typemill

Direct and transitive dependency freshness, license, and CVE exposure from the latest SBOM.

Security Export CSV

85% Freshness

57 Dependencies

5 Outdated

0 Stale

12.4 Avg Behind

Dependency List

Latest release v2.22.0

All 56 Outdated 8 Has CVE 0 GPL 0

Dependency	Type	Current	Latest	Behind	CVE	License
zod npm	Transitive	4.1.8	4.4.3	96 behind	—	MIT
tailwindcss npm	Direct	4.2.2	4.3.0	56 behind	—	MIT
fs-extra npm	Direct	10.1.0	11.3.5	10 behind	—	MIT
isexe npm	Transitive	2.0.0	4.0.0	8 behind	—	ISC
which npm	Transitive	2.0.2	7.0.0	7 behind	—	ISC
jsonfile npm	Transitive	6.2.0	6.2.1	1 behind	—	MIT
path-key npm	Transitive	3.1.1	4.0.0	1 behind	—	MIT
shebang-regex npm	Transitive	3.0.0	4.0.0	1 behind	—	MIT
@opencode-ai/plugin npm	Direct	1.3.17	—	—	—	MIT
@opencode-ai/sdk npm	Transitive	1.3.17	—	—	—	MIT
actions/checkout githubactions	Direct	4..	—	—	—	Unknown
akrabat/proxy-detection-middleware composer	Direct	1.1	—	—	—	Unknown
cross-spawn npm	Transitive	7.0.6	7.0.6	Current	—	MIT
docker/build-push-action githubactions	Direct	5..	—	—	—	Unknown
docker/login-action githubactions	Direct	3..	—	—	—	Unknown
docker/setup-buildx-action githubactions	Direct	3..	—	—	—	Unknown
erusev/parsedown composer	Direct	1.8.0	—	—	—	Unknown
erusev/parsedown-extra	Direct	—	—	—	—	Unknown
fig/http-message-util composer	Direct	1.1.5	—	—	—	MIT
graceful-fs npm	Transitive	4.2.11	4.2.11	Current	—	ISC
gregwar/captcha	Direct	—	—	—	—	Unknown
jbroadway/urlify composer	Direct	1.1.3-stable	—	—	—	BSD-3-Clause-Clear
laminas/laminas-permissions-acl composer	Direct	2.17.0	—	—	—	Unknown
laravel/serializable-closure composer	Direct	1.3.7	—	—	—	Unknown
nikic/fast-route composer	Direct	1.3.0	—	—	—	BSD-3-Clause
php-di/invoker composer	Direct	2.3.7	—	—	—	Unknown
php-di/php-di composer	Direct	6.4.0	—	—	—	MIT
php-di/phpdoc-reader composer	Direct	2.2.1	—	—	—	MIT
php-di/slim-bridge composer	Direct	3.4.1	—	—	—	Unknown
phpmailer/phpmailer composer	Direct	6.12.0	—	—	—	Unknown
psr/container composer	Direct	1.1.2	—	—	—	MIT
psr/event-dispatcher composer	Direct	1.0.0	—	—	—	MIT
psr/http-factory composer	Direct	1.1.0	—	—	—	MIT
psr/http-message composer	Direct	2.0	—	—	—	MIT
psr/http-server-handler composer	Direct	1.0.2	—	—	—	MIT
psr/http-server-middleware composer	Direct	1.0.2	—	—	—	MIT
psr/log composer	Direct	3.0.2	—	—	—	MIT
ralouphie/getallheaders composer	Direct	3.0.3	—	—	—	MIT
shebang-command npm	Transitive	2.0.0	2.0.0	Current	—	MIT
slim/csrf composer	Direct	1.5.1	—	—	—	Unknown
slim/flash composer	Direct	0.4.0	—	—	—	MIT
slim/psr7 composer	Direct	1.8.0	—	—	—	Unknown
slim/slim composer	Direct	4.15.1	—	—	—	Unknown
slim/twig-view composer	Direct	3.4.1	—	—	—	Unknown
symfony/deprecation-contracts composer	Direct	3.6.0	—	—	—	Unknown
symfony/event-dispatcher composer	Direct	5.4.45	—	—	—	Unknown
symfony/event-dispatcher-contracts composer	Direct	3.6.0	—	—	—	Unknown
symfony/finder composer	Direct	6.4.34	—	—	—	Unknown
symfony/polyfill-ctype composer	Direct	1.35.0	—	—	—	Unknown
symfony/polyfill-mbstring composer	Direct	1.35.0	—	—	—	Unknown
symfony/polyfill-php80 composer	Direct	1.35.0	—	—	—	Unknown
symfony/polyfill-php81 composer	Direct	1.35.0	—	—	—	Unknown
symfony/yaml composer	Direct	5.4.45	—	—	—	Unknown
twig/twig composer	Direct	3.24.0	—	—	—	Unknown
universalify npm	Transitive	2.0.1	2.0.1	Current	—	MIT
vlucas/valitron composer	Direct	1.4.11	—	—	—	Unknown

License Breakdown

Unknown 28

MIT 23

ISC 3

BSD-3-Clause 1

BSD-3-Clause-Clear 1

CVE Severity

critical 0

high 0

medium 0

low 0

unknown 0