Dependency Analysis
Themis
Direct and transitive dependency freshness, license, and CVE exposure from the latest SBOM.
50%
Freshness
2428
Dependencies
1005
Outdated
0
Stale
21.6
Avg Behind
Dependency List
Latest release 0.15.7
| Dependency | Type | Current | Latest | Behind | CVE | License |
|---|---|---|---|---|---|---|
|
form-data
npm
|
Transitive | 3.0.1 | 4.0.5 | 13 behind | 1 critical | MIT |
|
form-data
npm
|
Transitive | 3.0.1 | 4.0.5 | 13 behind | 1 critical | MIT |
|
@babel/traverse
npm
|
Transitive | 7.17.3 | — | — | 1 critical | MIT |
|
hermes-engine
npm
|
Transitive | 0.9.0 | — | — | 1 critical | MIT |
|
minimist
npm
|
Transitive | 1.2.5 | — | — | 1 critical | MIT |
|
minimist
npm
|
Transitive | 1.2.5 | — | — | 1 critical | MIT |
|
plist
npm
|
Transitive | 3.0.4 | — | — | 1 critical | MIT |
|
simple-plist
npm
|
Transitive | 1.3.0 | — | — | 1 critical | MIT |
|
webpack
npm
|
Direct | 5.65.0 | — | — | 4 critical | MIT |
|
path-to-regexp
npm
|
Transitive | 0.1.7 | 8.4.2 | 50 behind | 3 high | MIT |
|
ansi-regex
npm
|
Transitive | 4.1.0 | 6.2.2 | 9 behind | 1 high | MIT |
|
picomatch
npm
|
Transitive | 2.3.1 | 4.0.4 | 9 behind | 2 high | MIT |
|
picomatch
npm
|
Transitive | 2.3.1 | 4.0.4 | 9 behind | 2 high | MIT |
|
picomatch
npm
|
Transitive | 2.3.1 | 4.0.4 | 9 behind | 2 high | MIT |
|
serialize-javascript
npm
|
Transitive | 6.0.0 | 7.0.5 | 8 behind | 3 high | BSD-3-Clause |
|
serialize-javascript
npm
|
Transitive | 6.0.0 | 7.0.5 | 8 behind | 3 high | BSD-3-Clause |
|
serialize-javascript
npm
|
Transitive | 6.0.0 | 7.0.5 | 8 behind | 3 high | BSD-3-Clause |
|
cross-spawn
npm
|
Transitive | 6.0.5 | 7.0.6 | 7 behind | 1 high | MIT |
|
cross-spawn
npm
|
Transitive | 6.0.5 | 7.0.6 | 7 behind | 1 high | MIT |
|
ip
npm
|
Transitive | 1.1.5 | 2.0.1 | 6 behind | 2 high | MIT |
|
ip
npm
|
Transitive | 1.1.5 | 2.0.1 | 6 behind | 2 high | MIT |
|
lodash
npm
|
Transitive | 4.17.21 | 4.18.1 | 3 behind | 3 high | CC0-1.0 AND MIT |
|
lodash
npm
|
Transitive | 4.17.21 | 4.18.1 | 3 behind | 3 high | CC0-1.0 AND MIT |
|
lodash
npm
|
Transitive | 4.17.21 | 4.18.1 | 3 behind | 3 high | CC0-1.0 AND MIT |
|
braces
npm
|
Transitive | 3.0.2 | 3.0.3 | 1 behind | 1 high | MIT |
|
braces
npm
|
Transitive | 3.0.2 | 3.0.3 | 1 behind | 1 high | MIT |
|
braces
npm
|
Transitive | 3.0.2 | 3.0.3 | 1 behind | 1 high | MIT |
|
braces
npm
|
Transitive | 3.0.2 | 3.0.3 | 1 behind | 1 high | MIT |
|
braces
npm
|
Transitive | 3.0.2 | 3.0.3 | 1 behind | 1 high | MIT |
|
addressable
gem
|
Direct | 2.8.0 | — | — | 1 high | Apache-2.0 |
|
async
npm
|
Transitive | 2.6.3 | — | — | 1 high | MIT |
|
async
npm
|
Transitive | 2.6.3 | — | — | 1 high | MIT |
|
body-parser
npm
|
Transitive | 1.19.1 | — | — | 1 high | MIT |
|
cocoapods-downloader
gem
|
Direct | 1.5.1 | — | — | 2 high | MIT |
|
decode-uri-component
npm
|
Transitive | 0.2.0 | — | — | 1 high | MIT |
|
decode-uri-component
npm
|
Transitive | 0.2.0 | — | — | 1 high | MIT |
|
flatted
npm
|
Transitive | 2.0.2 | — | — | 2 high | ISC AND Zlib |
|
http-proxy-middleware
npm
|
Transitive | 2.0.1 | — | — | 3 high | MIT |
|
json5
npm
|
Transitive | 1.0.1 | — | — | 1 high | MIT |
|
minimatch
npm
|
Transitive | 3.0.4 | — | — | 4 high | ISC |
|
minimatch
npm
|
Transitive | 3.0.4 | — | — | 4 high | ISC |
|
minimatch
npm
|
Transitive | 3.0.4 | — | — | 4 high | ISC |
|
node-forge
npm
|
Transitive | 1.2.1 | — | — | 10 high | BSD-3-Clause OR GPL-2.0 OR (BSD-3-Clause AND GPL-2.0) |
|
qs
npm
|
Transitive | 6.9.6 | — | — | 3 high | BSD-3-Clause |
|
rexml
gem
|
Direct | 3.2.5 | — | — | 6 high | BSD-2-Clause |
|
semver
npm
