Dependency Analysis
immich-kiosk
Direct and transitive dependency freshness, license, and CVE exposure from the latest SBOM.
100%
Freshness
122
Dependencies
0
Outdated
0
Stale
—
Avg Behind
Dependency List
Latest release v0.38.0
| Dependency | Type | Current | Latest | Behind | CVE | License |
|---|---|---|---|---|---|---|
|
github.com/gohugoio/hugo
golang
|
Transitive | v0.152.2 | — | — | 2 medium | Unknown |
|
github.com/disintegration/imaging
golang
|
Direct | v1.6.2 | — | — | 1 low | MIT |
|
@biomejs/biome
npm
|
Direct | ^2.4.13 | — | — | — | Unknown |
|
actions/checkout
githubactions
|
Direct | 4.*.* | — | — | — | Unknown |
|
actions/checkout
githubactions
|
Direct | 2.*.* | — | — | — | Unknown |
|
actions/github-script
githubactions
|
Direct | 6.*.* | — | — | — | Unknown |
|
actions/setup-go
githubactions
|
Direct | 6.*.* | — | — | — | Unknown |
|
actions/setup-python
githubactions
|
Direct | 2.*.* | — | — | — | Unknown |
|
actions/upload-artifact
githubactions
|
Direct | 4.*.* | — | — | — | Unknown |
|
autoprefixer
npm
|
Direct | ^10.5.0 | — | — | — | Unknown |
|
bruceadams/get-release
githubactions
|
Direct | 1.3.2 | — | — | — | Unknown |
|
charm.land/lipgloss/v2
golang
|
Direct | v2.0.3 | — | — | — | Unknown |
|
charm.land/log/v2
golang
|
Direct | v2.0.0 | — | — | — | Unknown |
|
choices.js
npm
|
Direct | ^11.2.3 | — | — | — | Unknown |
|
dario.cat/mergo
golang
|
Transitive | v1.0.2 | — | — | — | BSD-3-Clause |
|
date-fns
npm
|
Direct | ^4.1.0 | 4.4.0 | — | — | Unknown |
|
docker/login-action
githubactions
|
Direct | 3.*.* | — | — | — | Unknown |
|
docker/setup-buildx-action
githubactions
|
Direct | 3.*.* | — | — | — | Unknown |
|
dompurify
npm
|
Direct | ^3.4.1 | 3.4.8 | — | — | Unknown |
|
esbuild
npm
|
Direct | ^0.28.0 | — | — | — | Unknown |
|
github.com/a-h/parse
golang
|
Transitive | v0.0.0-20250122154542-74294addb73e | — | — | — | MIT |
|
github.com/a-h/templ
golang
|
Direct | v0.3.1001 | — | — | — | Unknown |
|
github.com/air-verse/air
golang
|
Direct | v1.63.1 | — | — | — | GPL-1.0-or-later AND GPL-3.0 AND GPL-3.0-only |
|
github.com/andybalholm/brotli
golang
|
Transitive | v1.2.0 | — | — | — | MIT |
|
github.com/apapsch/go-jsonmerge/v2
golang
|
Transitive | v2.0.0 | — | — | — | MIT |
|
github.com/bep/godartsass/v2
golang
|
Transitive | v2.5.0 | — | — | — | MIT |
|
github.com/bep/golibsass
golang
|
Transitive | v1.2.0 | — | — | — | MIT |
|
github.com/cenkalti/backoff/v4
golang
|
Transitive | v4.3.0 | — | — | — | MIT |
|
github.com/charmbracelet/colorprofile
golang
|
Transitive | v0.4.3 | — | — | — | Unknown |
|
github.com/charmbracelet/ultraviolet
golang
|
Transitive | v0.0.0-20251205161215-1948445e3318 | — | — | — | MIT |
|
github.com/charmbracelet/x/ansi
golang
|
Transitive | v0.11.7 | — | — | — | Unknown |
|
github.com/charmbracelet/x/term
golang
|
Transitive | v0.2.2 | — | — | — | MIT |
|
github.com/charmbracelet/x/termios
golang
|
Transitive | v0.1.1 | — | — | — | MIT |
|
github.com/charmbracelet/x/windows
golang
|
Transitive | v0.2.2 | — | — | — | MIT |
|
github.com/cli/browser
golang
|
Transitive | v1.3.0 | — | — | — | BSD-2-Clause |
|
github.com/clipperhouse/displaywidth
golang
|
Transitive | v0.11.0 | — | — | — | MIT |
|
github.com/clipperhouse/uax29/v2
golang
|
Transitive | v2.7.0 | — | — | — | MIT |
|
github.com/davecgh/go-spew
golang
|
Transitive | v1.1.1 | — | — | — | ISC |
|
github.com/dprotaso/go-yit
golang
|
Transitive | v0.0.0-20250513224043-18a80f8f6df4 | — | — | — | MIT |
|
github.com/dustin/go-humanize
golang
|
Direct | v1.0.1 | — | — | — | MIT |
|
github.com/edlinorg/prominentcolor
golang
|
Direct | v1.0.0 | — | — | — | Unknown |
|
