Skip to content
Tools / roundcubemail / Dependencies

Dependency Analysis

roundcubemail

Direct and transitive dependency freshness, license, and CVE exposure from the latest SBOM.

51% Freshness
242 Dependencies
73 Outdated
0 Stale
12.4 Avg Behind

Dependency List

Latest release 1.6.15

Dependency Type Current Latest Behind CVE License
rollup
npm
Direct 4.45.1 4.61.0 53 behind 1 high 0BSD AND ISC AND MIT
serialize-javascript
npm
Transitive 6.0.2 7.0.5 6 behind 2 high BSD-3-Clause
lodash
npm
Transitive 4.17.21 4.18.1 3 behind 3 high CC0-1.0 AND MIT
picomatch
npm
Transitive 4.0.3 4.0.4 3 behind 2 high MIT
markdown-it
npm
Direct 14.1.0 14.2.0 2 behind 1 medium MIT
commander
npm
Transitive 2.20.3 15.0.0 55 behind MIT
@rollup/rollup-android-arm-eabi
npm
Direct 4.45.1 4.61.0 52 behind MIT
@rollup/rollup-android-arm64
npm
Direct 4.45.1 4.61.0 52 behind MIT
@rollup/rollup-darwin-arm64
npm
Direct 4.45.1 4.61.0 52 behind MIT
@rollup/rollup-freebsd-arm64
npm
Direct 4.45.1 4.61.0 52 behind MIT
@rollup/rollup-linux-arm-gnueabihf
npm
Direct 4.45.1 4.61.0 52 behind MIT
@rollup/rollup-linux-arm-musleabihf
npm
Direct 4.45.1 4.61.0 52 behind MIT
@rollup/rollup-linux-arm64-gnu
npm
Direct 4.45.1 4.61.0 52 behind MIT
@rollup/rollup-linux-arm64-musl
npm
Direct 4.45.1 4.61.0 52 behind MIT
@rollup/rollup-win32-arm64-msvc
npm
Direct 4.45.1 4.61.0 52 behind MIT
@rollup/rollup-win32-ia32-msvc
npm
Direct 4.45.1 4.61.0 52 behind MIT
@rollup/rollup-darwin-x64
npm
Direct 4.45.1 4.61.0 51 behind MIT
@rollup/rollup-freebsd-x64
npm
Direct 4.45.1 4.61.0 51 behind MIT
@rollup/rollup-linux-riscv64-gnu
npm
Direct 4.45.1 4.61.0 51 behind MIT
@rollup/rollup-linux-riscv64-musl
npm
Direct 4.45.1 4.61.0 51 behind MIT
@rollup/rollup-linux-s390x-gnu
npm
Direct 4.45.1 4.61.0 51 behind MIT
@rollup/rollup-linux-x64-gnu
npm
Direct 4.45.1 4.61.0 51 behind MIT
@rollup/rollup-linux-x64-musl
npm
Direct 4.45.1 4.61.0 51 behind MIT
@rollup/rollup-win32-x64-msvc
npm
Direct 4.45.1 4.61.0 51 behind MIT
@rolldown/pluginutils
npm
Transitive 1.0.0-beta.34 1.0.1 46 behind MIT
@codemirror/view
npm
Direct 6.38.1 6.43.0 36 behind MIT
image-size
npm
Direct 0.5.5 2.0.2 36 behind MIT
is-what
npm
Transitive 3.14.1 5.5.0 34 behind MIT
mime
npm
Direct 1.6.0 4.1.0 30 behind MIT
stream-chain
npm
Transitive 2.2.5 4.2.2 22 behind BSD-3-Clause
@rollup/rollup-linux-loongarch64-gnu
npm
Direct 4.45.1 4.50.1 14 behind MIT
p-limit
npm
Transitive 2.3.0 7.3.0 14 behind MIT
semver
npm
Transitive 5.7.2 7.8.1 12 behind ISC
copy-anything
npm
Transitive 2.0.6 4.0.5 11 behind MIT
semver
npm
Transitive 6.3.1 7.8.1 11 behind ISC
@emnapi/core
npm
Transitive 1.4.5 1.10.0 10 behind MIT
@emnapi/runtime
npm
Transitive 1.4.5 1.10.0 10 behind MIT
terser
npm
