Skip to content
Tools / colanode / Dependencies

Dependency Analysis

colanode

Direct and transitive dependency freshness, license, and CVE exposure from the latest SBOM.

62% Freshness
2428 Dependencies
744 Outdated
0 Stale
9.1 Avg Behind

Dependency List

Latest release v0.4.7

Dependency Type Current Latest Behind CVE License
protobufjs
npm
Transitive 7.5.4 8.5.0 20 behind 1 critical BSD-3-Clause AND LicenseRef-scancode-protobuf
vite
npm
Transitive 7.3.1 8.0.16 33 behind 3 high BSD-2-Clause AND CC0-1.0 AND ISC AND MIT
tar
npm
Transitive 6.2.1 7.5.16 27 behind 6 high ISC
fast-xml-builder
npm
Transitive 1.1.4 1.2.0 6 behind 1 high MIT
serialize-javascript
npm
Transitive 6.0.2 7.0.5 6 behind 2 high BSD-3-Clause
@xmldom/xmldom
npm
Transitive 0.8.12 0.9.10 3 behind 4 high MIT
fast-uri
npm
Transitive 3.1.0 3.1.2 2 behind 2 high BSD-3-Clause
fastify
npm
Transitive 5.8.4 1 high MIT
postcss
npm
Transitive 8.4.49 8.5.15 16 behind 1 medium MIT
fast-xml-parser
npm
Transitive 5.5.8 5.8.0 12 behind 1 medium MIT
nodemailer
npm
Transitive 8.0.4 8.0.10 6 behind 1 medium MIT-0
uuid
npm
Transitive 11.1.0 14.0.0 3 behind 1 medium MIT
ip-address
npm
Transitive 10.1.0 10.2.0 2 behind 1 medium MIT
srvx
npm
Transitive 0.8.16 1 medium MIT
tmp
npm
Transitive 0.0.33 0.2.7 9 behind 1 low MIT
@tootallnate/once
npm
Transitive 2.0.0 3.0.1 2 behind 1 low MIT

License Breakdown

MIT 1714
Unknown 232
Apache-2.0 177
ISC 104
BSD-3-Clause 45
BSD-2-Clause 38
MPL-2.0 25
BlueOak-1.0.0 17
BSD-2-Clause AND LGPL-2.0-only AND LGPL-2.1-only AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-scancode-other-permissive AND MIT AND MPL-2.0 10
CC0-1.0 AND MIT 10
CC0-1.0 6
ISC AND MIT 4
MIT OR (CC0-1.0 AND MIT) 4
Apache-2.0 AND BSD-2-Clause AND LGPL-2.0-only AND LGPL-2.1-only AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-scancode-other-permissive AND MIT AND MPL-2.0 3
MIT-0 3
Unlicense 3
0BSD 2
Apache-2.0 AND BSD-2-Clause 2
Apache-2.0 AND MIT 2
BSD-2-Clause AND BSD-3-Clause 2
LicenseRef-scancode-unicode AND MIT 2
LicenseRef-scancode-unknown-license-reference AND MIT 2
0BSD AND ISC AND MIT 1
Apache-2.0 OR BSD-2-Clause OR MIT OR (Apache-2.0 AND BSD-2-Clause) OR (Apache-2.0 AND MIT) OR (BSD-2-Clause AND MIT) 1
BSD-2-Clause AND BSD-2-Clause-Views 1
BSD-2-Clause AND CC0-1.0 AND ISC AND MIT 1
BSD-3-Clause AND ISC 1
BSD-3-Clause AND ISC AND MIT 1
BSD-3-Clause AND LicenseRef-scancode-generic-cla AND MIT 1
BSD-3-Clause AND LicenseRef-scancode-protobuf 1
BSD-3-Clause AND MIT 1
BSD-3-Clause OR GPL-2.0-only 1
CC-BY-3.0 1
CC-BY-4.0 1
LicenseRef-scancode-dco-1.1 AND MIT 1
LicenseRef-scancode-public-domain AND Unlicense 1
MIT AND MIT-0 1
MIT AND MITNFA 1
MIT AND Ruby 1
MIT OR (MIT AND WTFPL) 1
MIT OR GPL-2.0-or-later 1
Python-2.0 1

CVE Severity

critical 1
high 7
medium 6
low 2
unknown 0

Beta — feedback welcome: [email protected]