Skip to content
Tools / kanba / Dependencies

Dependency Analysis

kanba

Direct and transitive dependency freshness, license, and CVE exposure from the latest SBOM.

56% Freshness
565 Dependencies
208 Outdated
0 Stale
63.9 Avg Behind

Dependency List

Latest release 1.0.8

Dependency Type Current Latest Behind CVE License
next
npm
Direct 13.5.1 18 critical MIT
minimatch
npm
Transitive 9.0.3 10.2.5 38 behind 3 high ISC
glob
npm
Transitive 10.4.5 13.0.6 13 behind 1 high ISC
flatted
npm
Transitive 3.3.3 3.4.2 4 behind 2 high ISC
picomatch
npm
Transitive 4.0.2 4.0.4 4 behind 2 high MIT
lodash
npm
Transitive 4.17.21 4.18.1 3 behind 3 high CC0-1.0 AND MIT
zod
npm
Transitive 3.21.4 4.4.3 605 behind 1 medium MIT
ajv
npm
Transitive 6.12.6 8.20.0 67 behind 1 medium MIT
postcss
npm
Transitive 8.4.14 8.5.15 51 behind 2 medium MIT
qs
npm
Transitive 6.14.0 6.15.2 33 behind 2 medium BSD-3-Clause
brace-expansion
npm
Transitive 1.1.12 5.0.6 10 behind 1 medium MIT
yaml
npm
Transitive 2.8.0 2.9.0 8 behind 1 medium ISC
js-yaml
npm
Transitive 4.1.0 4.2.0 3 behind 1 medium MIT

License Breakdown

MIT 470
ISC 40
Apache-2.0 18
BSD-2-Clause 10
BSD-3-Clause 6
BlueOak-1.0.0 3
Apache-2.0 AND BSD-2-Clause 2
Apache-2.0 AND MIT 2
CC0-1.0 AND MIT 2
ISC AND MIT 2
MPL-2.0 2
0BSD 1
BSD-2-Clause AND BSD-2-Clause-Views 1
CC-BY-4.0 1
CC-BY-SA-4.0 AND ISC 1
CC0-1.0 1
Python-2.0 1
Unknown 1

CVE Severity

critical 1
high 5
medium 7
low 0
unknown 0

Beta — feedback welcome: [email protected]