Skip to content
Tools / bunkerweb / Dependencies

Dependency Analysis

bunkerweb

Direct and transitive dependency freshness, license, and CVE exposure from the latest SBOM.

59% Freshness
478 Dependencies
148 Outdated
0 Stale
3.2 Avg Behind

Dependency List

Latest release v1.6.9

Dependency Type Current Latest Behind CVE License
h11
pypi
Direct 0.14.0 0.16.0 2 behind 1 critical MIT
starlette
pypi
Direct 0.38.6 1.2.1 37 behind 2 high BSD-2-Clause AND BSD-3-Clause
cryptography
pypi
Direct 42.0.8 48.0.0 25 behind 4 high BSD-3-Clause OR Apache-2.0
pyopenssl
pypi
Direct 24.2.1 26.2.0 8 behind 2 high Apache-2.0
python-multipart
pypi
Direct 0.0.22 0.0.30 8 behind 2 high Apache-2.0
urllib3
pypi
Direct 2.5.0 2.7.0 5 behind 3 high MIT
pillow
pypi
Direct 11.3.0 12.2.0 4 behind 6 high LicenseRef-scancode-secret-labs-2011 AND MIT-CMU
picomatch
npm
Transitive 4.0.3 4.0.4 3 behind 2 high MIT
mako
pypi
Direct 1.3.10 1.3.12 2 behind 2 high MIT
pyasn1
pypi
Direct 0.6.2 0.6.3 1 behind 1 high BSD-2-Clause AND BSD-3-Clause AND MIT
svgo
npm
Transitive 4.0.0 4.0.1 1 behind 1 high MIT
postcss
npm
Direct 8.5.6 8.5.15 9 behind 1 medium MIT
requests
pypi
Direct 2.32.3 2.34.2 8 behind 1 medium Apache-2.0
urllib3
pypi
Direct 2.2.3 2.7.0 8 behind 2 medium MIT
yaml
npm
Transitive 2.8.1 2.9.0 7 behind 1 medium ISC
requests
pypi
Direct 2.32.5 2.34.2 6 behind 1 medium Apache-2.0
python-dotenv
pypi
Direct 1.0.1 1.2.2 5 behind 1 medium BSD-2-Clause AND BSD-3-Clause
cryptography
pypi
Direct 46.0.5 48.0.0 4 behind 1 medium Apache-2.0 AND BSD-3-Clause
pip
pypi
Direct 26.0.1 26.1.2 3 behind 2 medium MIT
jinja2
pypi
Direct 3.1.4 3.1.6 2 behind 3 medium BSD-2-Clause AND BSD-3-Clause
pygments
pypi
Direct 2.19.2 2.20.0 1 behind 1 low BSD-2-Clause
commander
npm
Transitive 2.20.3 15.0.0 55 behind MIT
mdn-data
npm
Transitive 2.0.28 2.28.1 48 behind CC0-1.0
pydantic
pypi
Direct 2.9.2 2.13.4 48 behind MIT
pydantic-core
pypi
Direct 2.23.4 2.47.0 46 behind MIT
selenium
pypi
Direct 4.25.0 4.44.0 24 behind Apache-2.0
cryptography
pypi
Direct 43.0.3 48.0.0 22 behind BSD-3-Clause OR Apache-2.0
uvicorn
pypi
Direct 0.32.0 0.49.0 22 behind BSD-2-Clause AND BSD-3-Clause
google-auth
pypi
Direct 2.49.0 3.0.0.dev0 19 behind Apache-2.0
mdn-data
npm
Transitive 2.12.2 2.28.1 19 behind CC0-1.0
wrapt
pypi
Direct 2.1.2 2.2.1 17 behind BSD-2-Clause
sqlalchemy
pypi
Direct 2.0.36 2.0.50 16 behind MIT
commander
npm
Transitive 10.0.1 15.0.0 15 behind MIT
emoji-regex
npm
Transitive 8.0.0 10.6.0 14 behind MIT
certifi
pypi
Direct 2024.8.30 2026.5.20 13 behind MPL-2.0
chardet
pypi
Direct 5.2.0 7.4.3 13 behind LGPL-2.1-or-later
commander
npm
Transitive 11.1.0 15.0.0 13 behind MIT
string-width
npm
Transitive 4.2.3 8.2.1 13 behind MIT
greenlet
pypi
Direct 3.1.1 3.5.1 12 behind MIT AND PSF-2.0
node-releases
npm
Transitive 2.0.21 2.0.47 12 behind MIT
platformdirs
pypi
Direct 4.4.0 4.10.0 12 behind MIT
pymdown-extensions
pypi
Direct 10.16.1 10.21.3 11 behind BSD-3-Clause AND LicenseRef-scancode-unknown-license-reference AND MIT
yargs
npm
Transitive 17.7.2 18.0.0 11 behind MIT
