integration and streaming discussions, while still making sure to be compatible with older browsers.

Additional functionality is enabled through the use of third-party plugins.

Screenshots

NodeBB's theming engine is highly flexible and does not restrict your design choices. Check out some themed installs in these screenshots below:

Our minimalist "Persona" theme gets you going right away, no coding experience required.

How can I follow along/contribute?

If you are a developer, feel free to check out the source and submit pull requests. We also have a wide array of plugins which would be a great starting point for learning the codebase.
If you are a designer, NodeBB needs themes! NodeBB's theming system allows extention of the base templates as well as styling via LESS or CSS. NodeBB's base theme utilizes Bootstrap 3 but themes can choose to use a different framework altogether.
If you know languages other than English you can help us translate NodeBB. We use Transifex for internationalization.
Please don't forget to like, follow, and star our repo! Join our growing community to keep up to date with the latest NodeBB development.

Requirements

NodeBB requires the following software to be installed:

A version of Node.js at least 4 or greater (installation/upgrade instructions)
Redis, version 2.8.9 or greater or MongoDB, version 2.6 or greater
nginx, version 1.3.13 or greater (only if intending to use nginx to proxy requests to a NodeBB)

Installation

Please refer to platform-specific installation documentation

Securing NodeBB

It is important to ensure that your NodeBB and database servers are secured. Bear these points in mind:

While some distributions set up Redis with a more restrictive configuration, Redis by default listens to all interfaces, which is especially dangerous when a server is open to the public. Some suggestions:
- Set bind_address to 127.0.0.1 so as to restrict access to the local machine only
- Use requirepass to secure Redis behind a password (preferably a long one)
- Familiarise yourself with Redis Security
Use iptables to secure your server from unintended open ports. In Ubuntu, ufw provides a friendlier interface to working with iptables.
- e.g. If your NodeBB is proxied, no ports should be open except 80 (and possibly 22, for SSH access)

Upgrading NodeBB

Detailed upgrade instructions are listed in Upgrading NodeBB

License

NodeBB is licensed under the GNU General Public License v3 (GPL-3) (https://www.gnu.org/copyleft/gpl.html).

Interested in a sublicense agreement for use of NodeBB in a non-free/restrictive environment? Contact us at sales@nodebb.org.

nodebb dependencies

async autoprefixer bcryptjs body-parser chart.js colors compression connect-ensure-login connect-flash connect-mongo connect-multiparty connect-redis cookie-parser cron csurf daemon express express-session express-useragent html-to-text ip jimp jquery json-2-csv less logrotate-stream lru-cache mime minimist mkdirp mongodb morgan mousetrap nconf nodebb-plugin-composer-default nodebb-plugin-dbsearch nodebb-plugin-emoji-extended nodebb-plugin-emoji-one nodebb-plugin-markdown nodebb-plugin-mentions nodebb-plugin-soundpack-default nodebb-plugin-spam-be-gone nodebb-rewards-essentials nodebb-theme-lavender nodebb-theme-persona nodebb-theme-vanilla nodebb-widget-essentials nodemailer nodemailer-sendmail-transport nodemailer-smtp-transport passport passport-local postcss postcss-clean promise-polyfill prompt redis request rimraf rss semver serve-favicon sitemap socket.io socket.io-client socket.io-redis socketio-wildcard string templates.js toobusy-js uglify-js underscore underscore.deep validator winston xregexp

nodebb development dependencies

coveralls eslint eslint-config-airbnb eslint-plugin-import eslint-plugin-jsx-a11y eslint-plugin-react grunt grunt-contrib-watch istanbul mocha mocha-lcov-reporter xmlhttprequest xmlhttprequest-ssl

FAQs

What is nodebb?

NodeBB Forum. Visit Snyk Advisor to see a full health score report for nodebb, including popularity, security, maintenance & community analysis.

Is nodebb popular?

The npm package nodebb receives a total of 166 weekly downloads. As such, nodebb popularity was classified as limited. Visit the popularity section on Snyk Advisor to see the full health analysis.

Is nodebb safe to use?

Security issues were found while scanning the latest version of nodebb, and a total of 7 vulnerabilities were detected. It is highly advised to conduct a security review before using this package. View the full security scan results.

Last updated on 7 November-2024, at 12:46 (UTC).

Build a secure application checklist

Select a recommended open source package

Minimize your risk by selecting secure & well maintained open source packages

DONE

Scan your app for vulnerabilities

Scan your application to find vulnerabilities in your: source code, open source dependencies, containers and configuration files

SCAN NOW

Fix identified vulnerabilities

Easily fix your code by leveraging automatically generated PRs

AUTO FIX

Monitor for new issues

New vulnerabilities are discovered every day. Get notified if your application is affected

MONITOR APP

nodebb

NodeBB Forum For more information about how to use this package see README

Ensure you're using the healthiest npm packages

Package Health Score

Explore Similar Packages

Security

Security and license risk for significant versions

Non-Permissive License

Is your project affected by vulnerabilities?

Popularity

Weekly Downloads (166)

Direct Usage Popularity

Community

Embed Package Health Score Badge

Maintenance

Commit Frequency

Keep your project healthy

Check your package.json

Snyk Vulnerability Scanner

Package

Readme

Screenshots

How can I follow along/contribute?

Requirements

Installation

Securing NodeBB

Upgrading NodeBB

License

nodebb dependencies

nodebb development dependencies

FAQs

What is nodebb?

Is nodebb popular?

Is nodebb safe to use?

Build a secure application checklist

Select a recommended open source package

Scan your app for vulnerabilities

Fix identified vulnerabilities

Monitor for new issues

Package Health Score

Explore Similar Packages

Security and license risk for significant versions

Is your project affected by vulnerabilities?

Weekly Downloads (166)

Direct Usage Popularity

Embed Package Health Score Badge

Commit Frequency

Keep your project healthy

Check your package.json

Snyk Vulnerability Scanner

Readme

Screenshots

How can I follow along/contribute?

Requirements

Installation

Securing NodeBB

Upgrading NodeBB

License

nodebb dependencies

nodebb development dependencies

FAQs

What is nodebb?

Is nodebb popular?

Is nodebb safe to use?

Build a secure application checklist

Select a recommended open source package

Scan your app for vulnerabilities

Source Code

Open Source

Container

Config

Fix identified vulnerabilities

Monitor for new issues