Dependency Analysis
pinchflat
Direct and transitive dependency freshness, license, and CVE exposure from the latest SBOM.
36%
Freshness
147
Dependencies
75
Outdated
0
Stale
10.2
Avg Behind
Dependency List
Latest release v2025.9.26
| Dependency | Type | Current | Latest | Behind | CVE | License |
|---|---|---|---|---|---|---|
|
minimatch
npm
|
Transitive | 3.1.2 | 10.2.5 | 91 behind | 3 high | ISC |
|
tar
npm
|
Transitive | 6.2.1 | 7.5.16 | 27 behind | 6 high | ISC |
|
tar-fs
npm
|
Transitive | 2.1.1 | 3.1.2 | 20 behind | 3 high | MIT |
|
brace-expansion
npm
|
Transitive | 1.1.11 | 5.0.6 | 18 behind | 2 medium | MIT |
|
ip-address
npm
|
Transitive | 9.0.5 | 10.2.0 | 6 behind | 1 medium | MIT |
|
@tootallnate/once
npm
|
Transitive | 1.1.2 | 3.0.1 | 3 behind | 1 low | MIT |
|
@vue/reactivity
npm
|
Transitive | 3.1.5 | 3.5.35 | 203 behind | — | MIT |
|
@vue/shared
npm
|
Transitive | 3.1.5 | 3.5.35 | 203 behind | — | MIT |
|
lru-cache
npm
|
Transitive | 6.0.0 | 11.5.1 | 110 behind | — | ISC |
|
glob
npm
|
Transitive | 7.2.3 | 13.0.6 | 62 behind | — | ISC |
|
node-abi
npm
|
Transitive | 3.62.0 | 4.31.0 | 62 behind | — | MIT |
|
make-fetch-happen
npm
|
Transitive | 9.1.0 | 15.0.6 | 40 behind | — | ISC |
|
cacache
npm
|
Transitive | 15.3.0 | 21.0.0 | 38 behind | — | ISC |
|
rimraf
npm
|
Transitive | 3.0.2 | 6.1.3 | 35 behind | — | ISC |
|
bl
npm
|
Transitive | 4.1.0 | 7.0.2 | 33 behind | — | MIT |
|
minipass
npm
|
Transitive | 3.3.6 | 7.1.3 | 27 behind | — | ISC |
|
node-gyp
npm
|
Transitive | 8.4.1 | 12.3.0 | 25 behind | — | MIT |
|
minipass-fetch
npm
|
Transitive | 1.4.1 | 6.0.0 | 19 behind | — | MIT |
|
ssri
npm
|
Transitive | 8.0.1 | 14.0.0 | 16 behind | — | ISC |
|
emoji-regex
npm
|
Transitive | 8.0.0 | 10.6.0 | 14 behind | — | MIT |
|
https-proxy-agent
npm
|
Transitive | 5.0.1 | 9.0.0 | 13 behind | — | MIT |
|
minipass
npm
|
Transitive | 5.0.0 | 7.1.3 | 13 behind | — | ISC |
|
node-addon-api
npm
|
Transitive | 7.1.0 | 8.8.0 | 13 behind | — | MIT |
|
string-width
npm
|
Transitive | 4.2.3 | 8.2.1 | 13 behind | — | MIT |
|
clean-stack
npm
|
Transitive | 2.2.0 | 6.0.0 | 12 behind | — | MIT |
|
mkdirp
npm
|
Transitive | 1.0.4 | 3.0.1 | 12 behind | — | MIT |
|
p-map
npm
|
Transitive | 4.0.0 | 7.0.4 | 12 behind | — | MIT |
|
tar-stream
npm
|
Transitive | 2.2.0 | 3.2.0 | 12 behind | — | MIT |
|
@npmcli/fs
npm
|
Transitive | 1.1.1 | 6.0.0 | 11 behind | — | ISC |
|
ini
npm
|
Transitive | 1.3.8 | 7.0.0 | 11 behind | — | ISC |
|
yargs
npm
|
Transitive | 17.7.2 | 18.0.0 | 11 behind | — | MIT |
|
agent-base
npm
|
Transitive | 6.0.2 | 9.0.0 | 10 behind | — | MIT |
|
http-proxy-agent
npm
|
Transitive | 4.0.1 | 9.0.0 | 10 behind | — | MIT |
|
ansi-styles
npm
|
Transitive | 4.3.0 | 6.2.3 | 9 behind | — | MIT |
|
nopt
npm
|