click
pypi
Direct 8.1.7 8.4.1 10 behind BSD-3-Clause
pydantic
pypi
Direct 2.12.5 2.13.4 10 behind MIT
ansi-styles
npm
Transitive 4.3.0 6.2.3 9 behind MIT
picomatch
npm
Transitive 2.3.1 4.0.4 9 behind MIT
protobuf
pypi
Direct 6.33.5 7.35.0 9 behind BSD-3-Clause AND LicenseRef-scancode-protobuf
pydantic-core
pypi
Direct 2.41.5 2.47.0 9 behind MIT
typing-extensions
pypi
Direct 4.12.2 4.15.0 9 behind Python-2.0.1
watchfiles
pypi
Direct 0.24.0 1.2.0 9 behind MIT
anyio
pypi
Direct 4.6.2.post1 4.13.0 8 behind MIT
charset-normalizer
pypi
Direct 3.3.2 3.4.7 8 behind LGPL-2.1-only AND MIT AND MPL-1.1
nanoid
npm
Transitive 3.3.11 5.1.11 8 behind MIT
source-map
npm
Transitive 0.6.1 0.7.6 8 behind BSD-3-Clause
terser
npm
Transitive 5.44.0 5.48.0 8 behind BSD-2-Clause
uvicorn
pypi
Direct 0.41.0 0.49.0 8 behind BSD-3-Clause
charset-normalizer
pypi
Direct 3.4.0 3.4.7 7 behind MIT
css-tree
npm
Transitive 2.2.1 3.2.1 7 behind MIT
pathspec
pypi
Direct 0.12.1 1.1.1 7 behind MPL-2.0
readdirp
npm
Transitive 3.6.0 5.0.0 7 behind MIT
setuptools
pypi
Direct 80.9.0 82.0.1 7 behind MIT
attrs
pypi
Direct 24.2.0 26.1.0 6 behind MIT
certifi
pypi
Direct 2025.8.3 2026.5.20 6 behind MPL-2.0
entities
npm
Transitive 4.5.0 8.0.0 6 behind BSD-2-Clause
fastapi
pypi
Direct 0.135.1 0.136.3 6 behind MIT
kubernetes
pypi
Direct 35.0.0 36.0.2 6 behind Apache-2.0
pify
npm
Transitive 2.3.0 6.1.0 6 behind MIT
postcss-minify-selectors
npm
Transitive 7.0.5 8.0.1 6 behind MIT
starlette
pypi
Direct 0.52.1 1.2.1 6 behind BSD-3-Clause
trio
pypi
Direct 0.27.0 0.33.0 6 behind Apache-2.0 OR (Apache-2.0 AND MIT)
wrap-ansi
npm
Transitive 7.0.0 10.0.0 6 behind MIT
ansi-regex
npm
Transitive 5.0.1 6.2.2 5 behind MIT
browserslist
npm
Transitive 4.26.2 4.28.2 5 behind MIT
build
pypi
Direct 1.4.0 1.5.0 5 behind Unknown
cffi
pypi
Direct 1.16.0 2.0.0 5 behind MIT
chokidar
npm
Transitive 3.6.0 5.0.0 5 behind MIT
click
pypi
Direct 8.3.0 8.4.1 5 behind BSD-3-Clause
color-convert
npm
Transitive 2.0.1 3.1.3 5 behind MIT
httptools
pypi
Direct 0.6.1 0.8.0 5 behind MIT
httpx
pypi
Direct 0.27.2 1.0.0.dev3 5 behind BSD-2-Clause AND BSD-3-Clause
postcss-minify-gradients
npm
Transitive 7.0.1 8.0.0 5 behind MIT
pyparsing
pypi
Direct 3.2.5 3.3.2 5 behind MIT AND Python-2.0
sax
npm
Transitive 1.4.1 1.6.0 5 behind ISC AND MIT
update-browserslist-db
npm
Transitive 1.1.3 1.2.3 5 behind MIT
charset-normalizer
pypi
Direct 3.4.3 3.4.7 4 behind MIT
click
pypi
Direct 8.3.1 8.4.1 4 behind BSD-3-Clause
google-api-core
pypi
Direct 2.30.0 2.31.0 4 behind Apache-2.0
markupsafe
pypi
Direct 2.1.5 3.0.3 4 behind BSD-2-Clause AND BSD-3-Clause
postcss-svgo
npm
Transitive 7.1.0 8.0.0 4 behind MIT
postcss-unique-selectors
npm
Transitive 7.0.4 8.0.0 4 behind MIT
redis
pypi
Direct 7.3.0 8.0.0 4 behind MIT
regex
pypi
Direct 2026.2.19 2026.5.9 4 behind CNRI-Python AND Apache-2.0
resolvelib
pypi
Direct 1.0.1 1.2.1 4 behind ISC
s3transfer
pypi
Direct 0.16.0 0.18.0 4 behind Apache-2.0
setuptools
pypi
Direct 80.10.2 82.0.1 4 behind MIT
color-name
npm
