Skip to content
Tools / SparkyFitness / Dependencies

Dependency Analysis

SparkyFitness

Direct and transitive dependency freshness, license, and CVE exposure from the latest SBOM.

61% Freshness
3338 Dependencies
1069 Outdated
0 Stale
12.5 Avg Behind

Dependency List

Latest release v0.16.6.1

Dependency Type Current Latest Behind CVE License
node-forge
npm
Transitive 1.3.3 1.4.0 1 behind 4 high BSD-3-Clause OR GPL-2.0-only
dompurify
npm
Direct 3.3.3 3.4.8 9 behind 4 medium (Apache-2.0 AND GPL-1.0-only AND MPL-2.0 AND MS-PL) OR (Apache-2.0 AND GPL-1.0-only AND MPL-2.0) OR (Apache-2.0 AND GPL-2.0-only AND MPL-2.0 AND MS-PL) OR (Apache-2.0 AND GPL-2.0-only AND MPL-2.0)
rollup-plugin-dts
npm
Transitive 5.3.1 6.4.1 11 behind GPL-3.0 AND LGPL-3.0
@opentelemetry/api
npm
Transitive 1.9.0 1.9.1 1 behind Apache-2.0 OR (Apache-2.0 AND LGPL-3.0-only)
@img/sharp-libvips-darwin-arm64
npm
Transitive 1.2.4 1.2.4 Current BSD-2-Clause AND LGPL-2.0-only AND LGPL-2.1-only AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-scancode-other-permissive AND MIT AND MPL-2.0
@img/sharp-libvips-darwin-x64
npm
Transitive 1.2.4 1.2.4 Current BSD-2-Clause AND LGPL-2.0-only AND LGPL-2.1-only AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-scancode-other-permissive AND MIT AND MPL-2.0
@img/sharp-libvips-linux-arm
npm
Transitive 1.2.4 1.2.4 Current BSD-2-Clause AND LGPL-2.0-only AND LGPL-2.1-only AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-scancode-other-permissive AND MIT AND MPL-2.0
@img/sharp-libvips-linux-arm64
npm
Transitive 1.2.4 1.2.4 Current BSD-2-Clause AND LGPL-2.0-only AND LGPL-2.1-only AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-scancode-other-permissive AND MIT AND MPL-2.0
@img/sharp-libvips-linux-ppc64
npm
Transitive 1.2.4 1.2.4 Current BSD-2-Clause AND LGPL-2.0-only AND LGPL-2.1-only AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-scancode-other-permissive AND MIT AND MPL-2.0
@img/sharp-libvips-linux-riscv64
npm
Transitive 1.2.4 1.2.4 Current BSD-2-Clause AND LGPL-2.0-only AND LGPL-2.1-only AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-scancode-other-permissive AND MIT AND MPL-2.0
@img/sharp-libvips-linux-s390x
npm
Transitive 1.2.4 1.2.4 Current BSD-2-Clause AND LGPL-2.0-only AND LGPL-2.1-only AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-scancode-other-permissive AND MIT AND MPL-2.0
@img/sharp-libvips-linux-x64
npm
Transitive 1.2.4 1.2.4 Current BSD-2-Clause AND LGPL-2.0-only AND LGPL-2.1-only AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-scancode-other-permissive AND MIT AND MPL-2.0
@img/sharp-libvips-linuxmusl-arm64
npm
Transitive 1.2.4 1.2.4 Current BSD-2-Clause AND LGPL-2.0-only AND LGPL-2.1-only AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-scancode-other-permissive AND MIT AND MPL-2.0
@img/sharp-libvips-linuxmusl-x64
npm
Transitive 1.2.4 1.2.4 Current BSD-2-Clause AND LGPL-2.0-only AND LGPL-2.1-only AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-scancode-other-permissive AND MIT AND MPL-2.0
@img/sharp-win32-arm64
npm
Transitive 0.34.5 0.34.5 Current Apache-2.0 AND BSD-2-Clause AND LGPL-2.0-only AND LGPL-2.1-only AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-scancode-other-permissive AND MIT AND MPL-2.0
@img/sharp-win32-ia32
npm
Transitive 0.34.5 0.34.5 Current Apache-2.0 AND BSD-2-Clause AND LGPL-2.0-only AND LGPL-2.1-only AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-scancode-other-permissive AND MIT AND MPL-2.0
@img/sharp-win32-x64
npm
Transitive 0.34.5 0.34.5 Current Apache-2.0 AND BSD-2-Clause AND LGPL-2.0-only AND LGPL-2.1-only AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-scancode-other-permissive AND MIT AND MPL-2.0
case
npm
Transitive 1.6.3 1.6.3 Current MIT OR (GPL-3.0-or-later AND MIT)