|
Transitive | 5.7.1 | — | — | 1 high | ISC |
|
semver
npm
|
Transitive | 5.7.1 | — | — | 1 high | ISC |
|
terser
npm
|
Transitive | 5.10.0 | — | — | 1 high | BSD-2-Clause |
|
webpack-dev-middleware
npm
|
Transitive | 5.3.1 | — | — | 1 high | MIT |
|
ws
npm
|
Transitive | 7.5.7 | — | — | 1 high | MIT |
|
ajv
npm
|
Transitive | 6.12.6 | 8.20.0 | 67 behind | 1 medium | MIT |
|
ajv
npm
|
Transitive | 6.12.6 | 8.20.0 | 67 behind | 1 medium | MIT |
|
ajv
npm
|
Transitive | 6.12.6 | 8.20.0 | 67 behind | 1 medium | MIT |
|
brace-expansion
npm
|
Transitive | 1.1.11 | 5.0.6 | 18 behind | 2 medium | MIT |
|
brace-expansion
npm
|
Transitive | 1.1.11 | 5.0.6 | 18 behind | 2 medium | MIT |
|
brace-expansion
npm
|
Transitive | 1.1.11 | 5.0.6 | 18 behind | 2 medium | MIT |
|
brace-expansion
npm
|
Transitive | 1.1.11 | 5.0.6 | 18 behind | 2 medium | MIT |
|
brace-expansion
npm
|
Transitive | 1.1.11 | 5.0.6 | 18 behind | 2 medium | MIT |
|
js-yaml
npm
|
Transitive | 4.1.0 | 4.2.0 | 3 behind | 1 medium | MIT |
|
js-yaml
npm
|
Transitive | 4.1.0 | 4.2.0 | 3 behind | 1 medium | MIT |
|
@babel/helpers
npm
|
Transitive | 7.17.2 | — | — | 1 medium | MIT |
|
@babel/runtime
npm
|
Direct | 7.17.2 | — | — | 1 medium | MIT |
|
@sideway/formula
npm
|
Transitive | 3.0.0 | — | — | 1 medium | BSD-3-Clause |
|
@sideway/formula
npm
|
Transitive | 3.0.0 | — | — | 1 medium | BSD-3-Clause |
|
activesupport
gem
|
Direct | 6.1.4.6 | — | — | 6 medium | MIT |
|
express
npm
|
Transitive | 4.17.2 | — | — | 2 medium | MIT |
|
follow-redirects
npm
|
Transitive | 1.14.7 | — | — | 4 medium | MIT |
|
micromatch
npm
|
Transitive | 4.0.2 | — | — | 1 medium | MIT |
|
nanoid
npm
|
Transitive | 3.2.0 | — | — | 1 medium | MIT |
|
nanoid
npm
|
Transitive | 3.2.0 | — | — | 1 medium | MIT |
|
react-devtools-core
npm
|
Transitive | 4.19.1 | — | — | 1 medium | MIT |
|
tough-cookie
npm
|
Transitive | 4.0.0 | — | — | 1 medium | BSD-3-Clause |
|
webpack-dev-server
npm
|
Direct | 4.7.4 | — | — | 2 medium | MIT |
|
word-wrap
npm
|
Transitive | 1.2.3 | — | — | 1 medium | MIT |
|
word-wrap
npm
|
Transitive | 1.2.3 | — | — | 1 medium | MIT |
|
diff
npm
|
Transitive | 5.0.0 | 9.0.0 | 17 behind | 1 low | BSD-3-Clause |
|
diff
npm
|
Transitive | 5.0.0 | 9.0.0 | 17 behind | 1 low | BSD-3-Clause |
|
cookie
npm
|
Transitive | 0.4.1 | 1.1.1 | 11 behind | 1 low | MIT |
|
@tootallnate/once
npm
|
Transitive | 1.1.2 | 3.0.1 | 3 behind | 1 low | MIT |
|
@tootallnate/once
npm
|
Transitive | 1.1.2 | 3.0.1 | 3 behind | 1 low | MIT |
|
on-headers
npm
|
Transitive | 1.0.2 | 1.1.0 | 1 behind | 1 low | MIT |
|
on-headers
npm
|
Transitive | 1.0.2 | 1.1.0 | 1 behind | 1 low | MIT |
|
on-headers
npm
|
Transitive | 1.0.2 | 1.1.0 | 1 behind | 1 low | MIT |
|
send
npm
|
Transitive | 0.17.2 | — | — | 1 low | MIT |
|
send
npm
|
Transitive | 0.17.2 | — | — | 1 low | MIT |
|
serve-static
npm
|
Transitive | 1.14.2 | — | — | 1 low | MIT |
|
serve-static
npm
|
Transitive | 1.14.2 | — | — | 1 low | MIT |
License Breakdown
MIT
2022
ISC
137
BSD-3-Clause
71
BSD-2-Clause
49
Unknown
42
Apache-2.0
40
ISC AND MIT
7
MIT OR Apache-2.0
7
CC0-1.0 AND MIT
6
MIT OR (CC0-1.0 AND MIT)
6
0BSD
5
Apache-2.0 AND BSD-2-Clause
4
CC-BY-SA-4.0 AND ISC
4
Unlicense
4
BSD-2-Clause AND BSD-2-Clause-Views
3
CC-BY-4.0
3
Apache-2.0 OR MIT
2
BSD-2-Clause AND BSD-3-Clause
2
CC-BY-3.0
2
CC0-1.0
2
Python-2.0
2
Unlicense OR MIT
2
BSD-3-Clause AND MIT
1
BSD-3-Clause OR GPL-2.0 OR (BSD-3-Clause AND GPL-2.0)
1
ISC AND Zlib
1
LicenseRef-scancode-public-domain
1
Ruby
1
Ruby OR (BSD-2-Clause AND Ruby)
1
CVE Severity
critical
9
high
41
medium
25
low
12
unknown
0