Skip to content
Tools / Packer / Dependencies

Dependency Analysis

Packer

Direct and transitive dependency freshness, license, and CVE exposure from the latest SBOM.

60% Freshness
1485 Dependencies
508 Outdated
0 Stale
26.2 Avg Behind

Dependency List

Latest release v1.15.3

Dependency Type Current Latest Behind CVE License
form-data
npm
Transitive 3.0.1 4.0.5 13 behind 1 critical MIT
minimatch
npm
Transitive 3.1.2 10.2.5 91 behind 3 high ISC
semver
npm
Transitive 7.3.7 7.8.1 20 behind 1 high ISC
picomatch
npm
Transitive 2.3.1 4.0.4 9 behind 2 high MIT
cross-spawn
npm
Transitive 6.0.5 7.0.6 7 behind 1 high MIT
trim
npm
Transitive 0.0.1 1.0.1 4 behind 1 high MIT
lodash
npm
Transitive 4.17.21 4.18.1 3 behind 3 high CC0-1.0 AND MIT
braces
npm
Transitive 3.0.2 3.0.3 1 behind 1 high MIT
decode-uri-component
npm
Transitive 0.2.0 1 high MIT
flatted
npm
Transitive 3.2.5 2 high ISC
next
npm
Direct 14.2.28 11 high MIT
url-regex
npm
Transitive 5.0.0 1 high MIT
ws
npm
Transitive 7.5.7 1 high MIT
yaml
npm
Transitive 2.2.1 1 high ISC
zod
npm
Transitive 3.21.4 4.4.3 605 behind 1 medium MIT
postcss
npm
Transitive 7.0.39 8.5.15 69 behind 1 medium MIT
ajv
npm
Transitive 6.12.6 8.20.0 67 behind 1 medium MIT
postcss
npm
Transitive 8.4.31 8.5.15 34 behind 1 medium MIT
nanoid
npm
Transitive 3.3.7 5.1.11 24 behind 1 medium MIT
brace-expansion
npm
Transitive 1.1.11 5.0.6 18 behind 2 medium MIT
ejs
npm
Transitive 3.1.9 6.0.1 5 behind 1 medium Apache-2.0
js-yaml
npm
Transitive 3.14.1 4.2.0 5 behind 1 medium MIT
micromatch
npm
Transitive 4.0.5 4.0.8 3 behind 1 medium MIT
@babel/helpers
npm
Transitive 7.17.9 1 medium MIT
@babel/runtime
npm
Transitive 7.21.0 1 medium MIT
github.com/ulikunitz/xz
golang
Transitive v0.5.14 1 medium BSD-3-Clause
yaml
npm
Transitive 2.3.4 1 medium ISC
tmp
npm
Transitive 0.0.33 0.2.7 9 behind 1 low MIT
@tootallnate/once
npm
Transitive 1.1.2 3.0.1 3 behind 1 low MIT
github.com/aws/aws-sdk-go
golang
Transitive v1.45.6 2 unknown Apache-2.0
github.com/aws/aws-sdk-go
golang
Transitive v1.45.6 2 unknown Apache-2.0
golang.org/x/net
golang
Transitive v0.48.0 1 unknown BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang

License Breakdown

MIT 941
Apache-2.0 199
BSD-3-Clause 69
ISC 61
MPL-2.0 58
Unknown 36
BSD-2-Clause 35
BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang 21
Apache-2.0 AND BSD-3-Clause 14
CC0-1.0 6
Apache-2.0 AND MIT 5
0BSD 4
CC0-1.0 AND MIT 3
MIT OR (CC0-1.0 AND MIT) 3
Apache-2.0 AND BSD-2-Clause 2
BSD-2-Clause AND BSD-3-Clause 2
BSD-3-Clause AND MIT 2
ISC AND MIT 2
0BSD AND LicenseRef-scancode-public-domain 1
Apache-2.0 AND BSD-3-Clause AND MIT 1
Apache-2.0 AND CC-BY-4.0 1
Apache-2.0 AND CC-BY-4.0 AND GPL-2.0 1
Apache-2.0 AND CC-BY-4.0 AND MIT 1
Apache-2.0 AND CC-BY-SA-4.0 1
Apache-2.0 AND ImageMagick 1
Apache-2.0 AND LicenseRef-scancode-dco-1.1 1
Apache-2.0 AND LicenseRef-scancode-dco-1.1 AND MIT 1
Apache-2.0 OR MIT 1
BSD-2-Clause AND BSD-2-Clause-Views 1
BSD-2-Clause AND ISC 1
BSD-3-Clause AND CC0-1.0 AND LicenseRef-scancode-public-domain AND LicenseRef-scancode-unknown-license-reference AND MIT 1
BSD-3-Clause AND MPL-2.0 1
CC-BY-3.0 1
CC-BY-4.0 1
CC-BY-SA-4.0 AND ISC 1
LicenseRef-scancode-dco-1.1 AND LicenseRef-scancode-generic-cla AND MIT 1
LicenseRef-scancode-public-domain-disclaimer 1
Python-2.0 1
Unlicense 1

CVE Severity

critical 1
high 13
medium 13
low 2
unknown 3

Beta — feedback welcome: [email protected]