Dependency Analysis
shellfirm
Direct and transitive dependency freshness, license, and CVE exposure from the latest SBOM.
57%
Freshness
373
Dependencies
91
Outdated
0
Stale
2.0
Avg Behind
Dependency List
Latest release v0.3.9
| Dependency | Type | Current | Latest | Behind | CVE | License |
|---|---|---|---|---|---|---|
|
rustls-webpki
cargo
|
Direct | 0.103.9 | 0.103.13 | 9 behind | 8 high | ISC |
|
openssl
cargo
|
Direct | 0.10.75 | 0.10.80 | 5 behind | 7 high | Apache-2.0 |
|
quinn-proto
cargo
|
Direct | 0.11.13 | 0.11.14 | 1 behind | 1 high | MIT OR Apache-2.0 |
|
rand
cargo
|
Direct | 0.8.5 | 0.10.1 | 19 behind | 2 low | MIT OR Apache-2.0 |
|
lru
cargo
|
Direct | 0.12.5 | 0.18.0 | 10 behind | 2 low | MIT |
|
bitflags
cargo
|
Direct | 1.3.2 | 2.12.1 | 30 behind | — | MIT OR Apache-2.0 |
|
rand_core
cargo
|
Direct | 0.6.4 | 0.10.1 | 19 behind | — | MIT OR Apache-2.0 |
|
wasi
cargo
|
Direct | 0.11.1+wasi-snapshot-preview1 | 0.7.0 | 19 behind | — | Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT |
|
thiserror
cargo
|
Direct | 1.0.69 | 2.0.18 | 17 behind | — | MIT OR Apache-2.0 |
|
thiserror-impl
cargo
|
Direct | 1.0.69 | 2.0.18 | 17 behind | — | MIT OR Apache-2.0 |
|
rustix
cargo
|
Direct | 0.38.44 | 1.1.4 | 16 behind | — | Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT |
|
wasm-bindgen-shared
cargo
|
Direct | 0.2.108 | 0.2.122 | 14 behind | — | MIT OR Apache-2.0 |
|
js-sys
cargo
|
Direct | 0.3.85 | 0.3.99 | 13 behind | — | MIT OR Apache-2.0 |
|
wasm-bindgen
cargo
|
Direct | 0.2.108 | 0.2.122 | 13 behind | — | MIT OR Apache-2.0 |
|
wasm-bindgen-futures
cargo
|
Direct | 0.4.58 | 0.4.72 | 13 behind | — | MIT OR Apache-2.0 |
|
wasm-bindgen-macro
cargo
|
Direct | 0.2.108 | 0.2.122 | 13 behind | — | MIT OR Apache-2.0 |
|
wasm-bindgen-macro-support
cargo
|
Direct | 0.2.108 | 0.2.122 | 13 behind | — | MIT OR Apache-2.0 |
|
web-sys
cargo
|
Direct | 0.3.85 | 0.3.99 | 13 behind | — | MIT OR Apache-2.0 |
|
winreg
cargo
|
Direct | 0.10.1 | 0.56.0 | 13 behind | — | MIT |
|
linux-raw-sys
cargo
|
Direct | 0.4.15 | 0.12.1 | 12 behind | — | Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT |
|
tokio
cargo
|
Direct | 1.49.0 | 1.52.3 | 11 behind | — | MIT |
|
rand
cargo
|
Direct | 0.9.2 | 0.10.1 | 10 behind | — | MIT OR Apache-2.0 |
|
ratatui
cargo
|
Direct | 0.29.0 | 0.30.0 | 10 behind | — | MIT |
|
wasm-encoder
cargo
|
Direct | 0.244.0 | 0.251.0 | 10 behind | — | Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT |
|
wasm-metadata
cargo
|
Direct | 0.244.0 | 0.251.0 | 10 behind | — | Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT |
|
wasmparser
cargo
|
Direct | 0.244.0 | 0.251.0 | 10 behind | — | Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT |
|
wit-component
cargo
|
Direct | 0.244.0 | 0.251.0 | 10 behind | — | Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT |
|
wit-parser
cargo
|
Direct | 0.244.0 | 0.251.0 | 10 behind | — | Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT |
|
rand_chacha
cargo
|
Direct | 0.3.1 | 0.10.0 | 9 behind | — | MIT OR Apache-2.0 |
|
redox_syscall
cargo
|
Direct | 0.5.18 | 0.8.1 | 9 behind | — | MIT |
|
wit-bindgen
cargo
|
Direct | 0.51.0 | 0.57.1 | 8 behind | — | Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT |
|
wit-bindgen-core
cargo
|
Direct | 0.51.0 | 0.57.1 | 8 behind | — | Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT |
|
wit-bindgen-rust
cargo
|
Direct | 0.51.0 | 0.57.1 | 8 behind | — | Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT |
|
wit-bindgen-rust-macro
cargo
|
Direct | 0.51.0 | 0.57.1 | 8 behind | — | Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT |
|
cc
cargo
|
Direct | 1.2.56 | 1.2.63 | 7 behind | — | MIT OR Apache-2.0 |
|
libc
cargo
|
Direct | 0.2.180 | 0.2.186 | 7 behind | — | MIT OR Apache-2.0 |
|
windows-sys
cargo
|
Direct | 0.52.0 | 0.61.2 | 7 behind | — | MIT OR Apache-2.0 |
|
getrandom
cargo
|
Direct | 0.3.4 | 0.4.2 | 6 behind | — | MIT OR Apache-2.0 |
|
reqwest
cargo
|
Direct | 0.12.28 | 0.13.4 | 6 behind | — | MIT OR Apache-2.0 |
|
windows-sys
cargo
|
Direct | 0.59.0 | 0.61.2 | 6 behind | — | MIT OR Apache-2.0 |
|
windows-targets
cargo
|
Direct | 0.52.6 | 0.53.5 | 6 behind | — | MIT OR Apache-2.0 |
|
console
cargo
|
Direct | 0.15.11 | 0.16.3 | 5 behind | — | MIT |
|
libredox
cargo
|
Direct | 0.1.12 | 0.1.17 | 5 behind | — | MIT |
|
openssl-sys
cargo
|
Direct | 0.9.111 | 0.9.116 | 5 behind | — | MIT |
|
rand_core
cargo
|
Direct | 0.9.5 | 0.10.1 | 5 behind | — | MIT OR Apache-2.0 |
|
rustls
cargo
|
Direct | 0.23.36 | 0.23.40 | 5 behind | — | Apache-2.0 OR ISC OR MIT |
|
signal-hook
cargo
|
Direct | 0.3.18 | 0.4.4 | 5 behind | — | Apache-2.0 OR MIT |
|
bumpalo
cargo
|
Direct | 3.19.1 | 3.20.3 | 4 behind | — | MIT OR Apache-2.0 |
|
getrandom
cargo
|
Direct | 0.2.17 | 0.4.2 | 4 behind | — | MIT OR Apache-2.0 |
|
hashbrown
cargo
|
Direct | 0.15.5 | 0.17.1 | 4 behind | — | MIT OR Apache-2.0 |
|
strum
cargo
|
Direct | 0.26.3 | 0.28.0 | 4 behind | — | MIT |
|
strum_macros
cargo
|
Direct | 0.26.4 | 0.28.0 | 4 behind | — | MIT |
|
unicode-segmentation
cargo
|
Direct | 1.12.0 | 1.13.3 | 4 behind | — | MIT OR Apache-2.0 |
|
allocator-api2
cargo
|
Direct | 0.2.21 | 0.4.0 | 3 behind | — | MIT OR Apache-2.0 |
|
bit-set
cargo
|
Direct | 0.8.0 | 0.10.0 | 3 behind | — | Apache-2.0 OR MIT |
|
bitflags
cargo
|
Direct | 2.11.0 | 2.12.1 | 3 behind | — | MIT OR Apache-2.0 |
|
compact_str
cargo
|
Direct | 0.8.1 | 0.9.1 | 3 behind | — | MIT |
|
downcast-rs
cargo
|
Direct | 1.2.1 | 2.0.2 | 3 behind | — | MIT OR Apache-2.0 |
|
foreign-types-shared
cargo
|
Direct | 0.1.1 | 0.3.1 | 3 behind | — | MIT OR Apache-2.0 |