License Breakdown

MIT 2673
Unknown 228
ISC 114
Apache-2.0 84
BSD-3-Clause 51
MPL-2.0 47
BSD-2-Clause 37
BlueOak-1.0.0 17
BSD-2-Clause AND LGPL-2.0-only AND LGPL-2.1-only AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-scancode-other-permissive AND MIT AND MPL-2.0 10
CC0-1.0 AND MIT 8
Apache-2.0 AND MIT 6
ISC AND MIT 6
CC0-1.0 5
MIT OR (CC0-1.0 AND MIT) 4
0BSD 3
Apache-2.0 AND BSD-2-Clause AND LGPL-2.0-only AND LGPL-2.1-only AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-scancode-other-permissive AND MIT AND MPL-2.0 3
BSD-2-Clause AND BSD-3-Clause 3
Apache-2.0 AND BSD-2-Clause 2
CC-BY-4.0 2
Hippocratic-2.1 2
LicenseRef-scancode-unicode AND MIT 2
MIT AND Zlib 2
(Apache-2.0 AND GPL-1.0-only AND MPL-2.0 AND MS-PL) OR (Apache-2.0 AND GPL-1.0-only AND MPL-2.0) OR (Apache-2.0 AND GPL-2.0-only AND MPL-2.0 AND MS-PL) OR (Apache-2.0 AND GPL-2.0-only AND MPL-2.0) 1
Apache-2.0 AND BSD-2-Clause AND CC0-1.0 AND ISC AND MIT 1
Apache-2.0 AND BSD-3-Clause 1
Apache-2.0 AND BSD-3-Clause AND MIT AND MPL-2.0 1
Apache-2.0 OR (Apache-2.0 AND LGPL-3.0-only) 1
Apache-2.0 OR BSD-2-Clause OR MIT OR (Apache-2.0 AND BSD-2-Clause) OR (Apache-2.0 AND MIT) OR (BSD-2-Clause AND MIT) 1
Apache-2.0 OR MPL-1.1 OR (Apache-2.0 AND MPL-1.1) 1
Apache-2.0 OR Unlicense OR (Apache-2.0 AND Unlicense) 1
Artistic-2.0 AND ISC 1
BSD-2-Clause AND BSD-2-Clause-Views 1
BSD-2-Clause AND CC0-1.0 AND ISC AND MIT 1
BSD-2-Clause AND JSON 1
BSD-3-Clause AND MIT 1
BSD-3-Clause OR GPL-2.0-only 1
BlueOak-1.0.0 AND ISC AND MIT 1
CC-BY-3.0 1
CC-BY-SA-4.0 AND ISC 1
GPL-3.0 AND LGPL-3.0 1
ISC AND JSON AND MIT 1
LicenseRef-scancode-generic-cla AND MIT 1
LicenseRef-scancode-public-domain AND Unlicense 1
MIT AND MIT-0 1
MIT AND MS-PL 1
MIT OR (GPL-3.0-or-later AND MIT) 1
MIT OR Apache-2.0 1
MIT-0 1
Python-2.0 1
Unlicense 1

CVE Severity

critical 2
high 26
medium 18
low 1
unknown 0

Beta — feedback welcome: [email protected]