Jellystat

Direct and transitive dependency freshness, license, and CVE exposure from the latest SBOM.

Security Export CSV

47% Freshness

1670 Dependencies

765 Outdated

0 Stale

25.5 Avg Behind

Dependency List

Latest release 1.1.10

All 1669 Outdated 941 Has CVE 36 GPL 1

Dependency	Type	Current	Latest	Behind	CVE	License
node-forge npm	Transitive	1.3.3	1.4.0	1 behind	4 high	BSD-3-Clause OR GPL-2.0-only

License Breakdown

MIT 1381

ISC 82

CC0-1.0 43

Apache-2.0 37

BSD-2-Clause 37

BSD-3-Clause 32

Apache-2.0 AND MIT 9

CC0-1.0 AND MIT 9

Unknown 7

ISC AND MIT 4

0BSD 2

Apache-2.0 AND BSD-2-Clause 2

BSD-2-Clause AND BSD-3-Clause 2

LicenseRef-scancode-public-domain AND Unlicense 2

LicenseRef-scancode-unicode AND MIT 2

(MIT AND OFL-1.1) 1

AFL-2.1 AND AFL-3.0 AND BSD-3-Clause 1

Apache-2.0 AND BSD-2-Clause AND CC0-1.0 AND ISC AND MIT 1

Apache-2.0 AND LicenseRef-scancode-unknown-license-reference 1

Apache-2.0 OR MPL-1.1 OR (Apache-2.0 AND MPL-1.1) 1

BSD-2-Clause AND BSD-2-Clause-Views 1

BSD-3-Clause AND BSD-3-Clause-Clear 1

BSD-3-Clause OR GPL-2.0-only 1

CC-BY-3.0 AND MIT 1

CC-BY-4.0 1

CC-BY-SA-4.0 AND ISC 1

ISC OR WTFPL OR (ISC AND WTFPL) 1

LicenseRef-scancode-free-unknown AND MIT 1

MIT OR (CC0-1.0 AND MIT) 1

MIT OR WTFPL OR (MIT AND WTFPL) 1

MPL-2.0 1

Python-2.0 1

WTFPL 1

CVE Severity

critical 0

high 22

medium 13

low 1

unknown 0