Transitive | 5.0.0 | 10.0.0 | 9 behind | — | ISC |
|
socks-proxy-agent
npm
|
Transitive | 6.2.1 | 10.0.0 | 9 behind | — | MIT |
|
strip-json-comments
npm
|
Transitive | 2.0.1 | 5.0.3 | 9 behind | — | MIT |
|
isexe
npm
|
Transitive | 2.0.0 | 4.0.0 | 8 behind | — | ISC |
|
readable-stream
npm
|
Transitive | 3.6.2 | 4.7.0 | 8 behind | — | MIT |
|
semver
npm
|
Transitive | 7.6.2 | 7.8.1 | 8 behind | — | ISC |
|
which
npm
|
Transitive | 2.0.2 | 7.0.0 | 7 behind | — | ISC |
|
balanced-match
npm
|
Transitive | 1.0.2 | 4.0.4 | 6 behind | — | MIT |
|
debug
npm
|
Transitive | 4.3.4 | 4.4.3 | 6 behind | — | MIT |
|
socks
npm
|
Transitive | 2.8.3 | 2.8.9 | 6 behind | — | MIT |
|
unique-filename
npm
|
Transitive | 1.1.1 | 6.0.0 | 6 behind | — | ISC |
|
wrap-ansi
npm
|
Transitive | 7.0.0 | 10.0.0 | 6 behind | — | MIT |
|
abbrev
npm
|
Transitive | 1.1.1 | 5.0.0 | 5 behind | — | ISC |
|
ansi-regex
npm
|
Transitive | 5.0.1 | 6.2.2 | 5 behind | — | MIT |
|
color-convert
npm
|
Transitive | 2.0.1 | 3.1.3 | 5 behind | — | MIT |
|
decompress-response
npm
|
Transitive | 6.0.0 | 10.0.0 | 5 behind | — | MIT |
|
detect-libc
npm
|
Transitive | 2.0.3 | 2.1.2 | 5 behind | — | Apache-2.0 |
|
signal-exit
npm
|
Transitive | 3.0.7 | 4.1.0 | 5 behind | — | ISC |
|
unique-slug
npm
|
Transitive | 2.0.2 | 7.0.0 | 5 behind | — | ISC |
|
fs-minipass
npm
|
Transitive | 2.1.0 | 3.0.3 | 4 behind | — | ISC |
|
minizlib
npm
|
Transitive | 2.1.2 | 3.1.0 | 4 behind | — | MIT |
|
pump
npm
|
Transitive | 3.0.0 | 3.0.4 | 4 behind | — | MIT |
|
@npmcli/move-file
npm
|
Transitive | 1.1.2 | 3.0.0 | 3 behind | — | MIT |
|
aggregate-error
npm
|
Transitive | 3.1.0 | 5.0.0 | 3 behind | — | MIT |
|
are-we-there-yet
npm
|
Transitive | 3.0.1 | 4.0.2 | 3 behind | — | ISC |
|
buffer
npm
|
Transitive | 5.7.1 | 6.0.3 | 3 behind | — | MIT |
|
color-name
npm
|
Transitive | 1.1.4 | 2.1.0 | 3 behind | — | MIT |
|
gauge
npm
|
Transitive | 4.0.4 | 5.0.2 | 3 behind | — | ISC |
|
http-cache-semantics
npm
|
Transitive | 4.1.1 | 4.2.0 | 3 behind | — | BSD-2-Clause |
|
iconv-lite
npm
|
Transitive | 0.6.3 | 0.7.2 | 3 behind | — | MIT |
|
is-fullwidth-code-point
npm
|
Transitive | 3.0.0 | 5.1.0 | 3 behind | — | MIT |
|
strip-ansi
npm
|
Transitive | 6.0.1 | 7.2.0 | 3 behind | — | MIT |
|
agentkeepalive
npm
|
Transitive | 4.5.0 | 4.6.0 | 2 behind | — | MIT |
|
chownr
npm
|
Transitive | 1.1.4 | 3.0.0 | 2 behind | — | ISC |
|
cliui
npm
|
Transitive | 8.0.1 | 9.0.1 | 2 behind | — | ISC |
|
env-paths
npm
|
Transitive | 2.2.1 | 4.0.0 | 2 behind | — | MIT |
|
err-code
npm
|
Transitive | 2.0.3 | 3.0.1 | 2 behind | — | MIT |
|
minipass-collect
npm
|
Transitive | 1.0.2 | 2.0.1 | 2 behind | — | ISC |
|
minipass-flush
npm
|
Transitive | 1.0.5 | 2.0.0 | 2 behind | — | ISC |
|
minipass-pipeline
npm
|
