Dependency Analysis
oxker
Direct and transitive dependency freshness, license, and CVE exposure from the latest SBOM.
63%
Freshness
309
Dependencies
72
Outdated
0
Stale
2.2
Avg Behind
Dependency List
Latest release v0.13.1
| Dependency | Type | Current | Latest | Behind | CVE | License |
|---|---|---|---|---|---|---|
|
rand
cargo
|
Direct | 0.8.5 | 0.10.1 | 19 behind | 2 low | MIT OR Apache-2.0 |
|
syn
cargo
|
Direct | 1.0.109 | 2.0.117 | 118 behind | — | MIT OR Apache-2.0 |
|
bitflags
cargo
|
Direct | 1.3.2 | 2.12.1 | 30 behind | — | MIT OR Apache-2.0 |
|
digest
cargo
|
Direct | 0.10.7 | 0.11.3 | 27 behind | — | MIT OR Apache-2.0 |
|
generic-array
cargo
|
Direct | 0.14.7 | 1.4.3 | 21 behind | — | MIT |
|
rand_core
cargo
|
Direct | 0.6.4 | 0.10.1 | 19 behind | — | MIT OR Apache-2.0 |
|
wasi
cargo
|
Direct | 0.11.1+wasi-snapshot-preview1 | 0.7.0 | 19 behind | — | Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT |
|
thiserror
cargo
|
Direct | 1.0.69 | 2.0.18 | 17 behind | — | MIT OR Apache-2.0 |
|
thiserror-impl
cargo
|
Direct | 1.0.69 | 2.0.18 | 17 behind | — | MIT OR Apache-2.0 |
|
block-buffer
cargo
|
Direct | 0.10.4 | 0.12.0 | 13 behind | — | MIT OR Apache-2.0 |
|
crypto-common
cargo
|
Direct | 0.1.7 | 0.2.2 | 13 behind | — | MIT OR Apache-2.0 |
|
tokio
cargo
|
Direct | 1.50.0 | 1.52.3 | 10 behind | — | MIT |
|
wasm-encoder
cargo
|
Direct | 0.244.0 | 0.251.0 | 10 behind | — | Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT |
|
wasm-metadata
cargo
|
Direct | 0.244.0 | 0.251.0 | 10 behind | — | Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT |
|
wasmparser
cargo
|
Direct | 0.244.0 | 0.251.0 | 10 behind | — | Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT |
|
wit-component
cargo
|
Direct | 0.244.0 | 0.251.0 | 10 behind | — | Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT |
|
wit-parser
cargo
|
Direct | 0.244.0 | 0.251.0 | 10 behind | — | Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT |
|
fancy-regex
cargo
|
Direct | 0.11.0 | 0.18.0 | 9 behind | — | MIT |
|
redox_syscall
cargo
|
Direct | 0.5.18 | 0.8.1 | 9 behind | — | MIT |
|
fixedbitset
cargo
|
Direct | 0.4.2 | 0.5.7 | 8 behind | — | MIT OR Apache-2.0 |
|
wasm-bindgen-shared
cargo
|
Direct | 0.2.114 | 0.2.122 | 8 behind | — | MIT OR Apache-2.0 |
|
wit-bindgen
cargo
|
Direct | 0.51.0 | 0.57.1 | 8 behind | — | Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT |
|
wit-bindgen-core
cargo
|
Direct | 0.51.0 | 0.57.1 | 8 behind | — | Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT |
|
wit-bindgen-rust
cargo
|
Direct | 0.51.0 | 0.57.1 | 8 behind | — | Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT |
|
wit-bindgen-rust-macro
cargo
|
Direct | 0.51.0 | 0.57.1 | 8 behind | — | Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT |
