Dependency Analysis
wger
Direct and transitive dependency freshness, license, and CVE exposure from the latest SBOM.
78%
Freshness
386
Dependencies
63
Outdated
0
Stale
11.0
Avg Behind
Dependency List
Latest release 2.5
| Dependency | Type | Current | Latest | Behind | CVE | License |
|---|---|---|---|---|---|---|
|
react-is
npm
|
Transitive | 16.13.1 | 19.2.7 | 2545 behind | — | MIT |
|
typescript
npm
|
Transitive | 5.9.3 | 6.0.3 | 181 behind | — | Apache-2.0 |
|
type-fest
npm
|
Transitive | 2.19.0 | 5.7.0 | 108 behind | — | CC0-1.0 OR MIT OR (CC0-1.0 AND MIT) |
|
react
npm
|
Transitive | 19.2.5 | 19.2.7 | 44 behind | — | MIT |
|
react-dom
npm
|
Transitive | 19.2.5 | 19.2.7 | 44 behind | — | MIT |
|
react-is
npm
|
Transitive | 19.2.5 | 19.2.7 | 44 behind | — | MIT |
|
whatwg-url
npm
|
Transitive | 5.0.0 | 16.0.1 | 36 behind | — | MIT |
|
es-toolkit
npm
|
Transitive | 1.46.0 | 1.47.0 | 35 behind | — | MIT |
|
fast-equals
npm
|
Transitive | 4.0.3 | 6.0.0 | 33 behind | — | MIT |
|
node-fetch
npm
|
Transitive | 2.7.0 | 3.3.2 | 28 behind | — | MIT |
|
cosmiconfig
npm
|
Transitive | 7.1.0 | 9.0.1 | 19 behind | — | MIT |
|
deepmerge
npm
|
Transitive | 2.2.1 | 4.3.1 | 14 behind | — | MIT |
|
redis
pypi
|
Transitive | 6.4.0 | 8.0.0 | 14 behind | — | MIT |
|
tr46
npm
|
Transitive | 0.0.3 | 6.0.0 | 14 behind | — | MIT |
|
@rolldown/pluginutils
npm
|
Transitive | 1.0.0-rc.7 | 1.0.1 | 13 behind | — | MIT |
|
@babel/helper-string-parser
npm
|
Transitive | 7.27.1 | 7.29.7 | 12 behind | — | MIT |
|
@babel/helper-globals
npm
|
Transitive | 7.28.0 | 7.29.7 | 11 behind | — | MIT |
|
parse-json
npm
|
Transitive | 5.2.0 | 8.3.0 | 11 behind | — | MIT |
|
immer
npm
|
Transitive | 10.2.0 | 11.1.8 | 10 behind | — | MIT |
|
js-tokens
npm
|
Transitive | 4.0.0 | 10.0.0 | 10 behind | — | MIT |
|
source-map
npm
|
Transitive | 0.5.7 | 0.7.6 | 10 behind | — | BSD-3-Clause |
|
react-fast-compare
npm
|
Transitive | 2.0.4 | 3.2.2 | 9 behind | — | MIT |
|
webidl-conversions
npm
|
Transitive | 3.0.1 | 8.0.1 | 9 behind | — | BSD-2-Clause |
|
@babel/helper-validator-identifier
npm
|
Transitive | 7.28.5 | 7.29.7 | 8 behind | — | MIT |
|
nanoid
npm
|
Transitive | 3.3.11 | 5.1.11 | 8 behind | — | MIT |
|
react-router
npm
|
Transitive | 7.14.2 | 7.16.0 | 8 behind | — | MIT |
|
stylis
npm
|
Transitive | 4.2.0 | 4.4.0 | 8 behind | — | MIT |
|
web-vitals
npm
|
Transitive | 5.2.0 | 5.3.0 | 8 behind | — | Apache-2.0 |
|
@babel/code-frame
npm
|
Transitive | 7.29.0 | 7.29.7 | 7 behind | — | MIT |
|
@babel/generator
npm
|
Transitive | 7.29.1 | 7.29.7 | 7 behind | — | MIT |
|
@babel/helper-module-imports
npm
|
Transitive | 7.28.6 | 7.29.7 | 7 behind | — | MIT |
|
@babel/template
npm
|
Transitive | 7.28.6 | 7.29.7 | 7 behind | — | MIT |
|
@babel/traverse
npm
|
Transitive | 7.29.0 | 7.29.7 | 7 behind | — | MIT |
|
@babel/types
npm
|
Transitive | 7.29.0 | 7.29.7 | 7 behind | — | MIT |
|
@oxc-project/types
npm
|
Transitive | 0.127.0 | 0.134.0 | 7 behind | — | MIT |
|
faker
pypi
|
Direct | 40.15.0 | 40.21.0 | 7 behind | — | Unknown |
|
react-router-dom
npm
|
Transitive | 7.14.2 | 7.16.0 | 7 behind | — | MIT |
