Skip to content
Tools / swetrix / Dependencies

Dependency Analysis

swetrix

Direct and transitive dependency freshness, license, and CVE exposure from the latest SBOM.

59% Freshness
3167 Dependencies
1016 Outdated
0 Stale
7.4 Avg Behind

Dependency List

Latest release [email protected]

Dependency Type Current Latest Behind CVE License
@opentelemetry/api
npm
Transitive 1.9.0 1.9.1 1 behind Apache-2.0 OR (Apache-2.0 AND LGPL-3.0-only)
@img/sharp-libvips-darwin-arm64
npm
Direct 1.2.4 1.2.4 Current BSD-2-Clause AND LGPL-2.0-only AND LGPL-2.1-only AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-scancode-other-permissive AND MIT AND MPL-2.0
@img/sharp-libvips-darwin-x64
npm
Direct 1.2.4 1.2.4 Current BSD-2-Clause AND LGPL-2.0-only AND LGPL-2.1-only AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-scancode-other-permissive AND MIT AND MPL-2.0
@img/sharp-libvips-linux-arm
npm
Direct 1.2.4 1.2.4 Current BSD-2-Clause AND LGPL-2.0-only AND LGPL-2.1-only AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-scancode-other-permissive AND MIT AND MPL-2.0
@img/sharp-libvips-linux-arm64
npm
Direct 1.2.4 1.2.4 Current BSD-2-Clause AND LGPL-2.0-only AND LGPL-2.1-only AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-scancode-other-permissive AND MIT AND MPL-2.0
@img/sharp-libvips-linux-ppc64
npm
Direct 1.2.4 1.2.4 Current BSD-2-Clause AND LGPL-2.0-only AND LGPL-2.1-only AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-scancode-other-permissive AND MIT AND MPL-2.0
@img/sharp-libvips-linux-riscv64
npm
Direct 1.2.4 1.2.4 Current BSD-2-Clause AND LGPL-2.0-only AND LGPL-2.1-only AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-scancode-other-permissive AND MIT AND MPL-2.0
@img/sharp-libvips-linux-s390x
npm
Direct 1.2.4 1.2.4 Current BSD-2-Clause AND LGPL-2.0-only AND LGPL-2.1-only AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-scancode-other-permissive AND MIT AND MPL-2.0
@img/sharp-libvips-linux-x64
npm
Direct 1.2.4 1.2.4 Current BSD-2-Clause AND LGPL-2.0-only AND LGPL-2.1-only AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-scancode-other-permissive AND MIT AND MPL-2.0
@img/sharp-libvips-linuxmusl-arm64
npm
Direct 1.2.4 1.2.4 Current BSD-2-Clause AND LGPL-2.0-only AND LGPL-2.1-only AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-scancode-other-permissive AND MIT AND MPL-2.0
@img/sharp-libvips-linuxmusl-x64
npm
Direct 1.2.4 1.2.4 Current BSD-2-Clause AND LGPL-2.0-only AND LGPL-2.1-only AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-scancode-other-permissive AND MIT AND MPL-2.0
@img/sharp-win32-arm64
npm
Direct 0.34.5 0.34.5 Current Apache-2.0 AND BSD-2-Clause AND LGPL-2.0-only AND LGPL-2.1-only AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-scancode-other-permissive AND MIT AND MPL-2.0
@img/sharp-win32-ia32
npm
Direct 0.34.5 0.34.5 Current Apache-2.0 AND BSD-2-Clause AND LGPL-2.0-only AND LGPL-2.1-only AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-scancode-other-permissive AND MIT AND MPL-2.0
@img/sharp-win32-x64
npm
Direct 0.34.5 0.34.5 Current Apache-2.0 AND BSD-2-Clause AND LGPL-2.0-only AND LGPL-2.1-only AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-scancode-other-permissive AND MIT AND MPL-2.0
@opentelemetry/api
npm
Transitive 1.9.1 1.9.1 Current Apache-2.0 OR (Apache-2.0 AND LGPL-3.0-only)
jszip
npm
Direct 3.10.1 3.10.1 Current GPL-3.0-only OR MIT

License Breakdown

MIT 2553
ISC 185
Apache-2.0 127
BSD-3-Clause 69
BSD-2-Clause 41
BlueOak-1.0.0 33
MPL-2.0 25
CC0-1.0 AND MIT 13
Unknown 13
(MIT OR Apache-2.0) 12
BSD-2-Clause AND LGPL-2.0-only AND LGPL-2.1-only AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-scancode-other-permissive AND MIT AND MPL-2.0 10
Apache-2.0 AND MIT 9
FSL-1.1-MIT 9
0BSD 8
ISC AND MIT 6
BSD-2-Clause AND BSD-3-Clause 5
0BSD AND ISC AND MIT 4
CC-BY-4.0 4
CC0-1.0 4
Apache-2.0 AND BSD-2-Clause AND LGPL-2.0-only AND LGPL-2.1-only AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-scancode-other-permissive AND MIT AND MPL-2.0 3
LicenseRef-scancode-unknown-license-reference AND MIT 3
Unlicense 3
Apache-2.0 OR (Apache-2.0 AND LGPL-3.0-only) 2
BSD-3-Clause AND MIT 2
Hippocratic-2.1 2
LicenseRef-scancode-public-domain AND Unlicense 2
MIT AND Zlib 2
Python-2.0 2
(MIT OR EUPL-1.1+) 1
0BSD AND MIT 1
AFL-2.1 AND AFL-3.0 AND BSD-3-Clause 1
Apache-2.0 AND BSD-3-Clause AND MIT AND MPL-2.0 1
Apache-2.0 AND ISC 1
Apache-2.0 OR BSD-2-Clause OR MIT OR (Apache-2.0 AND BSD-2-Clause) OR (Apache-2.0 AND MIT) OR (BSD-2-Clause AND MIT) 1
Apache-2.0 OR MIT 1
BSD-2-Clause AND BSD-2-Clause-Views 1
BSD-2-Clause AND CC0-1.0 AND ISC AND MIT 1
BSD-3-Clause AND ISC AND MIT 1
CC-BY-SA-4.0 AND ISC 1
GPL-3.0-only OR MIT 1
LicenseRef-scancode-free-unknown AND MIT 1
MIT AND MIT-0 1
MIT AND Ruby 1
MIT-0 1
WTFPL OR (MIT AND WTFPL) 1

CVE Severity

critical 0
high 10
medium 8
low 0
unknown 0

Beta — feedback welcome: [email protected]