OctoPrint

Direct and transitive dependency freshness, license, and CVE exposure from the latest SBOM.

Security Export CSV

82% Freshness

79 Dependencies

5 Outdated

0 Stale

50.9 Avg Behind

Dependency List

Latest release 1.11.7

All 78 Outdated 6 Has CVE 1 GPL 0

Dependency	Type	Current	Latest	Behind	CVE	License
requests pypi	Direct	2.32.5	2.34.2	6 behind	1 medium	Apache-2.0
playwright npm	Transitive	1.58.1	1.60.0	188 behind	—	Apache-2.0
@playwright/test npm	Direct	1.58.1	1.60.0	187 behind	—	Apache-2.0
playwright-core npm	Transitive	1.58.1	1.60.0	187 behind	—	Apache-2.0
click pypi	Direct	8.1.8	8.4.1	9 behind	—	BSD-2-Clause AND BSD-3-Clause
fsevents npm	Direct	2.3.2	2.3.3	1 behind	—	MIT
-	Direct	—	—	—	—	Unknown
actions/add-to-project githubactions	Direct	244f685bbc3b7adfa8466e08b698b5577571133e	—	—	—	Unknown
actions/cache githubactions	Direct	27d5ce7f107fe9357f9df03efb73ab90386fccae	—	—	—	Unknown
actions/checkout githubactions	Direct	de0fac2e4500dabe0009e67214ff5f5447ce83dd	—	—	—	Unknown
actions/download-artifact githubactions	Direct	3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c	—	—	—	Unknown
actions/github-script githubactions	Direct	3a2844b7e9c422d3c10d287c895573f7108da1b3	—	—	—	Unknown
actions/labeler githubactions	Direct	634933edcd8ababfe52f92936142cc22ac488b1b	—	—	—	Unknown
actions/setup-python githubactions	Direct	a309ff8b426b58ec0e2a45f0f869d46889d02405	—	—	—	Unknown
appdirs	Direct	—	—	—	—	Unknown
argon2-cffi	Direct	>= 25.1.0	—	—	—	Unknown
babel	Direct	>= 2.18,< 2.19	—	—	—	Unknown
blinker	Direct	>= 1.9.0,< 1.10.0	—	—	—	Unknown
cachelib	Direct	>= 0.13.0,< 0.14	—	—	—	Unknown
colorlog	Direct	>= 6.10.1,< 7	—	—	—	Unknown
crypto-js npm	Direct	4.2.0	4.2.0	Current	—	MIT
dessant/lock-threads githubactions	Direct	7266a7ce5c1df01b1c6db85bf8cd86c737dadbe7	—	—	—	Unknown
docker/build-push-action githubactions	Direct	bcafcacb16a39f128d818304e6c9c0c18556b85f	—	—	—	Unknown
docker/setup-buildx-action githubactions	Direct	4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd	—	—	—	Unknown
docker/setup-qemu-action githubactions	Direct	ce360397dd3f832beb865e1373c09c0e9f86d70a	—	—	—	Unknown
emoji	Direct	>= 2.15.0,< 3	—	—	—	Unknown
feedparser	Direct	>= 6.0.12,< 7	—	—	—	Unknown
filetype	Direct	>= 1.2.0,< 2	—	—	—	Unknown
flask	Direct	>= 3.1.3,< 3.2	—	—	—	Unknown
flask-assets	Direct	>= 2.1.0,< 3	—	—	—	Unknown
flask-babel	Direct	>= 4.0.0,< 5	—	—	—	Unknown
flask-limiter pypi	Direct	3.11.0	—	—	—	MIT
flask-login	Direct	>= 0.6.3,< 0.7	—	—	—	Unknown
frozendict	Direct	>= 2.4.7,< 3	—	—	—	Unknown