|
csscolorparser
cargo
|
Direct | 0.6.2 | 0.8.3 | 7 behind | — | MIT OR Apache-2.0 |
|
js-sys
cargo
|
Direct | 0.3.91 | 0.3.99 | 7 behind | — | MIT OR Apache-2.0 |
|
wasm-bindgen
cargo
|
Direct | 0.2.114 | 0.2.122 | 7 behind | — | MIT OR Apache-2.0 |
|
wasm-bindgen-macro
cargo
|
Direct | 0.2.114 | 0.2.122 | 7 behind | — | MIT OR Apache-2.0 |
|
wasm-bindgen-macro-support
cargo
|
Direct | 0.2.114 | 0.2.122 | 7 behind | — | MIT OR Apache-2.0 |
|
bit-set
cargo
|
Direct | 0.5.3 | 0.10.0 | 6 behind | — | MIT OR Apache-2.0 |
|
getrandom
cargo
|
Direct | 0.3.4 | 0.4.2 | 6 behind | — | MIT OR Apache-2.0 |
|
nix
cargo
|
Direct | 0.29.0 | 0.31.3 | 6 behind | — | MIT |
|
nom
cargo
|
Direct | 7.1.3 | 8.0.0 | 6 behind | — | MIT |
|
sha2
cargo
|
Direct | 0.10.9 | 0.11.0 | 6 behind | — | MIT OR Apache-2.0 |
|
windows-sys
cargo
|
Direct | 0.59.0 | 0.61.2 | 6 behind | — | MIT OR Apache-2.0 |
|
windows-targets
cargo
|
Direct | 0.52.6 | 0.53.5 | 6 behind | — | MIT OR Apache-2.0 |
|
console
cargo
|
Direct | 0.15.11 | 0.16.3 | 5 behind | — | MIT |
|
jiff
cargo
|
Direct | 0.2.23 | 0.2.28 | 5 behind | — | Unlicense OR MIT |
|
jiff-static
cargo
|
Direct | 0.2.23 | 0.2.28 | 5 behind | — | Unlicense OR MIT |
|
signal-hook
cargo
|
Direct | 0.3.18 | 0.4.4 | 5 behind | — | Apache-2.0 OR MIT |
|
bit-vec
cargo
|
Direct | 0.6.3 | 0.9.1 | 4 behind | — | MIT OR Apache-2.0 |
|
getrandom
cargo
|
Direct | 0.2.17 | 0.4.2 | 4 behind | — | MIT OR Apache-2.0 |
|
hashbrown
cargo
|
Direct | 0.15.5 | 0.17.1 | 4 behind | — | MIT OR Apache-2.0 |
|
ordered-float
cargo
|
Direct | 4.6.0 | 5.3.0 | 4 behind | — | MIT |
|
phf
cargo
|
Direct | 0.11.3 | 0.13.1 | 4 behind | — | MIT |
|
phf_codegen
cargo
|
Direct | 0.11.3 | 0.13.1 | 4 behind | — | MIT |
|
phf_generator
cargo
|
Direct | 0.11.3 | 0.13.1 | 4 behind | — | MIT |
|
phf_macros
cargo
|
Direct | 0.11.3 | 0.13.1 | 4 behind | — | MIT |
|
phf_shared
cargo
|
Direct | 0.11.3 | 0.13.1 | 4 behind | — | MIT |
|
unicode-segmentation
cargo
|
Direct | 1.12.0 | 1.13.3 | 4 behind | — | MIT OR Apache-2.0 |
|
allocator-api2
cargo
|
Direct | 0.2.21 | 0.4.0 | 3 behind | — | MIT OR Apache-2.0 |
|
bitflags
cargo
|
Direct | 2.11.0 | 2.12.1 | 3 behind | — | MIT OR Apache-2.0 |
|
hyper
cargo
|
Direct | 1.8.1 | 1.10.1 | 3 behind | — | MIT |
|
libc
cargo
|
Direct | 0.2.183 | 0.2.186 | 3 behind | — | MIT OR Apache-2.0 |
|
libredox
cargo
|
Direct | 0.1.14 | 0.1.17 | 3 behind | — | MIT |
|
lru
cargo
|
Direct | 0.16.3 | 0.18.0 | 3 behind | — | MIT |
|
similar
cargo
|
Direct | 2.7.0 | 3.1.1 | 3 behind | — | Apache-2.0 |
|
toml_parser
cargo
|
Direct | 1.0.10+spec-1.1.0 | 1.0.4 | 3 behind | — | MIT OR Apache-2.0 |
|
uuid
cargo
|
Direct | 1.22.0 | 1.23.2 | 3 behind | — | Apache-2.0 OR MIT |
|
winnow
cargo
|
Direct | 1.0.0 | 1.0.3 | 3 behind | — | MIT |
