Dependency Analysis
grocy
Direct and transitive dependency freshness, license, and CVE exposure from the latest SBOM.
93%
Freshness
108
Dependencies
7
Outdated
0
Stale
6.5
Avg Behind
Dependency List
Latest release v4.6.0
| Dependency | Type | Current | Latest | Behind | CVE | License |
|---|---|---|---|---|---|---|
|
chart.js
npm
|
Direct | 2.9.4 | 4.5.1 | 66 behind | — | MIT |
|
bootstrap
npm
|
Direct | 4.6.2 | 5.3.8 | 16 behind | — | CC-BY-3.0 AND MIT |
|
color-convert
npm
|
Transitive | 1.9.3 | 3.1.3 | 7 behind | — | MIT |
|
jquery
npm
|
Direct | 3.7.1 | 4.0.0 | 5 behind | — | MIT |
|
color-name
npm
|
Transitive | 1.1.3 | 2.1.0 | 4 behind | — | MIT |
|
color-name
npm
|
Transitive | 1.1.4 | 2.1.0 | 3 behind | — | MIT |
|
moment-timezone
npm
|
Transitive | 0.5.48 | 0.6.2 | 3 behind | — | MIT |
|
@fontsource/roboto
npm
|
Direct | 5.2.10 | 5.2.10 | Current | — | OFL-1.1 |
|
@fortawesome/fontawesome-free
npm
|
Direct | 6.7.2 | — | — | — | CC-BY-4.0 AND MIT AND OFL-1.1 |
|
@scarf/scarf
npm
|
Transitive | 1.4.0 | 1.4.0 | Current | — | Apache-2.0 |
|
@zxing/library
npm
|
Direct | 0.21.3 | — | — | — | Apache-2.0 AND MIT |
|
@zxing/text-encoding
npm
|
Transitive | 0.9.0 | 0.9.0 | Current | — | Apache-2.0 OR Unlicense OR (Apache-2.0 AND Unlicense) |
|
animate.css
npm
|
Direct | 3.7.2 | — | — | — | MIT |
|
bootbox
npm
|
Direct | 6.0.4 | — | — | — | MIT |
|
bootstrap-select
npm
|
Direct | 1.13.18 | — | — | — | MIT |
|
brick/math
composer
|
Direct | 0.14.8 | — | — | — | Unknown |
|
bwip-js
npm
|
Direct | 4.9.0 | — | — | — | MIT |
|
carbonphp/carbon-doctrine-types
composer
|
Direct | 3.2.0 | — | — | — | MIT |
|
chartjs-color
npm
|
Transitive | 2.4.1 | 2.4.1 | Current | — | MIT |
|
chartjs-color-string
npm
|
Transitive | 0.6.0 | 0.6.0 | Current | — | MIT |
|
chartjs-plugin-colorschemes
npm
|
Direct | 0.4.0 | — | — | — | MIT |
|
chartjs-plugin-doughnutlabel
npm
|
Direct | 2.0.3 | — | — | — | ISC |
|
chartjs-plugin-piechart-outlabels
npm
|
Direct | 0.1.4 | — | — | — | MIT |
|
chartjs-plugin-trendline
npm
|
Direct | 2.1.9 | — | — | — | MIT |
|
datatables.net
npm
|
Transitive | 1.13.11 | — | — | — | MIT |
|
datatables.net
npm
|
Transitive | 2.3.7 | — | — | — | MIT |
|
datatables.net-bs4
npm
|
Direct | 1.13.11 | — | — | — | MIT |
|
datatables.net-bs4
npm
|
Transitive | 2.3.7 | — | — | — | MIT |
|
datatables.net-colreorder
npm
|
Direct | 1.7.2 | — | — | — | MIT |
|
datatables.net-colreorder-bs4
npm
|
Direct | 1.7.2 | — | — | — | MIT |
|
datatables.net-rowgroup
npm
|
Direct | 1.5.2 | — | — | — | MIT |
|
datatables.net-rowgroup
npm
|
Transitive | 1.6.0 | — | — | — | MIT |
|
datatables.net-rowgroup-bs4
npm
|
Direct | 1.6.0 | — | — | — | MIT |