|
hyper
cargo
|
Direct | 1.8.1 | 1.10.1 | 3 behind | — | MIT |
|
rand_chacha
cargo
|
Direct | 0.9.0 | 0.10.0 | 3 behind | — | MIT OR Apache-2.0 |
|
shared_library
cargo
|
Direct | 0.1.9 | 0.2.2 | 3 behind | — | Apache-2.0 OR MIT |
|
similar
cargo
|
Direct | 2.7.0 | 3.1.1 | 3 behind | — | Apache-2.0 |
|
tower-http
cargo
|
Direct | 0.6.8 | 0.6.11 | 3 behind | — | MIT |
|
unicode-width
cargo
|
Direct | 0.1.14 | 0.2.2 | 3 behind | — | MIT OR Apache-2.0 |
|
windows-sys
cargo
|
Direct | 0.60.2 | 0.61.2 | 3 behind | — | MIT OR Apache-2.0 |
|
bit-vec
cargo
|
Direct | 0.8.0 | 0.9.1 | 2 behind | — | Apache-2.0 OR MIT |
|
clap_lex
cargo
|
Direct | 1.0.0 | 1.1.0 | 2 behind | — | MIT OR Apache-2.0 |
|
core-foundation
cargo
|
Direct | 0.9.4 | 0.10.1 | 2 behind | — | MIT OR Apache-2.0 |
|
fastrand
cargo
|
Direct | 2.3.0 | 2.4.1 | 2 behind | — | Apache-2.0 OR MIT |
|
foreign-types
cargo
|
Direct | 0.3.2 | 0.5.0 | 2 behind | — | MIT OR Apache-2.0 |
|
hashbrown
cargo
|
Direct | 0.16.1 | 0.17.1 | 2 behind | — | MIT OR Apache-2.0 |
|
hyper-rustls
cargo
|
Direct | 0.27.7 | 0.27.9 | 2 behind | — | Apache-2.0 OR ISC OR MIT |
|
icu_locale_core
cargo
|
Direct | 2.1.1 | 2.2.0 | 2 behind | — | Unicode-3.0 |
|
icu_normalizer
cargo
|
Direct | 2.1.1 | 2.2.0 | 2 behind | — | Unicode-3.0 |
|
indexmap
cargo
|
Direct | 2.13.0 | 2.14.0 | 2 behind | — | Apache-2.0 OR MIT |
|
iri-string
cargo
|
Direct | 0.7.10 | 0.7.12 | 2 behind | — | MIT OR Apache-2.0 |
|
linux-raw-sys
cargo
|
Direct | 0.11.0 | 0.12.1 | 2 behind | — | Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT |
|
log
cargo
|
Direct | 0.4.29 | 0.4.31 | 2 behind | — | MIT OR Apache-2.0 |
|
mio
cargo
|
Direct | 1.1.1 | 1.2.1 | 2 behind | — | MIT |
|
quick-error
cargo
|
Direct | 1.2.3 | 2.0.1 | 2 behind | — | MIT OR Apache-2.0 |
|
quinn-udp
cargo
|
Direct | 0.5.14 | 0.6.1 | 2 behind | — | MIT OR Apache-2.0 |
|
rand
cargo
|
Direct | 0.10.0 | 0.10.1 | 2 behind | — | MIT OR Apache-2.0 |
|
rand_xorshift
cargo
|
Direct | 0.4.0 | 0.5.0 | 2 behind | — | MIT OR Apache-2.0 |
|
shlex
cargo
|
Direct | 1.3.0 | 2.0.1 | 2 behind | — | MIT OR Apache-2.0 |
|
socket2
cargo
|
Direct | 0.6.2 | 0.6.4 | 2 behind | — | MIT OR Apache-2.0 |
|
tempfile
cargo
|
Direct | 3.25.0 | 3.27.0 | 2 behind | — | MIT OR Apache-2.0 |
|
tokio-macros
cargo
|
Direct | 2.6.0 | 2.7.0 | 2 behind | — | MIT |
|
unicode-truncate
cargo
|
Direct | 1.1.0 | 2.0.1 | 2 behind | — | MIT OR Apache-2.0 |
|
unicode-width
cargo
|
Direct | 0.2.0 | 0.2.2 | 2 behind | — | MIT OR Apache-2.0 |
|
wasip3
cargo
|
Direct | 0.4.0+wasi-0.3.0-rc-2026-01-06 | 0.6.0+wasi-0.3.0-rc-2026-03-15 | 2 behind | — | Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT |
|
windows_aarch64_gnullvm
cargo
|
Direct | 0.52.6 | 0.53.1 | 2 behind | — | MIT OR Apache-2.0 |
|
windows_aarch64_msvc
