Tools / logto / Dependencies

Dependency Analysis

logto

Direct and transitive dependency freshness, license, and CVE exposure from the latest SBOM.

Security Export CSV

69% Freshness

4010 Dependencies

1034 Outdated

0 Stale

31.7 Avg Behind

Dependency List

Latest release v1.39.0

All 4009 Outdated 1264 Has CVE 0 GPL 3

Dependency	Type	Current	Latest	Behind	CVE	License
breakword npm	Transitive	1.0.5	—	—	—	GPL-2.0
node-forge npm	Transitive	1.4.0	1.4.0	Current	—	BSD-3-Clause OR GPL-2.0-only
ua-parser-js npm	Direct	2.0.3	—	—	—	AGPL-3.0-only AND AGPL-3.0-or-later AND LicenseRef-scancode-agpl-2.0 AND LicenseRef-scancode-proprietary-license

License Breakdown

MIT 2203

Unknown 1279

Apache-2.0 188

ISC 130

BSD-3-Clause 79

BSD-2-Clause 27

Apache-2.0 AND MIT 17

BlueOak-1.0.0 12

CC0-1.0 AND MIT 11

MPL-2.0 11

CC0-1.0 5

ISC AND MIT 5

Elastic-2.0 4

MIT OR (CC0-1.0 AND MIT) 4

CC0-1.0 OR MIT OR (CC0-1.0 AND MIT) 3

LicenseRef-scancode-generic-cla AND MIT 3

0BSD 2

Apache-2.0 AND BSD-2-Clause 2

MIT-0 2

(MPL-2.0 OR Apache-2.0) 1

0BSD AND ISC AND MIT 1

0BSD AND MIT 1

AGPL-3.0-only AND AGPL-3.0-or-later AND LicenseRef-scancode-agpl-2.0 AND LicenseRef-scancode-proprietary-license 1

Apache-2.0 AND BSD-2-Clause AND CC0-1.0 AND ISC AND MIT 1

Apache-2.0 AND CC-BY-3.0 AND CC-BY-4.0 AND CC-BY-SA-3.0 AND CC0-1.0 AND ISC AND LicenseRef-scancode-unknown-license-reference AND MIT AND MPL-2.0 AND OFL-1.1 1

Apache-2.0 AND ISC 1

Apache-2.0 AND Unlicense 1

Apache-2.0 OR MPL-1.1 OR (Apache-2.0 AND MPL-1.1) 1

BSD-2-Clause AND BSD-2-Clause-Views 1

BSD-2-Clause AND BSD-3-Clause 1

BSD-3-Clause AND ISC AND MIT 1

BSD-3-Clause AND MIT 1

BSD-3-Clause OR GPL-2.0-only 1

CC-BY-3.0 1

CC-BY-4.0 1

EPL-2.0 1

GPL-2.0 1

MIT AND MIT-0 1

MIT AND Zlib 1

Python-2.0 1

Unlicense 1

CVE Severity

critical 0

high 0

medium 0

low 0

unknown 0