Transitive 1.1.4 2.1.0 3 behind MIT
cssnano-utils
npm
Transitive 5.0.1 6.0.0 3 behind MIT
dom-serializer
npm
Transitive 2.0.0 3.1.1 3 behind MIT
domutils
npm
Transitive 3.2.2 4.0.2 3 behind BSD-2-Clause
filelock
pypi
Direct 3.25.2 3.29.1 3 behind MIT
fs-extra
npm
Transitive 11.3.2 11.3.5 3 behind MIT
glob-parent
npm
Transitive 5.1.2 6.0.2 3 behind ISC
googleapis-common-protos
pypi
Direct 1.73.0 1.75.0 3 behind Apache-2.0
greenlet
pypi
Direct 3.3.2 3.5.1 3 behind MIT AND PSF-2.0
gunicorn
pypi
Direct 25.1.0 26.0.0 3 behind MIT AND HPND
hiredis
pypi
Direct 3.3.0 3.4.0 3 behind BSD-3-Clause AND MIT
httpcore
pypi
Direct 1.0.6 1.0.9 3 behind BSD-2-Clause AND BSD-3-Clause
importlib-metadata
pypi
Direct 8.7.0 9.0.0 3 behind Apache-2.0
is-fullwidth-code-point
npm
Transitive 3.0.0 5.1.0 3 behind MIT
postcss-discard-duplicates
npm
Transitive 7.0.2 8.0.0 3 behind MIT
postcss-discard-empty
npm
Transitive 7.0.1 8.0.0 3 behind MIT
postcss-discard-overridden
npm
Transitive 7.0.1 8.0.0 3 behind MIT
postcss-merge-longhand
npm
Transitive 7.0.5 8.0.0 3 behind MIT
postcss-minify-font-values
npm
Transitive 7.0.1 8.0.0 3 behind MIT
postcss-normalize-charset
npm
Transitive 7.0.1 8.0.0 3 behind MIT
postcss-normalize-display-values
npm
Transitive 7.0.1 8.0.0 3 behind MIT
postcss-normalize-positions
npm
Transitive 7.0.1 8.0.0 3 behind MIT
postcss-normalize-repeat-style
npm
Transitive 7.0.1 8.0.0 3 behind MIT
postcss-normalize-string
npm
Transitive 7.0.1 8.0.0 3 behind MIT
postcss-normalize-timing-functions
npm
Transitive 7.0.1 8.0.0 3 behind MIT
postcss-normalize-url
npm
Transitive 7.0.1 8.0.0 3 behind MIT
postcss-normalize-whitespace
npm
Transitive 7.0.1 8.0.0 3 behind MIT
postcss-ordered-values
npm
Transitive 7.0.2 8.0.0 3 behind MIT
postcss-reduce-transforms
npm
Transitive 7.0.1 8.0.0 3 behind MIT
pymysql
pypi
Direct 1.1.1 1.2.0 3 behind MIT
pyopenssl
pypi
Direct 25.3.0 26.2.0 3 behind Apache-2.0
pyyaml
pypi
Direct 6.0.1 6.0.3 3 behind MIT
sqlalchemy
pypi
Direct 2.0.48 2.0.50 3 behind MIT
strip-ansi
npm
Transitive 6.0.1 7.2.0 3 behind MIT
thenby
npm
Transitive 1.3.4 1.4.1 3 behind Apache-2.0
trio-websocket
pypi
Direct 0.11.1 0.12.2 3 behind MIT
wsproto
pypi
Direct 1.2.0 1.3.2 3 behind MIT
async-timeout
pypi
Direct 4.0.3 5.0.1 2 behind Apache-2.0
binary-extensions
npm
Transitive 2.3.0 3.1.0 2 behind MIT
certifi
pypi
Direct 2026.2.25 2026.5.20 2 behind MPL-2.0
cffi
pypi
Direct 1.17.1 2.0.0 2 behind MIT
charset-normalizer
pypi
Direct 3.4.5 3.4.7 2 behind LGPL-2.0-or-later AND LGPL-2.1-only AND LicenseRef-scancode-public-domain AND MIT AND MPL-1.1
cliui
npm
Transitive 8.0.1 9.0.1 2 behind ISC
css-declaration-sorter
npm
Transitive 7.3.0 7.4.0 2 behind ISC
css-select
npm
Transitive 5.2.2 7.0.0 2 behind BSD-2-Clause
css-tree
npm
Transitive 3.1.0 3.2.1 2 behind MIT
css-what
npm
Transitive 6.2.2 8.0.0 2 behind BSD-2-Clause
domhandler
npm
Transitive 5.0.3 6.0.1 2 behind BSD-2-Clause
exceptiongroup
pypi
Direct 1.2.2 1.3.1 2 behind MIT
google-auth-httplib2
pypi
Direct 0.3.0 0.4.0 2 behind Apache-2.0
httptools
pypi