|
vite
npm
|
Direct | 8.0.10 | 8.0.16 | 7 behind | — | MIT |
|
@rolldown/binding-android-arm64
npm
|
Direct | 1.0.0-rc.17 | 1.1.0 | 6 behind | — | MIT |
|
@rolldown/binding-darwin-arm64
npm
|
Direct | 1.0.0-rc.17 | 1.1.0 | 6 behind | — | MIT |
|
@rolldown/binding-darwin-x64
npm
|
Direct | 1.0.0-rc.17 | 1.1.0 | 6 behind | — | MIT |
|
@rolldown/binding-freebsd-x64
npm
|
Direct | 1.0.0-rc.17 | 1.1.0 | 6 behind | — | MIT |
|
@rolldown/binding-linux-arm-gnueabihf
npm
|
Direct | 1.0.0-rc.17 | 1.1.0 | 6 behind | — | MIT |
|
@rolldown/binding-linux-arm64-gnu
npm
|
Direct | 1.0.0-rc.17 | 1.1.0 | 6 behind | — | MIT |
|
@rolldown/binding-linux-arm64-musl
npm
|
Direct | 1.0.0-rc.17 | 1.1.0 | 6 behind | — | MIT |
|
@rolldown/binding-linux-ppc64-gnu
npm
|
Direct | 1.0.0-rc.17 | 1.1.0 | 6 behind | — | MIT |
|
@rolldown/binding-linux-s390x-gnu
npm
|
Direct | 1.0.0-rc.17 | 1.1.0 | 6 behind | — | MIT |
|
@rolldown/binding-linux-x64-gnu
npm
|
Direct | 1.0.0-rc.17 | 1.1.0 | 6 behind | — | MIT |
|
@rolldown/binding-linux-x64-musl
npm
|
Direct | 1.0.0-rc.17 | 1.1.0 | 6 behind | — | MIT |
|
@rolldown/binding-openharmony-arm64
npm
|
Direct | 1.0.0-rc.17 | 1.1.0 | 6 behind | — | MIT |
|
@rolldown/binding-wasm32-wasi
npm
|
Direct | 1.0.0-rc.17 | 1.1.0 | 6 behind | — | MIT |
|
@rolldown/binding-win32-arm64-msvc
npm
|
Direct | 1.0.0-rc.17 | 1.1.0 | 6 behind | — | MIT |
|
@rolldown/binding-win32-x64-msvc
npm
|
Direct | 1.0.0-rc.17 | 1.1.0 | 6 behind | — | MIT |
|
@types/react
npm
|
Direct | 19.2.14 | 19.2.16 | 6 behind | — | MIT |
|
i18next
npm
|
Transitive | 26.0.8 | 26.3.1 | 6 behind | — | MIT |
|
json-parse-even-better-errors
npm
|
Transitive | 2.3.1 | 6.0.0 | 6 behind | — | MIT |
|
rolldown
npm
|
Transitive | 1.0.0-rc.17 | 1.1.0 | 6 behind | — | MIT |
|
trove-classifiers
pypi
|
Transitive | 2026.1.14.14 | 2026.6.1.19 | 6 behind | — | Apache-2.0 AND LicenseRef-scancode-free-unknown |
|
@babel/parser
npm
|
Transitive | 7.29.2 | 7.29.7 | 5 behind | — | MIT |
|
@babel/runtime
npm
|
Transitive | 7.29.2 | 7.29.7 | 4 behind | — | MIT |
|
axios
npm
|
Transitive | 1.15.2 | 1.17.0 | 4 behind | — | MIT |
|
immer
npm
|
Transitive | 11.1.4 | 11.1.8 | 4 behind | — | MIT |
|
invoke
pypi
|
Direct | 2.2.1 | 3.0.3 | 4 behind | — | BSD-2-Clause |
|
is-arrayish
npm
|
Transitive | 0.2.1 | 0.3.4 | 4 behind | — | MIT |
|
parent-module
npm
|
Transitive | 1.0.1 | 3.2.0 | 4 behind | — | MIT |
|
requests
pypi
|
Direct | 2.33.1 | 2.34.2 | 4 behind | — | Apache-2.0 |
|
ruff
pypi
|
Direct | 0.15.11 | 0.15.15 | 4 behind | — | Unknown |
|
yaml
npm
|
Transitive | 1.10.3 | 2.9.0 | 4 behind | — | ISC |
|
@rolldown/pluginutils
npm
|
Transitive | 1.0.0-rc.17 | 1.0.1 | 3 behind | — | MIT |
|
callsites
npm
|
Transitive | 3.1.0 | 4.2.0 | 3 behind | — | MIT |
|
mime-types
npm
|
Transitive | 2.1.35 | 3.0.2 | 3 behind | — | MIT |
|
postcss
npm
|
Transitive | 8.5.12 | 8.5.15 | 3 behind | — | MIT |
|
react-resizable
npm
|
Transitive | 3.1.3 | 4.0.1 | 3 behind | — | MIT |
|
set-cookie-parser
npm
|
Transitive | 2.7.2 | 3.1.0 | 3 behind | — | MIT |
|
yaml
npm
|
Direct | 2.8.3 | 2.9.0 | 3 behind | — | ISC |
