Spack

Direct and transitive dependency freshness, license, and CVE exposure from the latest SBOM.

Security Export CSV

90% Freshness

43 Dependencies

3 Outdated

0 Stale

0.6 Avg Behind

Dependency List

Latest release v1.0.4

All 42 Outdated 6 Has CVE 1 GPL 2

Dependency	Type	Current	Latest	Behind	CVE	License
black pypi	Direct	25.12.0	26.5.1	6 behind	1 high	MIT

License Breakdown

Unknown 24

MIT 12

BSD-2-Clause 2

Apache-2.0 1

BSD-2-Clause AND BSD-3-Clause AND CC-PDDC AND GPL-1.0-or-later AND GPL-3.0-only AND GPL-3.0-or-later AND LicenseRef-scancode-free-unknown AND LicenseRef-scancode-other-copyleft AND LicenseRef-scancode-public-domain 1

GPL-2.0-only AND CC-BY-4.0 AND CC-BY-SA-4.0 1

MIT AND Python-2.0 AND Python-2.0.1 AND BSD-2-Clause AND MIT AND Python-2.0 AND Python-2.0.1 AND BSD-2-Clause 1

CVE Severity

critical 0

high 1

medium 0

low 0

unknown 0