JuiceFS

Direct and transitive dependency freshness, license, and CVE exposure from the latest SBOM.

Security Export CSV

71% Freshness

984 Dependencies

229 Outdated

0 Stale

6.2 Avg Behind

Dependency List

Latest release v1.4.0-beta1

All 983 Outdated 288 Has CVE 26 GPL 4

Dependency	Type	Current	Latest	Behind	CVE	License
com.sun.jersey:jersey-bundle maven	Direct	1.19.3	—	—	—	CDDL-1.1 OR GPL-2.0-only WITH Classpath-exception-2.0
github.com/cloudsoda/sddl golang	Direct	v0.0.0-20250224235906-926454e91efc	—	—	—	LGPL-3.0 AND LGPL-3.0-only
github.com/rasky/go-xdr golang	Direct	v0.0.0-20170124162913-1a41d1a06c93	—	—	—	ISC AND LGPL-2.0-or-later
org.javassist:javassist maven	Direct	3.25.0-GA	—	—	—	Apache-2.0 AND LGPL-2.1 AND LGPL-2.1-only AND MPL-1.1

License Breakdown

MIT 594

Apache-2.0 132

ISC 56

Unknown 54

BSD-3-Clause 40

BSD-2-Clause 30

BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang 13

MPL-2.0 13

Apache-2.0 AND BSD-3-Clause 9

BSD-3-Clause AND MIT 5

CC0-1.0 4

LicenseRef-scancode-generic-cla AND MIT 4

BlueOak-1.0.0 3

Apache-2.0 AND BSD-3-Clause AND MIT 2

Apache-2.0 AND MIT 2

BSD-2-Clause AND BSD-3-Clause 2

ISC AND MIT 2

0BSD 1

Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT 1

Apache-2.0 AND FSFAP-no-warranty-disclaimer AND LicenseRef-scancode-public-domain-disclaimer AND MIT 1

Apache-2.0 AND LGPL-2.1 AND LGPL-2.1-only AND MPL-1.1 1

BSD-2-Clause AND BSD-2-Clause-Views 1

BSD-2-Clause AND MIT 1

CC-BY-3.0 1

CC-BY-4.0 1

CC-BY-SA-4.0 AND ISC 1

CC0-1.0 AND MIT 1

CC0-1.0 OR MIT OR (CC0-1.0 AND MIT) 1

CDDL-1.1 OR GPL-2.0-only WITH Classpath-exception-2.0 1

EPL-1.0 1

EPL-2.0 1

ISC AND LGPL-2.0-or-later 1

JSON 1

LGPL-3.0 AND LGPL-3.0-only 1

Python-2.0 1

CVE Severity

critical 2

high 13

medium 7

low 3

unknown 1