github.com/fatih/color
golang
|
Transitive | v1.18.0 | — | — | — | MIT |
|
github.com/fogleman/gg
golang
|
Direct | v1.3.0 | — | — | — | MIT |
|
github.com/fsnotify/fsnotify
golang
|
Transitive | v1.9.0 | — | — | — | BSD-3-Clause |
|
github.com/getkin/kin-openapi
golang
|
Transitive | v0.133.0 | — | — | — | MIT |
|
github.com/go-logfmt/logfmt
golang
|
Transitive | v0.6.1 | — | — | — | MIT |
|
github.com/go-openapi/jsonpointer
golang
|
Transitive | v0.22.2 | — | — | — | Apache-2.0 |
|
github.com/go-openapi/swag/jsonname
golang
|
Transitive | v0.25.1 | — | — | — | Apache-2.0 |
|
github.com/go-viper/mapstructure/v2
golang
|
Transitive | v2.4.0 | — | — | — | MIT |
|
github.com/gobwas/glob
golang
|
Transitive | v0.2.3 | — | — | — | MIT |
|
github.com/golang/freetype
golang
|
Direct | v0.0.0-20170609003504-e2365dfdc4a0 | — | — | — | FTL OR GPL-2.0-or-later |
|
github.com/goodsign/monday
golang
|
Direct | v1.0.2 | — | — | — | BSD-2-Clause |
|
github.com/google/go-querystring
golang
|
Direct | v1.2.0 | — | — | — | BSD-3-Clause |
|
github.com/google/uuid
golang
|
Direct | v1.6.0 | — | — | — | BSD-3-Clause |
|
github.com/josharian/intern
golang
|
Transitive | v1.0.0 | — | — | — | MIT |
|
github.com/klauspost/compress
golang
|
Direct | v1.18.5 | — | — | — | Apache-2.0 AND BSD-3-Clause AND MIT |
|
github.com/labstack/echo/v5
golang
|
Direct | v5.1.0 | — | — | — | Unknown |
|
github.com/lucasb-eyer/go-colorful
golang
|
Transitive | v1.4.0 | — | — | — | Unknown |
|
github.com/mailru/easyjson
golang
|
Transitive | v0.9.1 | — | — | — | MIT |
|
github.com/mattn/go-colorable
golang
|
Transitive | v0.1.14 | — | — | — | MIT |
|
github.com/mattn/go-isatty
golang
|
Transitive | v0.0.20 | — | — | — | MIT |
|
github.com/mattn/go-runewidth
golang
|
Transitive | v0.0.23 | — | — | — | Unknown |
|
github.com/mcuadros/go-defaults
golang
|
Direct | v1.2.0 | — | — | — | MIT |
|
github.com/mohae/deepcopy
golang
|
Transitive | v0.0.0-20170929034955-c48cc78d4826 | — | — | — | MIT |
|
github.com/muesli/cancelreader
golang
|
Transitive | v0.2.2 | — | — | — | MIT |
|
github.com/natefinch/atomic
golang
|
Transitive | v1.0.1 | — | — | — | MIT |
|
github.com/nfnt/resize
golang
|
Transitive | v0.0.0-20180221191011-83c6a9932646 | — | — | — | ISC |
|
github.com/nicksnyder/go-i18n/v2
golang
|
Direct | v2.6.1 | — | — | — | MIT |
|
github.com/oapi-codegen/oapi-codegen/v2
golang
|
Direct | v2.5.1 | — | — | — | Apache-2.0 |
|
github.com/oapi-codegen/runtime
golang
|
Direct | v1.4.0 | — | — | — | Unknown |
|
github.com/oasdiff/yaml
golang
|
Transitive | v0.0.0-20250309154309-f31be36b4037 | — | — | — | BSD-3-Clause AND MIT |
|
github.com/oasdiff/yaml3
golang
|
Transitive | v0.0.0-20250309153720-d2182401db90 | — | — | — | Apache-2.0 AND MIT |
|
github.com/oliamb/cutter
golang
|
Direct | v0.2.2 | — | — | — | MIT |
|
github.com/patrickmn/go-cache
golang
|
Direct | v2.1.0+incompatible | — | — | — | MIT |
|
github.com/pelletier/go-toml
golang
|
Transitive | v1.9.5 | — | — | — | Apache-2.0 AND MIT |
|
github.com/pelletier/go-toml/v2
golang
|
Direct | v2.3.0 | — | — | — | Unknown |
|
github.com/perimeterx/marshmallow
golang
|
Transitive | v1.1.5 | — | — | — | MIT |
|
github.com/pmezard/go-difflib
golang
|
Transitive | v1.0.0 | — | — | — | BSD-3-Clause |
|
github.com/rivo/uniseg
golang
|
Transitive | v0.4.7 | — | — | — | MIT |
|
github.com/sagikazarmark/locafero
golang
|
Transitive | v0.12.0 | — | — | — | MIT |
|
github.com/skip2/go-qrcode
golang
|
Direct | v0.0.0-20200617195104-da1b6568686e | — | — | — | MIT |
|
github.com/speakeasy-api/jsonpath
golang
|
Transitive | v0.6.2 | — | — | — | Apache-2.0 |
|
github.com/speakeasy-api/openapi-overlay
