arcane

Direct and transitive dependency freshness, license, and CVE exposure from the latest SBOM.

Security Export CSV

78% Freshness

1122 Dependencies

140 Outdated

0 Stale

2.7 Avg Behind

Dependency List

Latest release v1.18.1

All 1121 Outdated 300 Has CVE 4 GPL 13

Dependency	Type	Current	Latest	Behind	CVE	License
fast-uri npm	Transitive	3.1.0	3.1.2	2 behind	2 high	BSD-3-Clause
github.com/docker/docker golang	Direct	v28.5.2+incompatible	—	—	2 high	Apache-2.0
postcss npm	Transitive	8.4.31	8.5.15	34 behind	1 medium	MIT
uuid npm	Transitive	11.1.0	14.0.0	3 behind	1 medium	MIT

License Breakdown

MIT 665

Unknown 147

Apache-2.0 125

BSD-3-Clause 43

Apache-2.0 AND BSD-3-Clause 24

ISC 22

BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang 17

MPL-2.0 17

BSD-2-Clause 12

BSD-2-Clause AND LGPL-2.0-only AND LGPL-2.1-only AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-scancode-other-permissive AND MIT AND MPL-2.0 10

Apache-2.0 AND MIT 7

BlueOak-1.0.0 5

Apache-2.0 AND BSD-2-Clause AND LGPL-2.0-only AND LGPL-2.1-only AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-scancode-other-permissive AND MIT AND MPL-2.0 3

Apache-2.0 AND CC-BY-SA-4.0 3

Apache-2.0 AND LicenseRef-scancode-dco-1.1 AND MIT 3

MIT-0 2

(MIT OR CC0-1.0) 1

0BSD 1

Apache-2.0 AND BSD-3-Clause AND MIT 1

Apache-2.0 OR MPL-2.0 1

BSD-2-Clause AND BSD-3-Clause 1

BSD-2-Clause AND ISC 1

BSD-2-Clause AND JSON 1

BSD-3-Clause AND LicenseRef-scancode-generic-cla AND MIT 1

BSD-3-Clause AND LicenseRef-scancode-public-domain AND LicenseRef-scancode-unknown-license-reference 1

BSD-3-Clause AND MIT 1

BSD-3-Clause AND MPL-2.0 1

CC-BY-4.0 1

CC0-1.0 1

CC0-1.0 OR MIT OR (CC0-1.0 AND MIT) 1

EPL-2.0 OR (BSD-3-Clause AND EPL-2.0) 1

LicenseRef-scancode-unknown-license-reference AND MIT 1

CVE Severity

critical 0

high 2

medium 2

low 0

unknown 0