Transitive 5.43.1 5.48.0 9 behind BSD-2-Clause
@lezer/lr
npm
Transitive 1.4.2 1.4.10 8 behind MIT
less
npm
Direct 4.4.1 4.6.4 8 behind Apache-2.0
source-map
npm
Transitive 0.6.1 0.7.6 8 behind BSD-3-Clause
@codemirror/autocomplete
npm
Transitive 6.18.6 6.20.3 7 behind MIT
@codemirror/lint
npm
Transitive 6.8.5 6.9.6 7 behind MIT
@lezer/markdown
npm
Transitive 1.4.3 1.6.4 7 behind MIT
find-up
npm
Transitive 4.1.0 8.0.0 7 behind MIT
make-dir
npm
Direct 2.1.0 5.1.0 7 behind MIT
entities
npm
Transitive 4.5.0 8.0.0 6 behind BSD-2-Clause
locate-path
npm
Transitive 5.0.0 8.0.0 6 behind MIT
pkg-dir
npm
Transitive 4.2.0 9.0.0 6 behind MIT
stream-json
npm
Transitive 1.9.1 3.3.0 6 behind BSD-3-Clause
@codemirror/commands
npm
Direct 6.8.1 6.10.3 5 behind MIT
@codemirror/language
npm
Direct 6.11.2 6.12.3 5 behind MIT
@lezer/common
npm
Transitive 1.2.3 1.5.2 5 behind MIT
sax
npm
Transitive 1.4.1 1.6.0 5 behind ISC AND MIT
@types/resolve
npm
Transitive 1.20.2 1.20.6 4 behind MIT
core-js
npm
Direct 3.45.1 3.49.0 4 behind MIT
estree-walker
npm
Transitive 2.0.2 3.0.3 4 behind MIT
@codemirror/state
npm
Direct 6.5.2 6.6.0 3 behind MIT
@emnapi/wasi-threads
npm
Transitive 1.0.4 1.2.1 3 behind MIT
@lezer/css
npm
Transitive 1.3.0 1.3.3 3 behind MIT
@lezer/html
npm
Transitive 1.3.10 1.3.13 3 behind MIT
@lezer/javascript
npm
Transitive 1.5.1 1.5.4 3 behind MIT
find-cache-dir
npm
Transitive 3.3.2 6.0.0 3 behind MIT
iconv-lite
npm
Transitive 0.6.3 0.7.2 3 behind MIT
make-dir
npm
Transitive 3.1.0 5.1.0 3 behind MIT
needle
npm
Direct 3.3.1 3.5.0 3 behind MIT
p-locate
npm
Transitive 4.1.0 7.0.0 3 behind MIT
pify
npm
Transitive 4.0.1 6.1.0 3 behind MIT
resolve
npm
Transitive 1.22.10 1.22.12 3 behind MIT
smob
npm
Transitive 1.5.0 1.6.2 3 behind MIT
@codemirror/lang-html
npm
Transitive 6.4.9 6.4.11 2 behind MIT
@lezer/highlight
npm
Transitive 1.2.1 1.2.3 2 behind MIT
@rollup/pluginutils
npm
Transitive 5.2.0 5.4.0 2 behind MIT
@tybys/wasm-util
npm
Transitive 0.10.0 0.10.2 2 behind MIT
hasown
npm
Transitive 2.0.2 2.0.4 2 behind MIT
serialize-query-params
npm
Transitive 2.0.2 2.0.4 2 behind ISC
@codemirror/lang-javascript
npm
Transitive 6.2.4 6.2.5 1 behind MIT
@jridgewell/trace-mapping
npm
Transitive 0.3.30 0.3.31 1 behind MIT
@rollup/plugin-terser
npm
Direct 0.4.4 1.0.0 1 behind MIT
@types/estree
npm
Transitive 1.0.8 1.0.9 1 behind MIT
acorn
npm
Transitive 8.15.0 8.16.0 1 behind MIT
errno
npm
Direct 0.1.8 1.0.0 1 behind MIT
is-core-module
npm
Transitive 2.16.1 2.16.2 1 behind MIT
linkify-it
npm
Transitive 5.0.0 5.0.1 1 behind MIT
p-try
npm
Transitive 2.2.0 3.0.0 1 behind MIT
parse-node-version
npm
Transitive 1.0.1 2.0.0 1 behind MIT
path-exists
npm
Transitive 4.0.0 5.0.0 1 behind MIT
style-mod
npm
Transitive 4.1.2 4.1.3 1 behind MIT
