stash

Direct and transitive dependency freshness, license, and CVE exposure from the latest SBOM.

Security Export CSV

60% Freshness

1467 Dependencies

434 Outdated

0 Stale

29.1 Avg Behind

Dependency List

Latest release v0.31.1

All 1466 Outdated 654 Has CVE 17 GPL 3

Dependency	Type	Current	Latest	Behind	CVE	License
ua-parser-js npm	Direct	2.0.9	2.0.10	1 behind	—	AGPL-3.0-or-later
eslint-plugin-deprecation npm	Direct	3.0.0	—	—	—	LGPL-3.0 AND LGPL-3.0-or-later
flexbin npm	Direct	0.2.0	—	—	—	GPL-3.0

License Breakdown

MIT 1203

ISC 62

Apache-2.0 50

BSD-3-Clause 31

BSD-2-Clause 23

Unknown 22

MPL-2.0 17

BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang 9

Apache-2.0 AND MIT 4

CC0-1.0 4

CC0-1.0 AND MIT 4

(CC-BY-4.0 AND MIT) 3

0BSD 3

MIT OR (CC0-1.0 AND MIT) 3

MIT-0 3

Apache-2.0 AND BSD-2-Clause 2

Apache-2.0 AND BSD-3-Clause AND MIT 2

BSD-3-Clause AND LicenseRef-scancode-facebook-patent-rights-2 2

ISC AND MIT 2

0BSD AND ISC AND MIT 1

0BSD AND MIT 1

AGPL-3.0-or-later 1

Apache-2.0 AND Apache-2.0 WITH LLVM-exception 1

Apache-2.0 OR MIT 1

BSD-2-Clause AND BSD-2-Clause-Views 1

BSD-2-Clause AND BSD-3-Clause 1

BSD-2-Clause AND CC0-1.0 AND ISC AND MIT 1

CC-BY-3.0 1

CC-BY-3.0 AND MIT 1

CC-BY-4.0 1

CC0-1.0 OR MIT OR (CC0-1.0 AND MIT) 1

GPL-3.0 1

LGPL-3.0 AND LGPL-3.0-or-later 1

LicenseRef-scancode-dco-1.1 AND MIT 1

MIT AND Zlib 1

Python-2.0 1

CVE Severity

critical 0

high 7

medium 5

low 2

unknown 3