Transitive | 1.2.4 | 3.0.0 | 2 behind | — | ISC |
|
npmlog
npm
|
Transitive | 6.0.2 | 7.0.1 | 2 behind | — | ISC |
|
aproba
npm
|
Transitive | 2.0.0 | 2.1.0 | 1 behind | — | ISC |
|
chownr
npm
|
Transitive | 2.0.0 | 3.0.0 | 1 behind | — | ISC |
|
concat-map
npm
|
Transitive | 0.0.1 | 0.0.2 | 1 behind | — | MIT |
|
end-of-stream
npm
|
Transitive | 1.4.4 | 1.4.5 | 1 behind | — | MIT |
|
escalade
npm
|
Transitive | 3.1.2 | 3.2.0 | 1 behind | — | MIT |
|
file-uri-to-path
npm
|
Transitive | 1.0.0 | 2.0.0 | 1 behind | — | MIT |
|
humanize-ms
npm
|
Transitive | 1.2.1 | 2.0.0 | 1 behind | — | MIT |
|
indent-string
npm
|
Transitive | 4.0.0 | 5.0.0 | 1 behind | — | MIT |
|
mimic-response
npm
|
Transitive | 3.1.0 | 4.0.0 | 1 behind | — | MIT |
|
minipass-sized
npm
|
Transitive | 1.0.3 | 2.0.0 | 1 behind | — | ISC |
|
ms
npm
|
Transitive | 2.1.2 | 2.1.3 | 1 behind | — | MIT |
|
napi-build-utils
npm
|
Transitive | 1.0.2 | 2.0.0 | 1 behind | — | MIT |
|
negotiator
npm
|
Transitive | 0.6.3 | 1.0.0 | 1 behind | — | MIT |
|
path-is-absolute
npm
|
Transitive | 1.0.1 | 2.0.0 | 1 behind | — | MIT |
|
prebuild-install
npm
|
Transitive | 7.1.2 | 7.1.3 | 1 behind | — | MIT |
|
retry
npm
|
Transitive | 0.12.0 | 0.13.1 | 1 behind | — | MIT |
|
sqlite3
npm
|
Transitive | 5.1.7 | 6.0.1 | 1 behind | — | BSD-3-Clause |
|
yallist
npm
|
Transitive | 4.0.0 | 5.0.0 | 1 behind | — | ISC |
|
yargs-parser
npm
|
Transitive | 21.1.1 | 22.0.0 | 1 behind | — | ISC |
|
@gar/promisify
npm
|
Transitive | 1.1.3 | 1.1.3 | Current | — | MIT |
|
actions/checkout
githubactions
|
Direct | 4.*.* | — | — | — | Unknown |
|
alpinejs
npm
|
Direct | 3.13.5 | — | — | — | MIT |
|
base64-js
npm
|
Transitive | 1.5.1 | 1.5.1 | Current | — | MIT |
|
bindings
npm
|
Transitive | 1.5.0 | 1.5.0 | Current | — | MIT |
|
color-support
npm
|
Transitive | 1.1.3 | 1.1.3 | Current | — | ISC |
|
console-control-strings
npm
|
Transitive | 1.1.0 | 1.1.0 | Current | — | ISC |
|
deep-extend
npm
|
Transitive | 0.6.0 | 0.6.0 | Current | — | MIT |
|
delegates
npm
|
Transitive | 1.0.0 | 1.0.0 | Current | — | MIT |
|
docker/build-push-action
githubactions
|
Direct | 6.*.* | — | — | — | Unknown |
|
docker/login-action
githubactions
|
Direct | 3.*.* | — | — | — | Unknown |
|
docker/metadata-action
githubactions
|
Direct | 5.*.* | — | — | — | Unknown |
|
docker/setup-buildx-action
githubactions
|
Direct | 3.*.* | — | — | — | Unknown |
|
docker/setup-qemu-action
githubactions
|
Direct | 3.*.* | — | — | — | Unknown |
|
encoding
npm
|
Transitive | 0.1.13 | 0.1.13 | Current | — | MIT AND MIT-0 |
|
expand-template
npm
|
Transitive | 2.0.3 | 2.0.3 | Current | — | MIT OR (MIT AND WTFPL) |
|
fs-constants
npm
|
Transitive | 1.0.0 | 1.0.0 | Current | — | MIT |
|
fs.realpath
npm
|
Transitive | 1.0.0 | 1.0.0 | Current | — | ISC AND MIT |
