Skip to content
Tools / chronoframe / Dependencies

Dependency Analysis

chronoframe

Direct and transitive dependency freshness, license, and CVE exposure from the latest SBOM.

60% Freshness
1847 Dependencies
499 Outdated
0 Stale
6.8 Avg Behind

Dependency List

Latest release v0.14.1

Dependency Type Current Latest Behind CVE License
simple-git
npm
Transitive 3.28.0 2 critical MIT
h3
npm
Transitive 1.15.4 2.0.1-rc.22 34 behind 5 high MIT
minimatch
npm
Transitive 10.0.3 10.2.5 32 behind 3 high ISC
tar
npm
Transitive 7.5.1 7.5.16 15 behind 7 high ISC
glob
npm
Transitive 10.4.5 13.0.6 13 behind 1 high ISC
axios
npm
Transitive 1.15.0 1.17.0 8 behind 13 high MIT
simple-git
npm
Transitive 3.33.0 3.36.0 5 behind 1 high MIT
defu
npm
Transitive 6.1.4 6.1.7 3 behind 1 high MIT
lodash
npm
Transitive 4.17.21 4.18.1 3 behind 3 high CC0-1.0 AND MIT
picomatch
npm
Transitive 4.0.3 4.0.4 3 behind 2 high MIT
@isaacs/brace-expansion
npm
Transitive 5.0.0 5.0.1 1 behind 1 high MIT
esbuild
npm
Transitive 0.18.20 0.28.0 50 behind 1 medium MIT
brace-expansion
npm
Transitive 2.0.2 5.0.6 11 behind 1 medium MIT
ajv
npm
Transitive 8.12.0 8.20.0 9 behind 1 medium MIT
postcss
npm
Transitive 8.5.8 8.5.15 7 behind 1 medium MIT
follow-redirects
npm
Transitive 1.15.11 1.16.0 1 behind 1 medium MIT
mdast-util-to-hast
npm
Transitive 13.2.0 13.2.1 1 behind 1 medium MIT
protocol-buffers-schema
npm
Transitive 3.6.0 3.6.1 1 behind 1 medium MIT
nuxt-og-image
npm
Direct 5.1.13 3 medium MIT
diff
npm
Transitive 8.0.2 9.0.0 8 behind 1 low BSD-3-Clause

License Breakdown

MIT 1439
Apache-2.0 154
ISC 76
MPL-2.0 39
BSD-3-Clause 25
BSD-2-Clause 24
Unknown 22
BlueOak-1.0.0 12
BSD-2-Clause AND LGPL-2.0-only AND LGPL-2.1-only AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-scancode-other-permissive AND MIT AND MPL-2.0 10
CC0-1.0 6
Apache-2.0 AND BSD-2-Clause AND LGPL-2.0-only AND LGPL-2.1-only AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-scancode-other-permissive AND MIT AND MPL-2.0 3
CC0-1.0 AND MIT 3
MIT OR (CC0-1.0 AND MIT) 3
BSD-2-Clause AND BSD-3-Clause 2
CC-BY-4.0 2
MIT OR Apache-2.0 2
(MIT OR Apache-2.0) 1
0BSD 1
0BSD AND ISC AND MIT 1
Apache-2.0 AND BSD-3-Clause 1
Apache-2.0 AND BSD-3-Clause AND LicenseRef-scancode-warranty-disclaimer 1
Apache-2.0 AND BSD-3-Clause AND MIT 1
Apache-2.0 AND MIT 1
Apache-2.0 OR (Apache-2.0 AND LGPL-3.0-only) 1
Apache-2.0 OR BSD-2-Clause OR MIT OR (Apache-2.0 AND BSD-2-Clause) OR (Apache-2.0 AND MIT) OR (BSD-2-Clause AND MIT) 1
BSD-2-Clause AND BSD-2-Clause-Views 1
BSD-2-Clause AND CC0-1.0 AND ISC AND MIT 1
BSD-3-Clause AND LicenseRef-scancode-generic-cla AND MIT 1
BSD-3-Clause AND MIT 1
BSD-3-Clause OR GPL-2.0-only 1
CC-BY-3.0 1
ISC AND MIT 1
LGPL-3.0 AND LGPL-3.0-only 1
LicenseRef-scancode-unknown-license-reference AND MIT 1
LicenseRef-scancode-unknown-license-reference AND Zlib 1
MIT AND MITNFA 1
MIT AND Ruby 1
MIT OR (MIT AND WTFPL) 1
Python-2.0 1
Unlicense 1

CVE Severity

critical 1
high 10
medium 8
low 1
unknown 0

Beta — feedback welcome: [email protected]