cargo
|
Direct | 0.52.6 | 0.53.1 | 2 behind | — | MIT OR Apache-2.0 |
|
windows_i686_gnu
cargo
|
Direct | 0.52.6 | 0.53.1 | 2 behind | — | MIT OR Apache-2.0 |
|
windows_i686_gnullvm
cargo
|
Direct | 0.52.6 | 0.53.1 | 2 behind | — | MIT OR Apache-2.0 |
|
windows_i686_msvc
cargo
|
Direct | 0.52.6 | 0.53.1 | 2 behind | — | MIT OR Apache-2.0 |
|
windows_x86_64_gnu
cargo
|
Direct | 0.52.6 | 0.53.1 | 2 behind | — | MIT OR Apache-2.0 |
|
windows_x86_64_gnullvm
cargo
|
Direct | 0.52.6 | 0.53.1 | 2 behind | — | MIT OR Apache-2.0 |
|
windows_x86_64_msvc
cargo
|
Direct | 0.52.6 | 0.53.1 | 2 behind | — | MIT OR Apache-2.0 |
|
yoke
cargo
|
Direct | 0.8.1 | 0.8.3 | 2 behind | — | Unicode-3.0 |
|
zerofrom
cargo
|
Direct | 0.1.6 | 0.1.8 | 2 behind | — | Unicode-3.0 |
|
anstream
cargo
|
Direct | 0.6.21 | 1.0.0 | 1 behind | — | MIT OR Apache-2.0 |
|
anstyle
cargo
|
Direct | 1.0.13 | 1.0.14 | 1 behind | — | MIT OR Apache-2.0 |
|
anstyle-parse
cargo
|
Direct | 0.2.7 | 1.0.0 | 1 behind | — | MIT OR Apache-2.0 |
|
anyhow
cargo
|
Direct | 1.0.101 | 1.0.102 | 1 behind | — | MIT OR Apache-2.0 |
|
autocfg
cargo
|
Direct | 1.5.0 | 1.5.1 | 1 behind | — | Apache-2.0 OR MIT |
|
colorchoice
cargo
|
Direct | 1.0.4 | 1.0.5 | 1 behind | — | MIT OR Apache-2.0 |
|
console
cargo
|
Direct | 0.16.2 | 0.16.3 | 1 behind | — | MIT |
|
convert_case
cargo
|
Direct | 0.10.0 | 0.11.0 | 1 behind | — | MIT |
|
crossterm
cargo
|
Direct | 0.28.1 | 0.29.0 | 1 behind | — | MIT |
|
displaydoc
cargo
|
Direct | 0.2.5 | 0.2.6 | 1 behind | — | MIT OR Apache-2.0 |
|
either
cargo
|
Direct | 1.15.0 | 1.16.0 | 1 behind | — | MIT OR Apache-2.0 |
|
foldhash
cargo
|
Direct | 0.1.5 | 0.2.0 | 1 behind | — | Zlib |
|
getrandom
cargo
|
Direct | 0.4.1 | 0.4.2 | 1 behind | — | MIT OR Apache-2.0 |
|
h2
cargo
|
Direct | 0.4.13 | 0.4.14 | 1 behind | — | MIT |
|
http
cargo
|
Direct | 1.4.0 | 1.4.1 | 1 behind | — | MIT OR Apache-2.0 |
|
icu_collections
cargo
|
Direct | 2.1.1 | 2.2.0 | 1 behind | — | Unicode-3.0 |
|
icu_normalizer_data
cargo
|
Direct | 2.1.1 | 2.2.0 | 1 behind | — | Unicode-3.0 |
|
icu_properties
cargo
|
Direct | 2.1.2 | 2.2.0 | 1 behind | — | Unicode-3.0 |
|
icu_properties_data
cargo
|
Direct | 2.1.2 | 2.2.0 | 1 behind | — | Unicode-3.0 |
|
icu_provider
cargo
|
Direct | 2.1.1 | 2.2.0 | 1 behind | — | Unicode-3.0 |
|
idna_adapter
cargo
|
Direct | 1.2.1 | 1.2.2 | 1 behind | — | Apache-2.0 OR MIT |
|
ipnet
cargo
|
Direct | 2.11.0 | 2.12.0 | 1 behind | — | MIT OR Apache-2.0 |
|
itertools
cargo
|
Direct | 0.13.0 | 0.14.0 | 1 behind | — | MIT OR Apache-2.0 |
|
itoa
cargo
|
Direct | 1.0.17 | 1.0.18 | 1 behind | — | MIT OR Apache-2.0 |
|
litemap
cargo
|
Direct | 0.8.1 | 0.8.2 | 1 behind | — | Unicode-3.0 |
|
memchr
cargo
|
Direct | 2.8.0 | 2.8.1 | 1 behind | — | Unlicense OR MIT |
|
once_cell
cargo
|