|
compact_str
cargo
|
Direct | 0.9.0 | 0.9.1 | 2 behind | — | MIT |
|
fastrand
cargo
|
Direct | 2.3.0 | 2.4.1 | 2 behind | — | Apache-2.0 OR MIT |
|
hashbrown
cargo
|
Direct | 0.16.1 | 0.17.1 | 2 behind | — | MIT OR Apache-2.0 |
|
icu_locale_core
cargo
|
Direct | 2.1.1 | 2.2.0 | 2 behind | — | Unicode-3.0 |
|
icu_normalizer
cargo
|
Direct | 2.1.1 | 2.2.0 | 2 behind | — | Unicode-3.0 |
|
indexmap
cargo
|
Direct | 2.13.0 | 2.14.0 | 2 behind | — | Apache-2.0 OR MIT |
|
log
cargo
|
Direct | 0.4.29 | 0.4.31 | 2 behind | — | MIT OR Apache-2.0 |
|
mio
cargo
|
Direct | 1.1.1 | 1.2.1 | 2 behind | — | MIT |
|
num-conv
cargo
|
Direct | 0.2.0 | 0.2.2 | 2 behind | — | MIT OR Apache-2.0 |
|
rand
cargo
|
Direct | 0.10.0 | 0.10.1 | 2 behind | — | MIT OR Apache-2.0 |
|
serde_spanned
cargo
|
Direct | 1.0.4 | 1.1.1 | 2 behind | — | MIT OR Apache-2.0 |
|
typenum
cargo
|
Direct | 1.19.0 | 1.20.1 | 2 behind | — | MIT OR Apache-2.0 |
|
wasip3
cargo
|
Direct | 0.4.0+wasi-0.3.0-rc-2026-01-06 | 0.6.0+wasi-0.3.0-rc-2026-03-15 | 2 behind | — | Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT |
|
windows_aarch64_gnullvm
cargo
|
Direct | 0.52.6 | 0.53.1 | 2 behind | — | MIT OR Apache-2.0 |
|
windows_aarch64_msvc
cargo
|
Direct | 0.52.6 | 0.53.1 | 2 behind | — | MIT OR Apache-2.0 |
|
windows_i686_gnu
cargo
|
Direct | 0.52.6 | 0.53.1 | 2 behind | — | MIT OR Apache-2.0 |
|
windows_i686_gnullvm
cargo
|
Direct | 0.52.6 | 0.53.1 | 2 behind | — | MIT OR Apache-2.0 |
|
windows_i686_msvc
cargo
|
Direct | 0.52.6 | 0.53.1 | 2 behind | — | MIT OR Apache-2.0 |
|
windows_x86_64_gnu
cargo
|
Direct | 0.52.6 | 0.53.1 | 2 behind | — | MIT OR Apache-2.0 |
|
windows_x86_64_gnullvm
cargo
|
Direct | 0.52.6 | 0.53.1 | 2 behind | — | MIT OR Apache-2.0 |
|
windows_x86_64_msvc
cargo
|
Direct | 0.52.6 | 0.53.1 | 2 behind | — | MIT OR Apache-2.0 |
|
yoke
cargo
|
Direct | 0.8.1 | 0.8.3 | 2 behind | — | Unicode-3.0 |
|
zerofrom
cargo
|
Direct | 0.1.6 | 0.1.8 | 2 behind | — | Unicode-3.0 |
|
autocfg
cargo
|
Direct | 1.5.0 | 1.5.1 | 1 behind | — | Apache-2.0 OR MIT |
|
bumpalo
cargo
|
Direct | 3.20.2 | 3.20.3 | 1 behind | — | MIT OR Apache-2.0 |
|
clap
cargo
|
Direct | 4.6.0 | 4.6.1 | 1 behind | — | MIT OR Apache-2.0 |
|
clap_derive
cargo
|
Direct | 4.6.0 | 4.6.1 | 1 behind | — | MIT OR Apache-2.0 |
|
convert_case
cargo
|
Direct | 0.10.0 | 0.11.0 | 1 behind | — | MIT |
|
cpufeatures
cargo
|
Direct | 0.2.17 | 0.3.0 | 1 behind | — | MIT OR Apache-2.0 |
|
displaydoc
cargo
|
Direct | 0.2.5 | 0.2.6 | 1 behind | — | MIT OR Apache-2.0 |
|
either
cargo
|
Direct | 1.15.0 | 1.16.0 | 1 behind | — | MIT OR Apache-2.0 |
|
foldhash
cargo
|
Direct | 0.1.5 | 0.2.0 | 1 behind | — | Zlib |
|
http
cargo
|
Direct | 1.4.0 | 1.4.1 | 1 behind | — | MIT OR Apache-2.0 |
|
icu_collections
