answer

Direct and transitive dependency freshness, license, and CVE exposure from the latest SBOM.

Security Export CSV

43% Freshness

1757 Dependencies

845 Outdated

0 Stale

36.8 Avg Behind

Dependency List

Latest release v2.0.0

All 1756 Outdated 1026 Has CVE 45 GPL 1

Dependency	Type	Current	Latest	Behind	CVE	License
node-forge npm	Transitive	1.3.1	1.4.0	3 behind	7 high	BSD-3-Clause OR GPL-2.0 OR (BSD-3-Clause AND GPL-2.0)

License Breakdown

MIT 1375

ISC 82

Apache-2.0 73

BSD-3-Clause 54

BSD-2-Clause 43

CC0-1.0 43

Unknown 15

Apache-2.0 AND MIT 13

BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang 11

CC0-1.0 AND MIT 6

ISC AND MIT 5

MIT OR (CC0-1.0 AND MIT) 5

MPL-2.0 4

BlueOak-1.0.0 3

0BSD 2

Apache-2.0 AND BSD-2-Clause 2

BSD-2-Clause AND BSD-3-Clause 2

LicenseRef-scancode-public-domain AND Unlicense 2

AFL-2.1 AND AFL-3.0 AND BSD-3-Clause 1

Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT 1

Apache-2.0 AND BSD-3-Clause AND MIT 1

Apache-2.0 AND CC-BY-SA-4.0 1

Apache-2.0 AND LicenseRef-scancode-unknown-license-reference 1

Apache-2.0 OR (Apache-2.0 AND MIT) 1

Apache-2.0 OR MIT 1

Apache-2.0 OR MPL-1.1 OR (Apache-2.0 AND MPL-1.1) 1

BSD-2-Clause AND BSD-2-Clause-Views 1

BSD-2-Clause-Views 1

BSD-3-Clause OR GPL-2.0 OR (BSD-3-Clause AND GPL-2.0) 1

CC-BY-3.0 1

CC-BY-3.0 AND MIT 1

CC-BY-4.0 1

LicenseRef-scancode-free-unknown AND MIT 1

Python-2.0 1

CVE Severity

critical 1

high 21

medium 16

low 6

unknown 1