@bundle-stats/cli-utils
npm
Transitive 4.21.3 MIT
@bundle-stats/html-templates
npm
Transitive 4.21.3 MIT
@bundle-stats/plugin-webpack-filter
npm
Transitive 4.21.3 MIT
@bundle-stats/plugin-webpack-validate
npm
Transitive 4.21.3 MIT
@bundle-stats/utils
npm
Transitive 4.21.3 MIT
@codemirror/lang-css
npm
Transitive 6.3.1 6.3.1 Current MIT
@codemirror/lang-markdown
npm
Direct 6.3.3 MIT
@fsegurai/codemirror-theme-material-dark
npm
Direct 6.2.2 MIT
@fsegurai/codemirror-theme-material-light
npm
Direct 6.2.2 MIT
@jridgewell/gen-mapping
npm
Transitive 0.3.13 0.3.13 Current MIT
@jridgewell/resolve-uri
npm
Transitive 3.1.2 3.1.2 Current MIT
@jridgewell/source-map
npm
Transitive 0.3.11 0.3.11 Current MIT
@jridgewell/sourcemap-codec
npm
Transitive 1.5.5 1.5.5 Current MIT
@marijn/find-cluster-break
npm
Transitive 1.0.2 1.0.2 Current MIT
@napi-rs/wasm-runtime
npm
Transitive 1.0.3 MIT
@oxc-project/runtime
npm
Transitive 0.82.3 MIT
@oxc-project/types
npm
Transitive 0.82.3 MIT
@rolldown/binding-android-arm64
npm
Direct 1.0.0-beta.34 MIT
@rolldown/binding-darwin-arm64
npm
Direct 1.0.0-beta.34 MIT
@rolldown/binding-darwin-x64
npm
Direct 1.0.0-beta.34 MIT
@rolldown/binding-freebsd-x64
npm
Direct 1.0.0-beta.34 MIT
@rolldown/binding-linux-arm-gnueabihf
npm
Direct 1.0.0-beta.34 MIT
@rolldown/binding-linux-arm64-gnu
npm
Direct 1.0.0-beta.34 MIT
@rolldown/binding-linux-arm64-musl
npm
Direct 1.0.0-beta.34 MIT
@rolldown/binding-linux-x64-gnu
npm
Direct 1.0.0-beta.34 MIT
@rolldown/binding-linux-x64-musl
npm
Direct 1.0.0-beta.34 MIT
@rolldown/binding-openharmony-arm64
npm
Direct 1.0.0-beta.34 MIT
@rolldown/binding-wasm32-wasi
npm
Direct 1.0.0-beta.34 MIT
@rolldown/binding-win32-arm64-msvc
npm
Direct 1.0.0-beta.34 MIT
@rolldown/binding-win32-ia32-msvc
npm
Direct 1.0.0-beta.34 MIT
@rolldown/binding-win32-x64-msvc
npm
Direct 1.0.0-beta.34 MIT
@rollup/plugin-node-resolve
npm
Direct 16.0.1 MIT
@rollup/rollup-linux-powerpc64le-gnu
npm
Direct 4.45.1 4.45.1 Current MIT
actions/checkout
githubactions
Direct 11bd71901bbe5b1630ceea73d27597364c9af683 Unknown
actions/setup-node
githubactions
Direct cdca7365b2dadb8aad0a33bc7601856ffabcc48e Unknown
actions/upload-artifact
githubactions
Direct 4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 Unknown
agrc/create-reminder-action
githubactions
Direct 9ff30cde74284045941af16a04362938957253b1 Unknown
agrc/reminder-action
githubactions
Direct 96f2ec2e1a7a53ead156504922e9bc36d64f49ee Unknown
ansis
npm
Transitive 4.1.0 ISC
argparse
npm
Transitive 2.0.1 2.0.1 Current Python-2.0
bacon/bacon-qr-code
Direct >= 3.0.0,< 4.0.0 Unknown
bootstrap
npm
Direct ^4.5.3 Unknown
buffer-from
npm
Transitive 1.1.2 1.1.2 Current MIT
clean-css
npm
Transitive 5.3.3 5.3.3 Current MIT
codemirror
npm
