kimai

Direct and transitive dependency freshness, license, and CVE exposure from the latest SBOM.

Security Export CSV

65% Freshness

746 Dependencies

203 Outdated

0 Stale

3.6 Avg Behind

Dependency List

Latest release 2.56.0

All 745 Outdated 338 Has CVE 16 GPL 1

Dependency	Type	Current	Latest	Behind	CVE	License
dompurify npm	Direct	3.3.3	3.4.8	9 behind	4 medium	(Apache-2.0 AND GPL-1.0-only AND MPL-2.0 AND MS-PL) OR (Apache-2.0 AND GPL-1.0-only AND MPL-2.0) OR (Apache-2.0 AND GPL-2.0-only AND MPL-2.0 AND MS-PL) OR (Apache-2.0 AND GPL-2.0-only AND MPL-2.0)

License Breakdown

MIT 451

Unknown 150

ISC 40

BSD-3-Clause 33

BSD-2-Clause 24

Apache-2.0 20

BlueOak-1.0.0 8

CC-BY-3.0 AND MIT 2

CC0-1.0 2

CC0-1.0 AND MIT 2

LicenseRef-scancode-unicode AND MIT 2

(Apache-2.0 AND GPL-1.0-only AND MPL-2.0 AND MS-PL) OR (Apache-2.0 AND GPL-1.0-only AND MPL-2.0) OR (Apache-2.0 AND GPL-2.0-only AND MPL-2.0 AND MS-PL) OR (Apache-2.0 AND GPL-2.0-only AND MPL-2.0) 1

0BSD 1

Apache-2.0 AND BSD-3-Clause AND MIT 1

BSD-2-Clause AND BSD-2-Clause-Views 1

CC-BY-4.0 1

CC-BY-4.0 AND MIT AND OFL-1.1 1

ISC AND MIT 1

MIT AND MIT-0 1

MIT AND Zlib 1

MPL-2.0 1

Python-2.0 1

CVE Severity

critical 0

high 11

medium 5

low 0

unknown 0