streamlit

Direct and transitive dependency freshness, license, and CVE exposure from the latest SBOM.

Security Export CSV

60% Freshness

2266 Dependencies

638 Outdated

0 Stale

9.6 Avg Behind

Dependency List

Latest release 1.57.0

All 2265 Outdated 995 Has CVE 6 GPL 2

Dependency	Type	Current	Latest	Behind	CVE	License
@opentelemetry/api npm	Transitive	1.9.0	1.9.1	1 behind	—	Apache-2.0 OR (Apache-2.0 AND LGPL-3.0-only)
jszip npm	Transitive	3.10.1	3.10.1	Current	—	GPL-3.0-only OR MIT

License Breakdown

MIT 1438

Unknown 350

ISC 146

BSD-3-Clause 118

Apache-2.0 116

BSD-2-Clause 22

Apache-2.0 AND MIT 13

MPL-2.0 13

BlueOak-1.0.0 7

ISC AND MIT 6

CC0-1.0 AND MIT 4

CC0-1.0 3

BSD-2-Clause AND BSD-3-Clause 2

BSD-3-Clause AND MIT 2

CC-BY-4.0 2

Unlicense 2

(MPL-2.0 OR Apache-2.0) 1

0BSD 1

Apache-2.0 AND BSD-2-Clause 1

Apache-2.0 AND BSD-3-Clause AND LicenseRef-scancode-warranty-disclaimer 1

Apache-2.0 AND ISC 1

Apache-2.0 AND LicenseRef-scancode-generic-cla 1

Apache-2.0 AND LicenseRef-scancode-unknown-license-reference 1

Apache-2.0 OR (Apache-2.0 AND LGPL-3.0-only) 1

Apache-2.0 OR (Apache-2.0 AND MIT) 1

BSD-2-Clause AND BSD-2-Clause-Views 1

BSD-3-Clause AND ISC AND MIT 1

BSD-3-Clause AND LicenseRef-scancode-protobuf 1

GPL-3.0-only OR MIT 1

MIT AND MIT-0 1

MIT AND MITNFA 1

MIT AND OSL-3.0 1

MIT AND Unlicense 1

MIT AND Zlib 1

MIT OR Apache-2.0 1

Python-2.0 1

Zlib 1

CVE Severity

critical 0

high 4

medium 2

low 0

unknown 0