Direct ^5.58.3 Unknown
codemirror-markdown-commands
npm
Direct 0.1.0 MIT
commondir
npm
Transitive 1.0.1 1.0.1 Current MIT
crelt
npm
Transitive 1.0.6 1.0.6 Current MIT
csso-cli
npm
Direct ^4.0.2 Unknown
deepmerge
npm
Transitive 4.3.1 4.3.1 Current MIT
docker/build-push-action
githubactions
Direct 471d1dc4e07e5cdedd4c2171150001c434f0b7a4 Unknown
docker/login-action
githubactions
Direct 74a5d142397b4f367a81961eba4e8cd7edddf772 Unknown
ergebnis/composer-normalize
Direct >= 2.13,< 3.0 Unknown
ergebnis/phpunit-slow-test-detector
Direct >= 2.11,< 3.0 Unknown
eslint
npm
Direct ^8.57.0 10.4.1 Unknown
eslint-config-airbnb-base
npm
Direct ^15.0.0 Unknown
eslint-plugin-import
npm
Direct ^2.29.1 Unknown
eslint-plugin-unicorn
npm
Direct ^54.0.0 Unknown
ext-gd
Direct >= 0 Unknown
ext-zip
Direct >= 0 Unknown
friendsofphp/php-cs-fixer
Direct >= 3.8,< 4.0 Unknown
fsevents
npm
Direct 2.3.3 2.3.3 Current MIT
function-bind
npm
Transitive 1.1.2 1.1.2 Current MIT
graceful-fs
npm
Direct 4.2.11 4.2.11 Current ISC
guzzlehttp/guzzle
Direct >= 7.10.0,< 8.0.0 Unknown
guzzlehttp/promises
Direct >= 2.0,< 3.0 Unknown
is-module
npm
Transitive 1.0.0 1.0.0 Current MIT
jquery
npm
Direct ^3.7.1 4.0.0 Unknown
league/commonmark
Direct >= 2.7,< 3.0 Unknown
less
npm
Direct ^4.1.3 Unknown
less
npm
Direct ^4.2.0 Unknown
less-plugin-clean-css
npm
Direct 1.6.0 Apache-2.0
less-plugin-clean-css
npm
Direct ^1.5.1 Unknown
masterminds/html5
Direct ~> 2.9.0 Unknown
mdurl
npm
Transitive 2.0.0 2.0.0 Current MIT
mlocati/ip-lib
Direct >= 1.22.0,< 2.0.0 Unknown
openpgp
npm
Direct ^6.3.0 Unknown
path-parse
npm
Transitive 1.0.7 1.0.7 Current MIT
pear/auth_sasl
Direct ~> 1.2.0 Unknown
pear/crypt_gpg
Direct ~> 1.6.3 Unknown
pear/mail_mime
Direct ~> 1.10.11 Unknown
pear/net_sieve
Direct ~> 1.4.4 Unknown
pear/net_sieve
Direct ~> 1.4.7 Unknown
pear/net_smtp
Direct ~> 1.12.0 Unknown
pear/pear-core-minimal
Direct ~> 1.10.15 Unknown
php
Direct >= 8.1.0 Unknown
php
Direct >= 8.1,< 8.6 Unknown
php
Direct >= 7.3.0 Unknown
phpstan/extension-installer
Direct >= 1.1,< 2.0 Unknown
phpstan/phpstan
Direct >= 2.0,< 3.0 Unknown
phpstan/phpstan-deprecation-rules
Direct >= 2.0,< 3.0 Unknown
phpstan/phpstan-strict-rules
Direct >= 2.0,< 3.0 Unknown
phpunit/phpunit
Direct >= 10.5.47,< 11.0.0 || >= 11.0,< 12.0 Unknown
prr
npm
Transitive 1.0.1 1.0.1 Current MIT
punycode.js
npm
Transitive 2.3.1 2.3.1 Current MIT
randombytes
npm
Transitive 2.1.0 2.1.0 Current MIT
rolldown
npm
Direct 1.0.0-beta.34 MIT
rollup-plugin-bundle-stats
npm
Direct 4.21.3 MIT
rollup-plugin-stats
npm
Transitive 1.5.0 MIT
rollup-plugin-webpack-stats
npm
Transitive 2.1.4 MIT
roundcube/acl
Direct >= 0 Unknown
roundcube/additional_message_headers
Direct >= 0 Unknown
roundcube/archive
Direct >= 0 Unknown
