Skip to content
Tools / streamlit / Dependencies

Dependency Analysis

streamlit

Direct and transitive dependency freshness, license, and CVE exposure from the latest SBOM.

60% Freshness
2266 Dependencies
638 Outdated
0 Stale
9.6 Avg Behind

Dependency List

Latest release 1.57.0

Dependency Type Current Latest Behind CVE License
glob
npm
Transitive 10.4.5 13.0.6 13 behind 1 high ISC
fast-xml-builder
npm
Transitive 1.1.5 1.2.0 5 behind 2 high MIT
basic-ftp
npm
Transitive 5.3.0 6.0.1 3 behind 1 high MIT
lodash
npm
Transitive 4.17.23 4.18.1 2 behind 2 high CC0-1.0 AND MIT
ip-address
npm
Transitive 9.0.5 10.2.0 6 behind 1 medium MIT
yaml
npm
Transitive 2.8.2 2.9.0 6 behind 1 medium ISC

License Breakdown

MIT 1438
Unknown 350
ISC 146
BSD-3-Clause 118
Apache-2.0 116
BSD-2-Clause 22
Apache-2.0 AND MIT 13
MPL-2.0 13
BlueOak-1.0.0 7
ISC AND MIT 6
CC0-1.0 AND MIT 4
CC0-1.0 3
BSD-2-Clause AND BSD-3-Clause 2
BSD-3-Clause AND MIT 2
CC-BY-4.0 2
Unlicense 2
(MPL-2.0 OR Apache-2.0) 1
0BSD 1
Apache-2.0 AND BSD-2-Clause 1
Apache-2.0 AND BSD-3-Clause AND LicenseRef-scancode-warranty-disclaimer 1
Apache-2.0 AND ISC 1
Apache-2.0 AND LicenseRef-scancode-generic-cla 1
Apache-2.0 AND LicenseRef-scancode-unknown-license-reference 1
Apache-2.0 OR (Apache-2.0 AND LGPL-3.0-only) 1
Apache-2.0 OR (Apache-2.0 AND MIT) 1
BSD-2-Clause AND BSD-2-Clause-Views 1
BSD-3-Clause AND ISC AND MIT 1
BSD-3-Clause AND LicenseRef-scancode-protobuf 1
GPL-3.0-only OR MIT 1
MIT AND MIT-0 1
MIT AND MITNFA 1
MIT AND OSL-3.0 1
MIT AND Unlicense 1
MIT AND Zlib 1
MIT OR Apache-2.0 1
Python-2.0 1
Zlib 1

CVE Severity

critical 0
high 4
medium 2
low 0
unknown 0

Beta — feedback welcome: [email protected]