ocis

Direct and transitive dependency freshness, license, and CVE exposure from the latest SBOM.

Security Export CSV

61% Freshness

1916 Dependencies

585 Outdated

0 Stale

42.0 Avg Behind

Dependency List

Latest release v8.0.1

All 1915 Outdated 838 Has CVE 22 GPL 1

Dependency	Type	Current	Latest	Behind	CVE	License
github.com/golang/freetype golang	Direct	0.0.0-20170609003504-e2365dfdc4a0	—	—	—	FTL OR GPL-2.0-or-later

License Breakdown

MIT 1316

Apache-2.0 127

Unknown 119

BSD-3-Clause 79

ISC 72

MIT-0 59

BSD-2-Clause 53

BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang 16

Apache-2.0 AND BSD-3-Clause 9

CC0-1.0 8

Apache-2.0 AND MIT 6

ISC AND MIT 5

MPL-2.0 5

BlueOak-1.0.0 4

CC0-1.0 AND MIT 4

0BSD 3

CC-BY-4.0 3

Apache-2.0 AND BSD-2-Clause 2

Apache-2.0 AND BSD-3-Clause AND MIT 2

BSD-2-Clause AND BSD-3-Clause 2

BSD-3-Clause AND MIT 2

CC-BY-3.0 AND MIT 2

LicenseRef-scancode-public-domain AND Unlicense 2

MIT AND MIT-0 2

AFL-2.1 AND AFL-3.0 AND BSD-3-Clause 1

Apache-2.0 AND LicenseRef-scancode-unknown-license-reference 1

Apache-2.0 AND OFL-1.1 AND Ubuntu-font-1.0 1

Apache-2.0 OR (Apache-2.0 AND MIT) 1

BSD-2-Clause AND BSD-2-Clause-Views 1

BSD-2-Clause AND ISC 1

BSD-2-Clause-Views 1

CC-BY-3.0 1

FTL OR GPL-2.0-or-later 1

LicenseRef-scancode-free-unknown AND MIT 1

LicenseRef-scancode-unicode AND MIT 1

MIT OR (CC0-1.0 AND MIT) 1

Python-2.0 1

CVE Severity

critical 2

high 11

medium 5

low 1

unknown 3