roundcube/attachment_reminder
Direct >= 0 Unknown
roundcube/autologon
Direct >= 0 Unknown
roundcube/autologout
Direct >= 0 Unknown
roundcube/database_attachments
Direct >= 0 Unknown
roundcube/debug_logger
Direct >= 0 Unknown
roundcube/emoticons
Direct >= 0 Unknown
roundcube/enigma
Direct >= 0 Unknown
roundcube/example_addressbook
Direct >= 0 Unknown
roundcube/filesystem_attachments
Direct >= 1.0.0 Unknown
roundcube/filesystem_attachments
Direct >= 0 Unknown
roundcube/help
Direct >= 0 Unknown
roundcube/hide_blockquote
Direct >= 0 Unknown
roundcube/http_authentication
Direct >= 0 Unknown
roundcube/identicon
Direct >= 0 Unknown
roundcube/identity_select
Direct >= 0 Unknown
roundcube/jqueryui
Direct >= 0 Unknown
roundcube/krb_authentication
Direct >= 0 Unknown
roundcube/managesieve
Direct >= 0 Unknown
roundcube/markasjunk
Direct >= 0 Unknown
roundcube/new_user_dialog
Direct >= 0 Unknown
roundcube/new_user_identity
Direct >= 0 Unknown
roundcube/newmail_notifier
Direct >= 0 Unknown
roundcube/password
Direct >= 0 Unknown
roundcube/plugin-installer
Direct ~> 0.3.5 Unknown
roundcube/reconnect
Direct >= 0 Unknown
roundcube/redundant_attachments
Direct >= 0 Unknown
roundcube/rtf-html-php
Direct >= 2.1,< 3.0 Unknown
roundcube/show_additional_headers
Direct >= 0 Unknown
roundcube/squirrelmail_usercopy
Direct >= 0 Unknown
roundcube/subscriptions_option
Direct >= 0 Unknown
roundcube/userinfo
Direct >= 0 Unknown
roundcube/vcard_attachments
Direct >= 0 Unknown
roundcube/virtuser_file
Direct >= 0 Unknown
roundcube/virtuser_query
Direct >= 0 Unknown
roundcube/zipdownload
Direct >= 0 Unknown
safe-buffer
npm
Transitive 5.2.1 5.2.1 Current MIT
safer-buffer
npm
Transitive 2.1.2 2.1.2 Current MIT
shivammathur/setup-php
githubactions
Direct fcafdd6392932010c2bd5094439b8e33be2a8a09 Unknown
skjnldsv/check-actor-permission
githubactions
Direct 69e92a3c4711150929bca9fcf34448c5bf5526e7 Unknown
source-map-support
npm
Transitive 0.5.21 0.5.21 Current MIT
stream-chain
npm
Transitive 3.4.0 BSD-3-Clause
superstruct
npm
Transitive 2.0.2 2.0.2 Current MIT
supports-preserve-symlinks-flag
npm
Transitive 1.0.0 1.0.0 Current MIT
symfony/polyfill-php85
Direct >= 1.33.0,< 2.0.0 Unknown
symfony/process
Direct >= 6.4,< 7.0 || >= 7.0,< 8.0 Unknown
tinymce
npm
Direct ^5.10.9 Unknown
tslib
npm
Transitive 2.8.1 2.8.1 Current 0BSD
uc.micro
npm
Transitive 2.1.0 2.1.0 Current MIT
uglify-js
npm
Direct ^3.17.4 Unknown
w3c-keyname
npm
Transitive 2.2.8 2.2.8 Current MIT

License Breakdown

MIT 133
Unknown 89
BSD-3-Clause 5
ISC 5
Apache-2.0 2
BSD-2-Clause 2
0BSD 1
0BSD AND ISC AND MIT 1
CC0-1.0 AND MIT 1
ISC AND MIT 1
Python-2.0 1

CVE Severity

critical 0
high 4
medium 1
low 0
unknown 0

Beta — feedback welcome: [email protected]