blackcandy

Direct and transitive dependency freshness, license, and CVE exposure from the latest SBOM.

Security Export CSV

59% Freshness

567 Dependencies

196 Outdated

0 Stale

15.7 Avg Behind

Dependency List

Latest release v3.1.0

All 566 Outdated 235 Has CVE 22 GPL 4

Dependency	Type	Current	Latest	Behind	CVE	License
semver npm	Transitive	7.3.7	7.8.2	21 behind	1 high	ISC
picomatch npm	Transitive	2.3.1	4.0.4	9 behind	2 high	MIT
cross-spawn npm	Transitive	7.0.3	7.0.6	3 behind	1 high	MIT
braces npm	Transitive	3.0.2	3.0.3	1 behind	1 high	MIT
erb gem	Direct	6.0.2	—	—	1 high	BSD-2-Clause OR Ruby OR (BSD-2-Clause AND Ruby)
flatted npm	Transitive	3.2.5	—	—	2 high	ISC
httparty gem	Direct	0.23.2	—	—	1 high	MIT
immutable npm	Transitive	4.1.0	—	—	1 high	MIT
ini npm	Transitive	1.3.5	—	—	1 high	ISC
kind-of npm	Transitive	6.0.2	—	—	1 high	MIT
minimatch npm	Transitive	3.0.4	—	—	4 high	ISC
net-imap gem	Direct	0.6.3	—	—	5 high	BSD-2-Clause AND LicenseRef-scancode-ietf AND LicenseRef-scancode-ietf-trust AND Ruby
nokogiri gem	Direct	1.19.2	—	—	2 high	MIT
ajv npm	Transitive	6.12.6	8.20.0	67 behind	1 medium	MIT
postcss npm	Transitive	8.4.27	8.5.15	38 behind	2 medium	MIT
nanoid npm	Transitive	3.3.6	5.1.11	28 behind	1 medium	MIT
brace-expansion npm	Transitive	1.1.11	5.0.6	18 behind	2 medium	MIT
js-yaml npm	Transitive	4.1.0	4.2.0	3 behind	1 medium	MIT
micromatch npm	Transitive	4.0.5	4.0.8	3 behind	1 medium	MIT
esbuild npm	Direct	0.18.17	—	—	1 medium	MIT
@hotwired/turbo npm	Transitive	8.0.13	—	—	1 low	MIT
debug npm	Transitive	4.1.1	—	—	1 low	MIT

License Breakdown

MIT 443

ISC 29

Unknown 16

Apache-2.0 12

BSD-2-Clause OR (BSD-2-Clause AND Ruby) 9

BSD-2-Clause 7

BSD-2-Clause OR Ruby OR (BSD-2-Clause AND Ruby) 7

(BSD-2-Clause AND MIT AND Ruby) OR (BSD-2-Clause AND MIT) 5

BSD-3-Clause 5

Apache-2.0 AND BSD-2-Clause 2

CC0-1.0 2

MIT AND Ruby 2

MIT OR (CC0-1.0 AND MIT) 2

(Apache-2.0 AND BSD-2-Clause AND MIT AND Ruby) OR (BSD-2-Clause AND GPL-2.0-only AND MIT AND Ruby) 1

(Artistic-1.0-Perl AND BSD-3-Clause AND LicenseRef-scancode-unknown-license-reference AND MIT AND OFL-1.1 AND Ruby) OR (BSD-3-Clause AND GPL-1.0-or-later AND LicenseRef-scancode-unknown-license-reference AND MIT AND OFL-1.1 AND Ruby) 1

(BSD-2-Clause AND BSD-3-Clause AND Ruby) OR (BSD-2-Clause AND BSD-3-Clause) 1

0BSD 1

Apache-2.0 AND MIT 1

BSD-2-Clause AND BSD-2-Clause-Views 1

BSD-2-Clause AND GPL-2.0-or-later AND MIT 1

BSD-2-Clause AND LicenseRef-scancode-ietf AND LicenseRef-scancode-ietf-trust AND Ruby 1

BSD-2-Clause AND MIT 1

BSD-2-Clause OR Ruby 1

BSD-3-Clause AND LicenseRef-scancode-public-domain 1

BSD-3-Clause AND MIT 1

BSD-3-Clause AND Ruby 1

CC-BY-3.0 1

CC-BY-SA-4.0 AND ISC 1

CC0-1.0 AND MIT 1

ISC AND MIT 1

LGPL-2.1-only AND LGPL-2.1-or-later AND MIT 1

LicenseRef-scancode-proprietary-license 1

LicenseRef-scancode-public-domain AND MIT 1

LicenseRef-scancode-unknown-license-reference AND MIT 1

MIT AND MPL-2.0 1

MIT-0 1

Python-2.0 1

Ruby 1

CVE Severity

critical 0

high 13

medium 7

low 2

unknown 0