configarr

Direct and transitive dependency freshness, license, and CVE exposure from the latest SBOM.

Security Export CSV

43% Freshness

1842 Dependencies

839 Outdated

0 Stale

8.2 Avg Behind

Dependency List

Latest release v1.28.0

All 1841 Outdated 1076 Has CVE 36 GPL 2

Dependency	Type	Current	Latest	Behind	CVE	License
node-forge npm	Transitive	1.3.1	1.4.0	3 behind	7 high	BSD-3-Clause OR GPL-2.0 OR (BSD-3-Clause AND GPL-2.0)
dompurify npm	Transitive	3.3.3	3.4.8	9 behind	4 medium	(Apache-2.0 AND GPL-1.0-only AND MPL-2.0 AND MS-PL) OR (Apache-2.0 AND GPL-1.0-only AND MPL-2.0) OR (Apache-2.0 AND GPL-2.0-only AND MPL-2.0 AND MS-PL) OR (Apache-2.0 AND GPL-2.0-only AND MPL-2.0)

License Breakdown

MIT 1504

ISC 109

MIT-0 55

Apache-2.0 38

BSD-3-Clause 37

BSD-2-Clause 29

Unknown 20

CC0-1.0 AND MIT 8

BSD-2-Clause AND BSD-3-Clause 3

CC0-1.0 3

ISC AND MIT 3

0BSD 2

Apache-2.0 AND MIT 2

BSD-3-Clause AND ISC AND MIT 2

CC0-1.0 OR MIT OR (CC0-1.0 AND MIT) 2

MIT OR Apache-2.0 2

Python-2.0 2

(Apache-2.0 AND GPL-1.0-only AND MPL-2.0 AND MS-PL) OR (Apache-2.0 AND GPL-1.0-only AND MPL-2.0) OR (Apache-2.0 AND GPL-2.0-only AND MPL-2.0 AND MS-PL) OR (Apache-2.0 AND GPL-2.0-only AND MPL-2.0) 1

(MPL-2.0 OR Apache-2.0) 1

0BSD AND ISC AND MIT 1

Apache-2.0 AND ISC 1

Apache-2.0 OR BSD-2-Clause OR MIT OR (Apache-2.0 AND BSD-2-Clause) OR (Apache-2.0 AND MIT) OR (BSD-2-Clause AND MIT) 1

BSD-2-Clause AND BSD-2-Clause-Views 1

BSD-2-Clause AND BSD-3-Clause AND JSON 1

BSD-2-Clause AND CC0-1.0 AND ISC AND MIT 1

BSD-3-Clause AND LicenseRef-scancode-generic-cla AND MIT 1

BSD-3-Clause AND MIT 1

BSD-3-Clause OR GPL-2.0 OR (BSD-3-Clause AND GPL-2.0) 1

BlueOak-1.0.0 AND ISC AND MIT 1

CC-BY-3.0 1

CC-BY-4.0 1

LicenseRef-scancode-free-unknown AND MPL-1.1 1

MIT AND OSL-3.0 1

MIT AND WTFPL 1

MIT OR (CC0-1.0 AND MIT) 1

MIT OR WTFPL OR (MIT AND WTFPL) 1

Unlicense 1

CVE Severity

critical 2

high 17

medium 15

low 2

unknown 0