Skip to content
Tools / Maintainerr / Dependencies

Dependency Analysis

Maintainerr

Direct and transitive dependency freshness, license, and CVE exposure from the latest SBOM.

53% Freshness
2306 Dependencies
859 Outdated
0 Stale
8.1 Avg Behind

Dependency List

Latest release v3.10.1

Dependency Type Current Latest Behind CVE License
minimatch
npm
Transitive 9.0.5 10.2.5 36 behind 1 high ISC
undici
npm
Transitive 6.22.0 8.3.0 32 behind 6 high MIT
minimatch
npm
Transitive 10.2.2 10.2.5 25 behind 2 high BlueOak-1.0.0
nodemailer
npm
Transitive 6.10.1 8.0.10 24 behind 2 high MIT AND MIT-0
tar
npm
Transitive 7.5.2 7.5.16 14 behind 6 high BlueOak-1.0.0
glob
npm
Transitive 11.0.3 13.0.6 10 behind 1 high ISC
lodash-es
npm
Transitive 4.17.21 4.18.1 4 behind 3 high CC0-1.0 AND MIT
picomatch
npm
Transitive 4.0.2 4.0.4 4 behind 2 high MIT
fast-uri
npm
Transitive 3.0.6 3.1.2 3 behind 2 high BSD-3-Clause
lodash
npm
Transitive 4.17.21 4.18.1 3 behind 3 high CC0-1.0 AND MIT
ip
npm
Transitive 2.0.1 2.0.1 Current 1 high MIT
yaml
npm
Transitive 1.10.2 2.9.0 49 behind 1 medium ISC
dompurify
npm
Transitive 3.2.7 3.4.8 14 behind 8 medium Apache-2.0 OR MPL-2.0
nodemailer
npm
Transitive 7.0.13 8.0.10 11 behind 2 medium MIT AND MIT-0
brace-expansion
npm
Transitive 5.0.3 5.0.6 8 behind 1 medium MIT
postcss
npm
Transitive 8.5.8 8.5.15 7 behind 1 medium MIT
ip-address
npm
Transitive 9.0.5 10.2.0 6 behind 1 medium MIT
ajv
npm
Transitive 8.17.1 8.20.0 4 behind 1 medium MIT
uuid
npm
Transitive 11.1.0 14.0.0 3 behind 1 medium MIT
brace-expansion
npm
Transitive 2.0.1 5.0.6 16 behind 1 low MIT
tmp
npm
Transitive 0.0.33 0.2.7 9 behind 1 low MIT
diff
npm
Transitive 8.0.2 9.0.0 8 behind 1 low BSD-3-Clause

License Breakdown

MIT 1703
ISC 180
Unknown 153
Apache-2.0 83
BSD-2-Clause 37
BSD-3-Clause 36
BlueOak-1.0.0 15
CC0-1.0 AND MIT 13
MPL-2.0 13
BSD-2-Clause AND LGPL-2.0-only AND LGPL-2.1-only AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-scancode-other-permissive AND MIT AND MPL-2.0 10
BSD-2-Clause AND BSD-3-Clause 6
Apache-2.0 AND MIT 5
ISC AND MIT 5
MIT AND MIT-0 5
Apache-2.0 AND BSD-2-Clause AND LGPL-2.0-only AND LGPL-2.1-only AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-scancode-other-permissive AND MIT AND MPL-2.0 3
CC-BY-4.0 3
MIT-0 3
0BSD 2
BSD-3-Clause AND LicenseRef-scancode-generic-cla AND MIT 2
CC0-1.0 2
CC0-1.0 OR MIT OR (CC0-1.0 AND MIT) 2
(MIT OR EUPL-1.1+) 1
Apache-2.0 AND BSD-2-Clause 1
Apache-2.0 AND BSD-2-Clause AND CC0-1.0 AND ISC AND MIT 1
Apache-2.0 AND BSD-3-Clause AND MIT AND MPL-2.0 1
Apache-2.0 OR BSD-2-Clause OR MIT OR (Apache-2.0 AND BSD-2-Clause) OR (Apache-2.0 AND MIT) OR (BSD-2-Clause AND MIT) 1
Apache-2.0 OR MPL-2.0 1
Artistic-2.0 AND LicenseRef-scancode-unknown-license-reference 1
BSD-2-Clause AND BSD-2-Clause-Views 1
BSD-2-Clause AND BSD-3-Clause AND JSON 1
BSD-3-Clause AND ISC AND MIT 1
BSD-3-Clause AND MIT 1
CC-BY-3.0 1
CC-BY-SA-4.0 AND ISC 1
FTL AND MIT 1
LGPL-3.0+ 1
LicenseRef-scancode-free-unknown AND MIT 1
LicenseRef-scancode-public-domain AND Unlicense 1
LicenseRef-scancode-unknown-license-reference AND MIT 1
MIT AND MITNFA 1
MIT OR (CC0-1.0 AND MIT) 1
MIT OR (MIT AND WTFPL) 1
Python-2.0 1
Unicode-DFS-2016 1
Unlicense 1

CVE Severity

critical 0
high 11
medium 8
low 3
unknown 0

Beta — feedback welcome: [email protected]