Skip to content
Tools / TaskTrove / Dependencies

Dependency Analysis

TaskTrove

Direct and transitive dependency freshness, license, and CVE exposure from the latest SBOM.

59% Freshness
1364 Dependencies
462 Outdated
0 Stale
21.1 Avg Behind

Dependency List

Latest release v0.12.4

Dependency Type Current Latest Behind CVE License
happy-dom
npm
Transitive 18.0.1 3 critical MIT
next
npm
Transitive 16.1.1 16.2.7 248 behind 9 high MIT
minimatch
npm
Transitive 5.1.6 10.2.5 71 behind 3 high ISC
tar
npm
Transitive 7.4.4 7.5.16 17 behind 6 high ISC
immutable
npm
Transitive 4.3.7 5.1.6 15 behind 1 high MIT
glob
npm
Transitive 11.0.3 13.0.6 10 behind 1 high ISC
picomatch
npm
Transitive 2.3.1 4.0.4 9 behind 2 high MIT
flatted
npm
Transitive 3.3.3 3.4.2 4 behind 2 high ISC
lodash
npm
Transitive 4.17.21 4.18.1 3 behind 3 high CC0-1.0 AND MIT
@isaacs/brace-expansion
npm
Transitive 5.0.0 5.0.1 1 behind 1 high MIT
rollup
npm
Transitive 4.52.0 1 high 0BSD AND ISC AND MIT
vite
npm
Transitive 7.1.7 4 high BSD-2-Clause AND CC0-1.0 AND ISC AND MIT
ajv
npm
Transitive 6.12.6 8.20.0 67 behind 1 medium MIT
brace-expansion
npm
Transitive 1.1.12 5.0.6 10 behind 1 medium MIT
postcss
npm
Transitive 8.5.6 8.5.15 9 behind 1 medium MIT
yaml
npm
Transitive 2.8.1 2.9.0 7 behind 1 medium ISC
js-yaml
npm
Transitive 3.14.1 4.2.0 5 behind 1 medium MIT
uuid
npm
Direct 13.0.0 14.0.0 1 behind 1 medium MIT
jsondiffpatch
npm
Transitive 0.5.0 1 medium MIT

License Breakdown

MIT 935
Unknown 216
Apache-2.0 64
ISC 54
BSD-3-Clause 20
MPL-2.0 12
Apache-2.0 AND MIT 11
BSD-2-Clause 10
BSD-2-Clause AND LGPL-2.0-only AND LGPL-2.1-only AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-scancode-alliance-open-media-patent-1.0 AND LicenseRef-scancode-other-permissive AND MIT AND MPL-2.0 9
BlueOak-1.0.0 8
Apache-2.0 AND BSD-2-Clause AND LGPL-2.0-only AND LGPL-2.1-only AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-scancode-other-permissive AND MIT AND MPL-2.0 3
CC-BY-4.0 2
CC0-1.0 AND MIT 2
ISC AND MIT 2
0BSD 1
0BSD AND ISC AND MIT 1
Apache-2.0 AND BSD-2-Clause 1
Apache-2.0 AND BSD-2-Clause AND LGPL-2.0-only AND LGPL-2.1-only AND LGPL-3.0-only AND LGPL-3.0-or-later AND MIT 1
Apache-2.0 AND LicenseRef-scancode-proprietary-license 1
Apache-2.0 AND LicenseRef-scancode-unknown-license-reference 1
BSD-2-Clause AND BSD-2-Clause-Views 1
BSD-2-Clause AND BSD-3-Clause 1
BSD-2-Clause AND CC0-1.0 AND ISC AND MIT 1
BSD-3-Clause AND ISC AND MIT 1
CC0-1.0 1
ISC AND JSON AND MIT 1
MIT OR WTFPL OR (MIT AND WTFPL) 1
MIT-0 1
Python-2.0 1

CVE Severity

critical 1
high 11
medium 7
low 0
unknown 0

Beta — feedback welcome: [email protected]