Crystal

Direct and transitive dependency freshness, license, and CVE exposure from the latest SBOM.

Security Export CSV

45% Freshness

1801 Dependencies

841 Outdated

0 Stale

20.2 Avg Behind

Dependency List

Latest release v0.3.5

All 1800 Outdated 1017 Has CVE 52 GPL 6

Dependency	Type	Current	Latest	Behind	CVE	License
@img/sharp-libvips-linux-arm npm	Transitive	1.0.5	1.2.4	21 behind	—	LGPL-3.0-or-later
@img/sharp-libvips-linux-x64 npm	Transitive	1.0.4	1.2.4	21 behind	—	LGPL-3.0-or-later
@img/sharp-libvips-linux-arm64 npm	Transitive	1.0.4	1.2.4	20 behind	—	LGPL-3.0-or-later
@img/sharp-libvips-darwin-arm64 npm	Transitive	1.0.4	1.2.4	19 behind	—	LGPL-3.0-or-later
@img/sharp-libvips-darwin-x64 npm	Transitive	1.0.4	1.2.4	19 behind	—	LGPL-3.0-or-later
@img/sharp-win32-x64 npm	Transitive	0.33.5	0.34.5	15 behind	—	Apache-2.0 AND LGPL-3.0-or-later

License Breakdown

MIT 1403

ISC 178

Apache-2.0 68

BSD-3-Clause 38

Unknown 34

BSD-2-Clause 17

BlueOak-1.0.0 10

ISC AND MIT 6

LGPL-3.0-or-later 5

CC0-1.0 AND MIT 4

Apache-2.0 AND MIT 3

BSD-3-Clause AND ISC AND MIT 3

0BSD 2

0BSD AND ISC AND MIT 2

Apache-2.0 AND BSD-2-Clause AND CC0-1.0 AND ISC AND MIT 2

Apache-2.0 AND ISC 2

Apache-2.0 OR MPL-2.0 2

BSD-2-Clause AND BSD-2-Clause-Views 2

BSD-3-Clause AND LicenseRef-scancode-generic-cla AND MIT 2

BSD-3-Clause AND MIT 2

CC-BY-4.0 2

Python-2.0 2

Unlicense 2

Apache-2.0 AND BSD-2-Clause AND BlueOak-1.0.0 AND CC0-1.0 AND ISC AND MIT 1

Apache-2.0 AND LGPL-3.0-or-later 1

Apache-2.0 OR BSD-2-Clause OR MIT OR (Apache-2.0 AND BSD-2-Clause) OR (Apache-2.0 AND MIT) OR (BSD-2-Clause AND MIT) 1

ISC OR WTFPL OR (ISC AND WTFPL) 1

MIT AND MIT-0 1

MIT OR (CC0-1.0 AND MIT) 1

MIT OR (MIT AND WTFPL) 1

MIT OR WTFPL OR (MIT AND WTFPL) 1

WTFPL 1

CVE Severity

critical 0

high 23

medium 23

low 6

unknown 0