golang
|
Transitive | v0.10.3 | — | — | — | MIT |
|
github.com/spf13/afero
golang
|
Transitive | v1.15.0 | — | — | — | Apache-2.0 |
|
github.com/spf13/cast
golang
|
Transitive | v1.10.0 | — | — | — | MIT |
|
github.com/spf13/pflag
golang
|
Transitive | v1.0.10 | — | — | — | BSD-3-Clause |
|
github.com/spf13/viper
golang
|
Direct | v1.21.0 | — | — | — | MIT |
|
github.com/stretchr/testify
golang
|
Direct | v1.11.1 | — | — | — | MIT |
|
github.com/subosito/gotenv
golang
|
Transitive | v1.6.0 | — | — | — | MIT |
|
github.com/tdewolff/parse/v2
golang
|
Transitive | v2.8.5 | — | — | — | Unknown |
|
github.com/vmihailenco/msgpack/v5
golang
|
Direct | v5.4.1 | — | — | — | BSD-2-Clause |
|
github.com/vmihailenco/tagparser/v2
golang
|
Transitive | v2.0.0 | — | — | — | BSD-2-Clause |
|
github.com/vmware-labs/yaml-jsonpath
golang
|
Transitive | v0.3.2 | — | — | — | Apache-2.0 |
|
github.com/woodsbury/decimal128
golang
|
Transitive | v1.4.0 | — | — | — | 0BSD |
|
github.com/xeipuuv/gojsonpointer
golang
|
Transitive | v0.0.0-20190905194746-02993c407bfb | — | — | — | Apache-2.0 |
|
github.com/xeipuuv/gojsonreference
golang
|
Transitive | v0.0.0-20180127040603-bd5ef7bd5415 | — | — | — | Apache-2.0 |
|
github.com/xeipuuv/gojsonschema
golang
|
Direct | v1.2.0 | — | — | — | Apache-2.0 |
|
github.com/xo/terminfo
golang
|
Transitive | v0.0.0-20220910002029-abceb7e1c41e | — | — | — | MIT |
|
github/codeql-action/analyze
githubactions
|
Direct | 3.*.* | — | — | — | Unknown |
|
github/codeql-action/init
githubactions
|
Direct | 3.*.* | — | — | — | Unknown |
|
go.yaml.in/yaml/v3
golang
|
Direct | v3.0.4 | — | — | — | Apache-2.0 AND MIT |
|
golang.org/x/exp
golang
|
Transitive | v0.0.0-20251113190631-e25ba8c21ef6 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/image
golang
|
Direct | v0.39.0 | — | — | — | Unknown |
|
golang.org/x/mod
golang
|
Transitive | v0.34.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/net
golang
|
Transitive | v0.52.0 | — | — | 1 unknown | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/sync
golang
|
Direct | v0.20.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/sys
golang
|
Transitive | v0.43.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/text
golang
|
Direct | v0.36.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/time
golang
|
Direct | v0.15.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/tools
golang
|
Transitive | v0.43.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
google.golang.org/protobuf
golang
|
Transitive | v1.36.10 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
gopkg.in/yaml.v2
golang
|
Transitive | v2.4.0 | — | — | — | Apache-2.0 |
|
gopkg.in/yaml.v3
golang
|
Transitive | v3.0.1 | — | — | — | Apache-2.0 |
|
goreleaser/goreleaser-action
githubactions
|
Direct | 6.*.* | — | — | — | Unknown |
|
htmx.org
npm
|
Direct | ^2.0.10 | — | — | — | Unknown |
|
Ilshidur/action-discord
githubactions
|
Direct | master | — | — | — | Unknown |
|
oven-sh/setup-bun
githubactions
|
Direct | 2.*.* | — | — | — | Unknown |
|
postcss
npm
|
Direct | ^8.5.12 | — | — | — | Unknown |
|
postcss-cli
npm
|
Direct | ^11.0.1 | — | — | — | Unknown |
|
postcss-nested
npm
|
Direct | ^7.0.2 | — | — | — | Unknown |
|
typescript
npm
|
Direct | ^5.9.3 | 6.0.3 | — | — | Unknown |
License Breakdown
MIT
42
Unknown
39
Apache-2.0
11
BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang
9
BSD-3-Clause
6
BSD-2-Clause
4
Apache-2.0 AND MIT
3
ISC
2
0BSD
1
Apache-2.0 AND BSD-3-Clause AND MIT
1
BSD-3-Clause AND MIT
1
FTL OR GPL-2.0-or-later
1
GPL-1.0-or-later AND GPL-3.0 AND GPL-3.0-only
1
CVE Severity
critical
0
high
0
medium
1
low
1
unknown
1