Skip to content
Tools / nanote / Dependencies

Dependency Analysis

nanote

Direct and transitive dependency freshness, license, and CVE exposure from the latest SBOM.

56% Freshness
1426 Dependencies
520 Outdated
0 Stale
8.3 Avg Behind

Dependency List

Latest release 0.11.0

Dependency Type Current Latest Behind CVE License
node-forge
npm
Transitive 1.3.1 1.4.0 3 behind 7 high BSD-3-Clause OR GPL-2.0 OR (BSD-3-Clause AND GPL-2.0)

License Breakdown

MIT 1242
Apache-2.0 49
ISC 48
BSD-2-Clause 21
BSD-3-Clause 13
MPL-2.0 12
BlueOak-1.0.0 5
CC0-1.0 4
CC0-1.0 AND MIT 4
Unknown 4
Apache-2.0 AND MIT 3
BSD-3-Clause AND ISC AND MIT 2
ISC AND MIT 2
JSON AND MIT 2
0BSD 1
0BSD AND ISC AND MIT 1
Apache-2.0 OR MIT OR (Apache-2.0 AND MIT) 1
Apache-2.0 OR MPL-2.0 1
BSD-2-Clause AND BSD-2-Clause-Views 1
BSD-2-Clause AND BSD-3-Clause 1
BSD-2-Clause AND CC0-1.0 AND ISC AND MIT 1
BSD-3-Clause AND MIT 1
BSD-3-Clause OR GPL-2.0 OR (BSD-3-Clause AND GPL-2.0) 1
BlueOak-1.0.0 AND ISC AND MIT 1
CC-BY-3.0 1
CC-BY-4.0 1
LicenseRef-scancode-unknown-license-reference AND Zlib 1
Python-2.0 1

CVE Severity

critical 2
high 19
medium 12
low 1
unknown 0

Beta — feedback welcome: [email protected]