|
datatables.net-select
npm
|
Transitive | 1.7.1 | — | — | — | MIT |
|
datatables.net-select-bs4
npm
|
Direct | 1.7.1 | — | — | — | MIT |
|
daterangepicker
npm
|
Direct | 3.1.0 | — | — | — | MIT |
|
doctrine/inflector
composer
|
Direct | 2.1.0 | — | — | — | MIT |
|
eluceo/ical
composer
|
Direct | 2.16.0 | — | — | — | Unknown |
|
erusev/parsedown
composer
|
Direct | 1.8.0 | — | — | — | Unknown |
|
ezyang/htmlpurifier
composer
|
Direct | 4.19.0 | — | — | — | Unknown |
|
fig/http-message-util
composer
|
Direct | 1.1.5 | — | — | — | MIT |
|
fullcalendar
npm
|
Direct | 3.10.5 | — | — | — | MIT |
|
gettext-translator
npm
|
Direct | 3.0.1 | — | — | — | MIT |
|
gettext/gettext
|
Direct | — | — | — | — | Unknown |
|
gettext/languages
composer
|
Direct | 2.12.2 | — | — | — | Unknown |
|
gumlet/php-image-resize
composer
|
Direct | 2.1.3 | — | — | — | Unknown |
|
guzzlehttp/guzzle
composer
|
Direct | 7.10.0 | — | — | — | MIT |
|
guzzlehttp/promises
composer
|
Direct | 2.3.0 | — | — | — | MIT |
|
guzzlehttp/psr7
composer
|
Direct | 2.9.0 | — | — | — | Unknown |
|
illuminate/bus
composer
|
Direct | 12.56.0 | — | — | — | Unknown |
|
illuminate/collections
composer
|
Direct | 12.56.0 | — | — | — | Unknown |
|
illuminate/conditionable
composer
|
Direct | 12.56.0 | — | — | — | Unknown |
|
illuminate/container
composer
|
Direct | 12.56.0 | — | — | — | Unknown |
|
illuminate/contracts
composer
|
Direct | 12.56.0 | — | — | — | Unknown |
|
illuminate/events
composer
|
Direct | 12.56.0 | — | — | — | Unknown |
|
illuminate/filesystem
composer
|
Direct | 12.56.0 | — | — | — | Unknown |
|
illuminate/macroable
composer
|
Direct | 12.56.0 | — | — | — | Unknown |
|
illuminate/pipeline
composer
|
Direct | 12.56.0 | — | — | — | Unknown |
|
illuminate/reflection
composer
|
Direct | 12.56.0 | — | — | — | Unknown |
|
illuminate/support
composer
|
Direct | 12.56.0 | — | — | — | Unknown |
|
illuminate/view
composer
|
Direct | 12.56.0 | — | — | — | Unknown |
|
interficieis/php-barcode
composer
|
Direct | 2.0.2 | — | — | — | Unknown |
|
jquery
npm
|
Transitive | 4.0.0 | 4.0.0 | Current | — | MIT |
|
jquery-serializejson
npm
|
Direct | 2.9.0 | — | — | — | MIT |
|
laravel/serializable-closure
composer
|
Direct | 2.0.10 | — | — | — | Unknown |
|
mike42/escpos-php
composer
|
Direct | 4.0 | — | — | — | Unknown |
|
mike42/gfx-php
composer
|
Direct | 0.6 | — | — | — | LGPL-2.1-or-later |
|
moment
npm
|
Direct | 2.30.1 | 2.30.1 | Current | — | MIT |
|
morris/lessql
|
Direct | — | — | — | — | Unknown |
|
nesbot/carbon
composer
|
Direct | 3.11.3 | — | — | — | Unknown |
|
nikic/fast-route
composer
|
Direct | 1.3.0 | — | — | — | BSD-3-Clause |
|
nosleep.js
npm
|
