Skip to content
Tools / anything-llm / Dependencies

Dependency Analysis

anything-llm

Direct and transitive dependency freshness, license, and CVE exposure from the latest SBOM.

38% Freshness
2676 Dependencies
1366 Outdated
0 Stale
26.7 Avg Behind

Dependency List

Latest release v1.12.1

Dependency Type Current Latest Behind CVE License
@img/sharp-libvips-linux-arm
npm
Transitive 1.0.5 1.2.4 21 behind LGPL-3.0-or-later
@img/sharp-libvips-linux-x64
npm
Transitive 1.0.4 1.2.4 21 behind LGPL-3.0-or-later
@img/sharp-libvips-linux-arm64
npm
Transitive 1.0.4 1.2.4 20 behind LGPL-3.0-or-later
@img/sharp-libvips-darwin-arm64
npm
Transitive 1.0.4 1.2.4 19 behind LGPL-3.0-or-later
@img/sharp-libvips-darwin-x64
npm
Transitive 1.0.4 1.2.4 19 behind LGPL-3.0-or-later
@img/sharp-libvips-linux-s390x
npm
Transitive 1.0.4 1.2.4 19 behind LGPL-3.0-or-later
@img/sharp-libvips-linuxmusl-arm64
npm
Transitive 1.0.4 1.2.4 19 behind LGPL-3.0-or-later
@img/sharp-libvips-linuxmusl-x64
npm
Transitive 1.0.4 1.2.4 19 behind LGPL-3.0-or-later
@img/sharp-wasm32
npm
Transitive 0.33.5 0.34.5 15 behind Apache-2.0 AND LGPL-3.0-or-later AND MIT
@img/sharp-win32-ia32
npm
Transitive 0.33.5 0.34.5 15 behind Apache-2.0 AND LGPL-3.0-or-later
@img/sharp-win32-x64
npm
Transitive 0.33.5 0.34.5 15 behind Apache-2.0 AND LGPL-3.0-or-later
dompurify
npm
Direct 3.3.3 3.4.8 9 behind (Apache-2.0 AND GPL-1.0-only AND MPL-2.0 AND MS-PL) OR (Apache-2.0 AND GPL-1.0-only AND MPL-2.0) OR (Apache-2.0 AND GPL-2.0-only AND MPL-2.0 AND MS-PL) OR (Apache-2.0 AND GPL-2.0-only AND MPL-2.0)
jszip
npm
Transitive 3.10.1 3.10.1 Current GPL-3.0-only OR MIT
jszip
npm
Transitive 3.10.1 3.10.1 Current GPL-3.0-only OR MIT

License Breakdown

MIT 1945
Apache-2.0 336
ISC 144
BSD-3-Clause 81
BSD-2-Clause 46
Unknown 38
CC0-1.0 AND MIT 15
BlueOak-1.0.0 8
LGPL-3.0-or-later 8
0BSD 5
ISC AND MIT 5
Apache-2.0 AND MIT 4
BSD-2-Clause AND BSD-2-Clause-Views 3
Python-2.0 3
Apache-2.0 AND BSD-2-Clause 2
Apache-2.0 AND LGPL-3.0-or-later 2
Apache-2.0 OR BSD-2-Clause OR MIT OR (Apache-2.0 AND BSD-2-Clause) OR (Apache-2.0 AND MIT) OR (BSD-2-Clause AND MIT) 2
CC-BY-4.0 2
CC0-1.0 2
GPL-3.0-only OR MIT 2
MIT AND MIT-0 2
MIT AND Zlib 2
MIT OR (MIT AND WTFPL) 2
Unlicense 2
(Apache-2.0 AND GPL-1.0-only AND MPL-2.0 AND MS-PL) OR (Apache-2.0 AND GPL-1.0-only AND MPL-2.0) OR (Apache-2.0 AND GPL-2.0-only AND MPL-2.0 AND MS-PL) OR (Apache-2.0 AND GPL-2.0-only AND MPL-2.0) 1
AFL-2.1 AND AFL-3.0 AND BSD-3-Clause 1
Apache-2.0 AND BSD-2-Clause AND CC0-1.0 AND ISC AND MIT 1
Apache-2.0 AND LGPL-3.0-or-later AND MIT 1
Apache-2.0 OR MPL-2.0 OR (Apache-2.0 AND MPL-2.0) 1
Artistic-2.0 AND ISC 1
BSD-2-Clause AND BSD-3-Clause 1
BSD-3-Clause AND ISC 1
BSD-3-Clause AND LicenseRef-scancode-generic-cla AND MIT 1
BSD-3-Clause AND MIT 1
LicenseRef-scancode-public-domain AND Unlicense 1
MIT OR EUPL-1.1+ 1
MIT-0 1
MPL-2.0 1

CVE Severity

critical 5
high 39
medium 27
low 5
unknown 0

Beta — feedback welcome: [email protected]