drawio

Direct and transitive dependency freshness, license, and CVE exposure from the latest SBOM.

Security Export CSV

51% Freshness

69 Dependencies

29 Outdated

0 Stale

5.2 Avg Behind

Dependency List

Latest release v29.7.11

All 68 Outdated 35 Has CVE 1 GPL 13

Dependency	Type	Current	Latest	Behind	CVE	License
crypto-js npm	Direct	3.1.2	—	—	1 critical	Unknown

License Breakdown

MIT 31

Apache-2.0 11

BSD-2-Clause AND LGPL-2.0-only AND LGPL-2.1-only AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-scancode-alliance-open-media-patent-1.0 AND LicenseRef-scancode-other-permissive AND MIT AND MPL-2.0 9

ISC 5

Unknown 5

(MPL-2.0 OR Apache-2.0) 1

0BSD 1

Apache-2.0 AND BSD-2-Clause AND LGPL-2.0-only AND LGPL-2.1-only AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-scancode-other-permissive AND MIT AND MPL-2.0 1

Apache-2.0 AND LGPL-3.0-or-later 1

Apache-2.0 AND LGPL-3.0-or-later AND MIT 1

GPL-3.0-only OR MIT 1

MIT AND Zlib 1

CVE Severity

critical 1

high 0

medium 0

low 0

unknown 0