Direct | 0.12.0 | — | — | — | MIT |
|
php-di/invoker
composer
|
Direct | 2.3.7 | — | — | — | Unknown |
|
php-di/php-di
composer
|
Direct | 7.1.1 | — | — | — | Unknown |
|
popper.js
npm
|
Transitive | 1.16.1 | 1.16.1 | Current | — | MIT |
|
psr/clock
composer
|
Direct | 1.0.0 | — | — | — | MIT |
|
psr/container
composer
|
Direct | 2.0.2 | — | — | — | MIT |
|
psr/http-client
composer
|
Direct | 1.0.3 | — | — | — | MIT |
|
psr/http-factory
composer
|
Direct | 1.1.0 | — | — | — | MIT |
|
psr/http-message
composer
|
Direct | 2.0 | — | — | — | MIT |
|
psr/http-server-handler
composer
|
Direct | 1.0.2 | — | — | — | MIT |
|
psr/http-server-middleware
composer
|
Direct | 1.0.2 | — | — | — | MIT |
|
psr/log
composer
|
Direct | 3.0.2 | — | — | — | MIT |
|
psr/simple-cache
composer
|
Direct | 3.0.0 | — | — | — | MIT |
|
ralouphie/getallheaders
composer
|
Direct | 3.0.3 | — | — | — | MIT |
|
ramsey/collection
composer
|
Direct | 2.1.1 | — | — | — | MIT |
|
ramsey/uuid
composer
|
Direct | 4.9.2 | — | — | — | Unknown |
|
slim/http
composer
|
Direct | 1.4.0 | — | — | — | Unknown |
|
slim/psr7
composer
|
Direct | 1.8.0 | — | — | — | Unknown |
|
slim/slim
composer
|
Direct | 4.15.1 | — | — | — | Unknown |
|
sprintf-js
npm
|
Direct | 1.1.3 | 1.1.3 | Current | — | BSD-3-Clause |
|
summernote
npm
|
Direct | 0.9.1 | — | — | — | MIT |
|
swagger-ui-dist
npm
|
Direct | 5.32.1 | — | — | — | Apache-2.0 |
|
symfony/clock
composer
|
Direct | 8.0.8 | — | — | — | Unknown |
|
symfony/deprecation-contracts
composer
|
Direct | 3.6.0 | — | — | — | Unknown |
|
symfony/finder
composer
|
Direct | 7.4.8 | — | — | — | Unknown |
|
symfony/polyfill-mbstring
composer
|
Direct | 1.33.0 | — | — | — | Unknown |
|
symfony/polyfill-php83
composer
|
Direct | 1.33.0 | — | — | — | Unknown |
|
symfony/polyfill-php84
composer
|
Direct | 1.33.0 | — | — | — | Unknown |
|
symfony/polyfill-php85
composer
|
Direct | 1.33.0 | — | — | — | Unknown |
|
symfony/translation
composer
|
Direct | 8.0.8 | — | — | — | Unknown |
|
symfony/translation-contracts
composer
|
Direct | 3.6.1 | — | — | — | Unknown |
|
tempusdominus-bootstrap-4
npm
|
Direct | 5.39.2 | — | — | — | MIT |
|
toastr
npm
|
Direct | 2.1.4 | — | — | — | MIT |
|
ts-custom-error
npm
|
Transitive | 3.3.1 | — | — | — | MIT |
|
voku/portable-ascii
composer
|
Direct | 2.0.3 | — | — | — | MIT |
|
webman/blade
composer
|
Direct | 1.5.7 | — | — | — | Unknown |
License Breakdown
MIT
55
Unknown
41
Apache-2.0
2
BSD-3-Clause
2
Apache-2.0 AND MIT
1
Apache-2.0 OR Unlicense OR (Apache-2.0 AND Unlicense)
1
CC-BY-3.0 AND MIT
1
CC-BY-4.0 AND MIT AND OFL-1.1
1
ISC
1
LGPL-2.1-or-later
1
OFL-1.1
1
CVE Severity
critical
0
high
0
medium
0
low
0
unknown
0