pocket-id

Direct and transitive dependency freshness, license, and CVE exposure from the latest SBOM.

Security Export CSV

68% Freshness

908 Dependencies

190 Outdated

0 Stale

3.2 Avg Behind

Dependency List

Latest release v2.6.2

All 907 Outdated 322 Has CVE 4 GPL 13

Dependency	Type	Current	Latest	Behind	CVE	License
fast-uri npm	Transitive	3.1.0	3.1.2	2 behind	2 high	BSD-3-Clause
postcss npm	Transitive	8.4.31	8.5.15	34 behind	1 medium	MIT
github.com/disintegration/imaging golang	Direct	v1.6.2	—	—	1 low	MIT
github.com/jackc/pgx/v5 golang	Transitive	v5.9.1	—	—	1 low	Unknown

License Breakdown

MIT 592

Unknown 117

Apache-2.0 72

BSD-3-Clause 26

ISC 23

BSD-2-Clause 13

MPL-2.0 13

Apache-2.0 AND BSD-3-Clause 11

BSD-2-Clause AND LGPL-2.0-only AND LGPL-2.1-only AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-scancode-other-permissive AND MIT AND MPL-2.0 10

BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang 8

BlueOak-1.0.0 5

Apache-2.0 AND BSD-2-Clause AND LGPL-2.0-only AND LGPL-2.1-only AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-scancode-other-permissive AND MIT AND MPL-2.0 3

Apache-2.0 AND MIT 2

(MIT OR CC0-1.0) 1

0BSD 1

0BSD AND ISC AND MIT 1

BSD-2-Clause AND BSD-2-Clause-Views 1

BSD-2-Clause AND BSD-3-Clause 1

BSD-2-Clause AND JSON 1

BSD-3-Clause AND LicenseRef-scancode-generic-cla AND MIT 1

CC-BY-3.0 AND MIT 1

CC-BY-4.0 1

CC0-1.0 1

CC0-1.0 OR MIT OR (CC0-1.0 AND MIT) 1

MIT-0 1

CVE Severity

critical 0

high 1

medium 1

low 2

unknown 0