Direct 0.6.4 0.8.0 2 behind MIT
importlib-metadata
pypi
Direct 8.7.1 9.0.0 2 behind Apache-2.0
importlib-resources
pypi
Direct 6.5.2 7.1.0 2 behind Apache-2.0
mkdocs-get-deps
pypi
Direct 0.2.0 0.2.2 2 behind MIT
msgspec
pypi
Direct 0.20.0 0.21.1 2 behind BSD-3-Clause
nth-check
npm
Transitive 2.1.1 3.0.1 2 behind BSD-2-Clause
postcss-load-config
npm
Transitive 5.1.0 6.0.1 2 behind MIT
proto-plus
pypi
Direct 1.27.1 1.28.0 2 behind Apache-2.0
pydantic-settings
pypi
Direct 2.13.1 2.14.1 2 behind MIT
pymysql
pypi
Direct 1.1.2 1.2.0 2 behind MIT
tinycss2
pypi
Direct 1.4.0 1.5.1 2 behind BSD-2-Clause AND BSD-3-Clause
tinyglobby
npm
Transitive 0.2.15 0.2.17 2 behind MIT
typepy
pypi
Direct 1.3.4 2.0.0 2 behind MIT
werkzeug
pypi
Direct 3.1.6 3.1.8 2 behind BSD-3-Clause
zipp
pypi
Direct 3.23.0 4.1.0 2 behind MIT
acorn
npm
Transitive 8.15.0 8.16.0 1 behind MIT
anyio
pypi
Direct 4.12.1 4.13.0 1 behind MIT
attrs
pypi
Direct 25.4.0 26.1.0 1 behind MIT
babel
pypi
Direct 2.17.0 2.18.0 1 behind BSD-3-Clause
bcrypt
pypi
Direct 4.3.0 5.0.0 1 behind Apache-2.0
boolbase
npm
Transitive 1.0.0 2.0.0 1 behind ISC
cachelib
pypi
Direct 0.13.0 0.14.0 1 behind BSD-2-Clause AND BSD-3-Clause
camel-case
npm
Transitive 4.1.2 5.0.0 1 behind MIT
caniuse-api
npm
Transitive 3.0.0 4.0.0 1 behind MIT
cssselect2
pypi
Direct 0.8.0 0.9.0 1 behind BSD-2-Clause AND BSD-3-Clause
dataproperty
pypi
Direct 1.1.0 1.1.1 1 behind MIT
domelementtype
npm
Transitive 2.3.0 3.0.0 1 behind BSD-2-Clause
dot-case
npm
Transitive 3.0.4 4.0.0 1 behind MIT
flask-wtf
pypi
Direct 1.2.2 1.3.0 1 behind BSD-3-Clause AND MIT
httptools
pypi
Direct 0.7.1 0.8.0 1 behind MIT
is-binary-path
npm
Transitive 2.1.0 3.0.0 1 behind MIT
jsonfile
npm
Transitive 6.2.0 6.2.1 1 behind MIT
jsonpickle
pypi
Direct 4.1.1 4.1.2 1 behind BSD-3-Clause
lower-case
npm
Transitive 2.0.2 3.0.0 1 behind MIT
mbstrdecoder
pypi
Direct 1.1.4 1.1.5 1 behind MIT
mkdocs-static-i18n
pypi
Direct 1.3.0 1.3.1 1 behind MIT
no-case
npm
Transitive 3.0.4 4.0.0 1 behind MIT
param-case
npm
Transitive 3.0.4 4.0.0 1 behind MIT
pascal-case
npm
Transitive 3.1.2 4.0.0 1 behind MIT
pillow
pypi
Direct 12.1.1 12.2.0 1 behind LicenseRef-scancode-secret-labs-2011 AND MIT-CMU
postcss-selector-parser
npm
Transitive 7.1.0 7.1.1 1 behind MIT
psycopg
pypi
Direct 3.3.3 3.3.4 1 behind LGPL-3.0 AND LGPL-3.0-only
psycopg-binary
pypi
Direct 3.3.3 3.3.4 1 behind Unknown
psycopg-c
pypi
Direct 3.3.3 3.3.4 1 behind Unknown
psycopg-pool
pypi
Direct 3.3.0 3.3.1 1 behind LGPL-3.0-only
pyyaml
pypi
Direct 6.0.2 6.0.3 1 behind MIT
soupsieve
pypi
Direct 2.8.3 2.8.4 1 behind MIT
tabledata
pypi
Direct 1.3.4 1.3.5 1 behind MIT
tomli
pypi
Direct 2.4.0 2.4.1 1 behind MIT
urllib3
pypi
Direct 2.6.3 2.7.0 1 behind MIT
uvloop
pypi
Direct 0.21.0 0.22.1 1 behind Apache-2.0 AND MIT
watchfiles
pypi
Direct 1.1.1 1.2.0 1 behind MIT
websocket-client
pypi
Direct 1.8.0 1.9.0 1 behind Apache-2.0
wheel
pypi
Direct 0.46.3 0.47.0 1 behind MIT
wtforms
pypi
Direct 3.2.1 3.2.2 1 behind BSD-3-Clause AND MIT
yargs-parser
npm
Transitive 21.1.1 22.0.0 1 behind ISC