|
get-caller-file
npm
|
Transitive | 2.0.5 | 2.0.5 | Current | — | ISC |
|
github-from-package
npm
|
Transitive | 0.0.0 | 0.0.0 | Current | — | MIT |
|
graceful-fs
npm
|
Transitive | 4.2.11 | 4.2.11 | Current | — | ISC |
|
has-unicode
npm
|
Transitive | 2.0.1 | 2.0.1 | Current | — | ISC |
|
ieee754
npm
|
Transitive | 1.2.1 | 1.2.1 | Current | — | BSD-3-Clause |
|
imurmurhash
npm
|
Transitive | 0.1.4 | 0.1.4 | Current | — | MIT |
|
infer-owner
npm
|
Transitive | 1.0.4 | 1.0.4 | Current | — | ISC |
|
inflight
npm
|
Transitive | 1.0.6 | 1.0.6 | Current | — | ISC |
|
inherits
npm
|
Transitive | 2.0.4 | 2.0.4 | Current | — | ISC |
|
is-lambda
npm
|
Transitive | 1.0.1 | 1.0.1 | Current | — | MIT |
|
jsbn
npm
|
Transitive | 1.1.0 | 1.1.0 | Current | — | MIT |
|
minimist
npm
|
Transitive | 1.2.8 | 1.2.8 | Current | — | MIT |
|
mkdirp-classic
npm
|
Transitive | 0.5.3 | 0.5.3 | Current | — | MIT |
|
ms
npm
|
Transitive | 2.1.3 | 2.1.3 | Current | — | MIT |
|
once
npm
|
Transitive | 1.4.0 | 1.4.0 | Current | — | ISC |
|
prettier
npm
|
Direct | 3.2.4 | — | — | — | MIT |
|
promise-inflight
npm
|
Transitive | 1.0.1 | 1.0.1 | Current | — | ISC |
|
promise-retry
npm
|
Transitive | 2.0.1 | 2.0.1 | Current | — | MIT |
|
rc
npm
|
Transitive | 1.2.8 | 1.2.8 | Current | — | Apache-2.0 OR BSD-2-Clause OR MIT OR (Apache-2.0 AND BSD-2-Clause) OR (Apache-2.0 AND MIT) OR (BSD-2-Clause AND MIT) |
|
require-directory
npm
|
Transitive | 2.1.1 | 2.1.1 | Current | — | MIT |
|
safe-buffer
npm
|
Transitive | 5.2.1 | 5.2.1 | Current | — | MIT |
|
safer-buffer
npm
|
Transitive | 2.1.2 | 2.1.2 | Current | — | MIT |
|
set-blocking
npm
|
Transitive | 2.0.0 | 2.0.0 | Current | — | ISC |
|
simple-concat
npm
|
Transitive | 1.0.1 | 1.0.1 | Current | — | MIT |
|
simple-get
npm
|
Transitive | 4.0.1 | 4.0.1 | Current | — | MIT |
|
smart-buffer
npm
|
Transitive | 4.2.0 | 4.2.0 | Current | — | MIT |
|
sprintf-js
npm
|
Transitive | 1.1.3 | 1.1.3 | Current | — | BSD-3-Clause |
|
sqleton
npm
|
Direct | 2.2.0 | — | — | — | GPL-3.0 |
|
string_decoder
npm
|
Transitive | 1.3.0 | 1.3.0 | Current | — | MIT |
|
tunnel-agent
npm
|
Transitive | 0.6.0 | 0.6.0 | Current | — | Apache-2.0 |
|
util-deprecate
npm
|
Transitive | 1.0.2 | 1.0.2 | Current | — | MIT |
|
wide-align
npm
|
Transitive | 1.1.5 | 1.1.5 | Current | — | ISC |
|
wrappy
npm
|
Transitive | 1.0.2 | 1.0.2 | Current | — | ISC |
|
y18n
npm
|
Transitive | 5.0.8 | 5.0.8 | Current | — | ISC |
License Breakdown
MIT
81
ISC
48
Unknown
6
BSD-3-Clause
3
Apache-2.0
2
Apache-2.0 OR BSD-2-Clause OR MIT OR (Apache-2.0 AND BSD-2-Clause) OR (Apache-2.0 AND MIT) OR (BSD-2-Clause AND MIT)
1
BSD-2-Clause
1
GPL-3.0
1
ISC AND MIT
1
MIT AND MIT-0
1
MIT OR (MIT AND WTFPL)
1
CVE Severity
critical
0
high
3
medium
2
low
1
unknown
0