cargo
|
Direct | 2.1.1 | 2.2.0 | 1 behind | — | Unicode-3.0 |
|
icu_normalizer_data
cargo
|
Direct | 2.1.1 | 2.2.0 | 1 behind | — | Unicode-3.0 |
|
icu_properties
cargo
|
Direct | 2.1.2 | 2.2.0 | 1 behind | — | Unicode-3.0 |
|
icu_properties_data
cargo
|
Direct | 2.1.2 | 2.2.0 | 1 behind | — | Unicode-3.0 |
|
icu_provider
cargo
|
Direct | 2.1.1 | 2.2.0 | 1 behind | — | Unicode-3.0 |
|
idna_adapter
cargo
|
Direct | 1.2.1 | 1.2.2 | 1 behind | — | Apache-2.0 OR MIT |
|
litemap
cargo
|
Direct | 0.8.1 | 0.8.2 | 1 behind | — | Unicode-3.0 |
|
memchr
cargo
|
Direct | 2.8.0 | 2.8.1 | 1 behind | — | Unlicense OR MIT |
|
portable-atomic-util
cargo
|
Direct | 0.2.6 | 0.2.7 | 1 behind | — | Apache-2.0 OR MIT |
|
potential_utf
cargo
|
Direct | 0.1.4 | 0.1.5 | 1 behind | — | Unicode-3.0 |
|
r-efi
cargo
|
Direct | 5.3.0 | 6.0.0 | 1 behind | — | MIT OR Apache-2.0 OR LGPL-2.1-or-later |
|
rand_core
cargo
|
Direct | 0.10.0 | 0.10.1 | 1 behind | — | MIT OR Apache-2.0 |
|
semver
cargo
|
Direct | 1.0.27 | 1.0.28 | 1 behind | — | MIT OR Apache-2.0 |
|
serde_json
cargo
|
Direct | 1.0.149 | 1.0.150 | 1 behind | — | MIT OR Apache-2.0 |
|
signal-hook-mio
cargo
|
Direct | 0.2.5 | 0.3.0 | 1 behind | — | MIT OR Apache-2.0 |
|
siphasher
cargo
|
Direct | 1.0.2 | 1.0.3 | 1 behind | — | MIT OR Apache-2.0 |
|
socket2
cargo
|
Direct | 0.6.3 | 0.6.4 | 1 behind | — | MIT OR Apache-2.0 |
|
strum
cargo
|
Direct | 0.27.2 | 0.28.0 | 1 behind | — | MIT |
|
strum_macros
cargo
|
Direct | 0.27.2 | 0.28.0 | 1 behind | — | MIT |
|
tinystr
cargo
|
Direct | 0.8.2 | 0.8.3 | 1 behind | — | Unicode-3.0 |
|
tokio-macros
cargo
|
Direct | 2.6.1 | 2.7.0 | 1 behind | — | MIT |
|
vtparse
cargo
|
Direct | 0.6.2 | 0.7.0 | 1 behind | — | MIT |
|
wasip2
cargo
|
Direct | 1.0.2+wasi-0.2.9 | 1.0.3+wasi-0.2.9 | 1 behind | — | Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT |
|
writeable
cargo
|
Direct | 0.6.2 | 0.6.3 | 1 behind | — | Unicode-3.0 |
|
yoke-derive
cargo
|
Direct | 0.8.1 | 0.8.2 | 1 behind | — | Unicode-3.0 |
|
zerofrom-derive
cargo
|
Direct | 0.1.6 | 0.1.7 | 1 behind | — | Unicode-3.0 |
|
zerotrie
cargo
|
Direct | 0.2.3 | 0.2.4 | 1 behind | — | Unicode-3.0 |
|
zerovec
cargo
|
Direct | 0.11.5 | 0.11.6 | 1 behind | — | Unicode-3.0 |
|
zerovec-derive
cargo
|
Direct | 0.11.2 | 0.11.3 | 1 behind | — | Unicode-3.0 |
License Breakdown
MIT OR Apache-2.0
156
MIT
74
Unicode-3.0
18
Apache-2.0 OR MIT
17
Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT
14
Unknown
7
Unlicense OR MIT
6
Apache-2.0
5
MIT OR Apache-2.0 OR LGPL-2.1-or-later
2
Zlib
2
(MIT OR Apache-2.0) AND Unicode-3.0
1
(MIT OR Apache-2.0) AND Unicode-DFS-2016
1
Apache-2.0 OR BSL-1.0
1
MIT AND Unicode-DFS-2016
1
MPL-2.0
1
WTFPL
1
Zlib OR Apache-2.0 OR MIT
1
CVE Severity
critical
0
high
0
medium
0
low
1
unknown
0