License Breakdown

MIT 203
Unknown 80
Apache-2.0 51
BSD-3-Clause 28
BSD-2-Clause AND BSD-3-Clause 23
ISC 14
BSD-2-Clause 11
Apache-2.0 AND MIT 4
MPL-2.0 4
Apache-2.0 OR (Apache-2.0 AND MIT) 3
BSD-3-Clause AND MIT 3
Apache-2.0 AND BSD-2-Clause 2
Apache-2.0 AND BSD-3-Clause 2
BSD-2-Clause AND BSD-3-Clause AND MIT 2
BSD-3-Clause OR Apache-2.0 2
CC0-1.0 2
EPL-1.0 2
LicenseRef-scancode-secret-labs-2011 AND MIT-CMU 2
MIT AND PSF-2.0 2
MIT AND Python-2.0 2
0BSD 1
0BSD AND BSD-3-Clause AND LicenseRef-scancode-other-permissive AND MIT AND Python-2.0 1
Apache-2.0 AND BSD-3-Clause AND LicenseRef-scancode-unknown-license-reference 1
Apache-2.0 AND LicenseRef-scancode-generic-cla 1
Apache-2.0 AND Python-2.0 1
Apache-2.0 OR BSD-3-Clause OR (Apache-2.0 AND BSD-3-Clause) 1
BSD-3-Clause AND LicenseRef-scancode-protobuf 1
BSD-3-Clause AND LicenseRef-scancode-unknown-license-reference AND MIT 1
CC-BY-4.0 1
CC0-1.0 AND MIT 1
CC0-1.0 AND Unlicense 1
CNRI-Python AND Apache-2.0 1
GPL-2.0-only 1
GPL-3.0 AND GPL-3.0-only AND GPL-3.0-or-later 1
GPL-3.0 AND GPL-3.0-or-later 1
GPL-3.0-or-later 1
ISC AND MIT 1
ISC AND MPL-2.0 1
LGPL-2.0-or-later AND LGPL-2.1-only AND LicenseRef-scancode-public-domain AND MIT AND MPL-1.1 1
LGPL-2.0-or-later AND LGPL-3.0 AND LGPL-3.0-only AND LGPL-3.0-or-later 1
LGPL-2.1-only AND MIT AND MPL-1.1 1
LGPL-2.1-or-later 1
LGPL-3.0 1
LGPL-3.0 AND LGPL-3.0-only 1
LGPL-3.0 AND LGPL-3.0-only AND LGPL-3.0-or-later 1
LGPL-3.0-only 1
LGPL-3.0-only AND LGPL-3.0-only AND LGPL-3.0-only 1
LGPL-3.0-only AND LGPL-3.0-or-later 1
MIT AND HPND 1
MIT AND Python-2.0 AND Python-2.0.1 AND MIT AND Python-2.0 AND Python-2.0.1 1
MIT AND ZPL-2.1 1
MIT-0 1
PSF-2.0 1
Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD 1
Python-2.0.1 1

CVE Severity

critical 1
high 13
medium 10
low 1
unknown 0

Beta — feedback welcome: [email protected]