future	Direct	—	—	—	—	Unknown
gcode-thumbnail-tool	Direct	>= 0.1.2	—	—	—	Unknown
html-sanitizer	Direct	>= 2.6.0	—	—	—	Unknown
ifaddr	Direct	>= 0.2.0,< 0.3	—	—	—	Unknown
Ilshidur/action-discord githubactions	Direct	d2594079a10f1d6739ee50a2471f0ca57418b554	—	—	—	Unknown
libpass	Direct	>= 1.9.3,< 2	—	—	—	Unknown
limits pypi	Direct	4.2	—	—	—	MIT
markdown pypi	Direct	3.9	3.10.2	—	—	BSD-3-Clause
markupsafe	Direct	<= 3.0.2	—	—	—	Unknown
netaddr	Direct	>= 1.3.0,< 1.4	—	—	—	Unknown
octoprint-filecheck	Direct	>= 2025.7.23	—	—	—	Unknown
octoprint-firmwarecheck	Direct	>= 2025.7.23	—	—	—	Unknown
octoprint-pisupport	Direct	>= 2025.7.23	—	—	—	Unknown
octoprint-plugin-tool	Direct	—	—	—	—	Unknown
OctoPrint/actions/build-dist githubactions	Direct	main	—	—	—	Unknown
OctoPrint/actions/close-by-query githubactions	Direct	main	—	—	—	Unknown
OctoPrint/actions/e2e githubactions	Direct	main	—	—	—	Unknown
OctoPrint/actions/pr-validation githubactions	Direct	main	—	—	—	Unknown
OctoPrint/actions/process-systeminfo-bundles githubactions	Direct	main	—	—	—	Unknown
packaging pypi	Direct	24.2	26.2.0	—	—	Apache-2.0 AND BSD-2-Clause
pathvalidate	Direct	>= 3.3.1,< 4	—	—	—	Unknown
peter-evans/repository-dispatch githubactions	Direct	28959ce8df70de7be546dd1250a005dd32156697	—	—	—	Unknown
psutil	Direct	>= 7.2.2,< 8	—	—	—	Unknown
pydantic	Direct	>= 2.13.0,< 3	—	—	—	Unknown
pylru	Direct	>= 1.3.1,< 2	—	—	—	Unknown
pypa/gh-action-pypi-publish githubactions	Direct	cef221092ed1bacb1cc03d23a2d87d1d172e277b	—	—	—	Unknown
pyserial	Direct	>= 3.5,< 4	—	—	—	Unknown
pytz	Direct	—	—	—	—	Unknown
pyyaml	Direct	>= 6.0.3,< 7	—	—	—	Unknown
regex	Direct	—	—	—	—	Unknown
robotology/gh-action-nightly-merge githubactions	Direct	81570ba03dd370f582bd3f52d47672d29191829f	—	—	—	Unknown
sarge pypi	Direct	0.1.8	—	—	—	Unknown
semantic-version	Direct	>= 2.10.0,< 3	—	—	—	Unknown
sentry-sdk	Direct	>= 2.58.0,< 3	—	—	—	Unknown
setuptools	Direct	—	—	—	—	Unknown
tornado	Direct	>= 6.5.5,< 6.6	—	—	—	Unknown
unidecode	Direct	—	—	—	—	Unknown
watchdog	Direct	>= 6,< 7	—	—	—	Unknown
websocket-client	Direct	>= 1.9.0,< 1.10	—	—	—	Unknown
werkzeug	Direct	>= 3.1.8,< 3.2	—	—	—	Unknown
wheel	Direct	—	—	—	—	Unknown
wrapt	Direct	>= 2.1.2,< 2.2	—	—	—	Unknown
zeroconf pypi	Direct	0.148	—	—	—	Unknown
zipstream-ng	Direct	>= 1.9.0,< 2.0.0	—	—	—	Unknown

License Breakdown

Unknown 67

Apache-2.0 4

MIT 4

Apache-2.0 AND BSD-2-Clause 1

BSD-2-Clause AND BSD-3-Clause 1

BSD-3-Clause 1

CVE Severity

critical 0

high 0

medium 1

low 0

unknown 0