OpnForm

Direct and transitive dependency freshness, license, and CVE exposure from the latest SBOM.

Security Export CSV

53% Freshness

1662 Dependencies

663 Outdated

0 Stale

16.8 Avg Behind

Dependency List

Latest release v1.13.2

All 1661 Outdated 800 Has CVE 47 GPL 3

Dependency	Type	Current	Latest	Behind	CVE	License
node-forge npm	Transitive	1.3.1	1.4.0	3 behind	7 high	BSD-3-Clause OR GPL-2.0 OR (BSD-3-Clause AND GPL-2.0)
@opentelemetry/api npm	Transitive	1.9.0	1.9.1	1 behind	—	Apache-2.0 OR (Apache-2.0 AND LGPL-3.0-only)
enshrined/svg-sanitize composer	Direct	0.22.0	—	—	—	GPL-2.0-only AND GPL-2.0-or-later

License Breakdown

MIT 1218

Unknown 170

Apache-2.0 75

ISC 65

BSD-3-Clause 47

BSD-2-Clause 26

MPL-2.0 12

BlueOak-1.0.0 5

Apache-2.0 AND MIT 4

CC0-1.0 4

CC0-1.0 AND MIT 4

ISC AND MIT 4

0BSD 2

BSD-2-Clause AND BSD-3-Clause 2

BSD-3-Clause AND ISC AND MIT 2

BSD-3-Clause AND MIT 2

CC-BY-4.0 2

0BSD AND ISC AND MIT 1

0BSD AND MIT 1

Apache-2.0 AND BSD-2-Clause AND CC0-1.0 AND ISC AND MIT 1

Apache-2.0 AND BSD-3-Clause AND MIT 1

Apache-2.0 OR (Apache-2.0 AND LGPL-3.0-only) 1

Apache-2.0 OR MIT OR (Apache-2.0 AND MIT) 1

Apache-2.0 OR Unlicense OR (Apache-2.0 AND Unlicense) 1

BSD-2-Clause AND BSD-2-Clause-Views 1

BSD-3-Clause OR GPL-2.0 OR (BSD-3-Clause AND GPL-2.0) 1

BlueOak-1.0.0 AND ISC AND MIT 1

CC-BY-3.0 1

CC-BY-SA-4.0 AND ISC 1

GPL-2.0-only AND GPL-2.0-or-later 1

JSON AND MIT 1

LicenseRef-scancode-unknown-license-reference AND Zlib 1

MIT-0 1

Python-2.0 1

CVE Severity

critical 4

high 19

medium 18

low 6

unknown 0