Direct | 1.21.3 | 1.21.4 | 1 behind | — | MIT OR Apache-2.0 |
|
pin-project-lite
cargo
|
Direct | 0.2.16 | 0.2.17 | 1 behind | — | Apache-2.0 OR MIT |
|
pkg-config
cargo
|
Direct | 0.3.32 | 0.3.33 | 1 behind | — | MIT OR Apache-2.0 |
|
potential_utf
cargo
|
Direct | 0.1.4 | 0.1.5 | 1 behind | — | Unicode-3.0 |
|
quote
cargo
|
Direct | 1.0.44 | 1.0.45 | 1 behind | — | MIT OR Apache-2.0 |
|
r-efi
cargo
|
Direct | 5.3.0 | 6.0.0 | 1 behind | — | MIT OR Apache-2.0 OR LGPL-2.1-or-later |
|
rand_core
cargo
|
Direct | 0.10.0 | 0.10.1 | 1 behind | — | MIT OR Apache-2.0 |
|
regex-syntax
cargo
|
Direct | 0.8.9 | 0.8.10 | 1 behind | — | MIT OR Apache-2.0 |
|
rustc-hash
cargo
|
Direct | 2.1.1 | 2.1.2 | 1 behind | — | Apache-2.0 OR MIT |
|
rustix
cargo
|
Direct | 1.1.3 | 1.1.4 | 1 behind | — | Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT |
|
rustls-pki-types
cargo
|
Direct | 1.14.0 | 1.14.1 | 1 behind | — | MIT OR Apache-2.0 |
|
schannel
cargo
|
Direct | 0.1.28 | 0.1.29 | 1 behind | — | MIT |
|
semver
cargo
|
Direct | 1.0.27 | 1.0.28 | 1 behind | — | MIT OR Apache-2.0 |
|
serde_json
cargo
|
Direct | 1.0.149 | 1.0.150 | 1 behind | — | MIT OR Apache-2.0 |
|
signal-hook-mio
cargo
|
Direct | 0.2.5 | 0.3.0 | 1 behind | — | MIT OR Apache-2.0 |
|
tinystr
cargo
|
Direct | 0.8.2 | 0.8.3 | 1 behind | — | Unicode-3.0 |
|
tinyvec
cargo
|
Direct | 1.10.0 | 1.11.0 | 1 behind | — | Zlib OR Apache-2.0 OR MIT |
|
unicode-ident
cargo
|
Direct | 1.0.23 | 1.0.24 | 1 behind | — | (MIT OR Apache-2.0) AND Unicode-3.0 |
|
wasip2
cargo
|
Direct | 1.0.2+wasi-0.2.9 | 1.0.3+wasi-0.2.9 | 1 behind | — | Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT |
|
webpki-roots
cargo
|
Direct | 1.0.6 | 1.0.7 | 1 behind | — | CDLA-Permissive-2.0 |
|
writeable
cargo
|
Direct | 0.6.2 | 0.6.3 | 1 behind | — | Unicode-3.0 |
|
yoke-derive
cargo
|
Direct | 0.8.1 | 0.8.2 | 1 behind | — | Unicode-3.0 |
|
zerofrom-derive
cargo
|
Direct | 0.1.6 | 0.1.7 | 1 behind | — | Unicode-3.0 |
|
zerotrie
cargo
|
Direct | 0.2.3 | 0.2.4 | 1 behind | — | Unicode-3.0 |
|
zerovec
cargo
|
Direct | 0.11.5 | 0.11.6 | 1 behind | — | Unicode-3.0 |
|
zerovec-derive
cargo
|
Direct | 0.11.2 | 0.11.3 | 1 behind | — | Unicode-3.0 |
License Breakdown
MIT OR Apache-2.0
180
MIT
70
Unknown
41
Apache-2.0 OR MIT
19
Unicode-3.0
18
Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT
16
Apache-2.0
7
Apache-2.0 OR ISC OR MIT
2
BSD-2-Clause OR Apache-2.0 OR MIT
2
ISC
2
MIT OR Apache-2.0 OR Zlib
2
Unlicense OR MIT
2
(Apache-2.0 OR MIT) AND BSD-3-Clause
1
(MIT OR Apache-2.0) AND Unicode-3.0
1
Apache-2.0 AND ISC
1
Apache-2.0 OR BSL-1.0
1
BSD-2-Clause OR Apache-2.0
1
BSD-3-Clause
1
CDLA-Permissive-2.0
1
MIT OR Apache-2.0 OR LGPL-2.1-or-later
1
MPL-2.0
1
Zlib
1
Zlib OR Apache-2.0 OR MIT
1
CVE Severity
critical
0
high
3
medium
0
low
2
unknown
1