|
click
pypi
|
Transitive | 8.3.3 | 8.4.1 | 2 behind | — | BSD-3-Clause |
|
coverage
pypi
|
Direct | 7.13.5 | 7.14.1 | 2 behind | — | Apache-2.0 |
|
cryptography
pypi
|
Direct | 46.0.7 | 48.0.0 | 2 behind | — | BSD-3-Clause OR Apache-2.0 |
|
dom-helpers
npm
|
Transitive | 5.2.1 | 6.0.1 | 2 behind | — | MIT |
|
greenlet
pypi
|
Transitive | 3.4.0 | 3.5.1 | 2 behind | — | Unknown |
|
hatchling
pypi
|
Direct | 1.29.0 | 1.30.1 | 2 behind | — | Unknown |
|
lines-and-columns
npm
|
Transitive | 1.2.4 | 2.0.4 | 2 behind | — | MIT |
|
markdown-it-py
pypi
|
Direct | 4.0.0 | 4.2.0 | 2 behind | — | MIT |
|
mime-db
npm
|
Transitive | 1.52.0 | 1.54.0 | 2 behind | — | MIT |
|
path-type
npm
|
Transitive | 4.0.0 | 6.0.0 | 2 behind | — | MIT |
|
pydantic-core
pypi
|
Transitive | 2.46.3 | 2.47.0 | 2 behind | — | Unknown |
|
s3transfer
pypi
|
Transitive | 0.17.0 | 0.18.0 | 2 behind | — | Unknown |
|
@reduxjs/toolkit
npm
|
Transitive | 2.11.2 | 2.12.0 | 1 behind | — | MIT |
|
@tybys/wasm-util
npm
|
Transitive | 0.10.1 | 0.10.2 | 1 behind | — | MIT |
|
@types/parse-json
npm
|
Transitive | 4.0.2 | 7.0.0 | 1 behind | — | MIT |
|
@types/use-sync-external-store
npm
|
Transitive | 0.0.6 | 1.5.0 | 1 behind | — | MIT |
|
@vitejs/plugin-react
npm
|
Transitive | 6.0.1 | 6.0.2 | 1 behind | — | MIT |
|
asynckit
npm
|
Transitive | 0.4.0 | 0.5.0 | 1 behind | — | MIT |
|
certifi
pypi
|
Transitive | 2026.4.22 | 2026.5.20 | 1 behind | — | MPL-2.0 |
|
convert-source-map
npm
|
Transitive | 1.9.0 | 2.0.0 | 1 behind | — | MIT |
|
es-object-atoms
npm
|
Transitive | 1.1.1 | 1.1.2 | 1 behind | — | MIT |
|
escape-string-regexp
npm
|
Transitive | 4.0.0 | 5.0.0 | 1 behind | — | MIT |
|
gevent
pypi
|
Direct | 26.4.0 | 26.5.0 | 1 behind | — | Unknown |
|
hasown
npm
|
Transitive | 2.0.3 | 2.0.4 | 1 behind | — | MIT |
|
import-fresh
npm
|
Transitive | 3.3.1 | 4.0.0 | 1 behind | — | MIT |
|
is-core-module
npm
|
Transitive | 2.16.1 | 2.16.2 | 1 behind | — | MIT |
|
nh3
pypi
|
Direct | 0.3.4 | 0.3.5 | 1 behind | — | MIT |
|
pathspec
pypi
|
Transitive | 1.1.0 | 1.1.1 | 1 behind | — | Unknown |
|
psycopg
pypi
|
Direct | 3.3.3 | 3.3.4 | 1 behind | — | LGPL-3.0 AND LGPL-3.0-only |
|
psycopg-binary
pypi
|
Direct | 3.3.3 | 3.3.4 | 1 behind | — | Unknown |
|
pydantic
pypi
|
Transitive | 2.13.3 | 2.13.4 | 1 behind | — | MIT |
|
pyjwt
pypi
|
Transitive | 2.12.1 | 2.13.0 | 1 behind | — | MIT |
|
react-draggable
npm
|
Transitive | 4.5.0 | 4.6.0 | 1 behind | — | MIT |
|
react-redux
npm
|
Transitive | 9.2.0 | 9.3.0 | 1 behind | — | MIT |
|
reportlab
pypi
|
Direct | 4.5.0 | 4.5.1 | 1 behind | — | Unknown |
|
reselect
npm
|
Transitive | 5.1.1 | 5.2.0 | 1 behind | — | MIT |
|
resolve-from
npm
|
Transitive | 4.0.0 | 5.0.0 | 1 behind | — | MIT |
|
rpds-py
pypi
|
Transitive | 0.30.0 | 2026.5.1 | 1 behind | — | MIT |
|
soupsieve
pypi
|
Transitive | 2.8.3 | 2.8.4 | 1 behind | — | MIT |
|
tinyglobby
npm
|
Transitive | 0.2.16 | 0.2.17 | 1 behind | — | MIT |
|
tornado
pypi
|
Transitive | 6.5.5 | 6.5.6 | 1 behind | — | Apache-2.0 |
|
urllib3
pypi
|
Transitive | 2.6.3 | 2.7.0 | 1 behind | — | MIT |
|
wcwidth
pypi
|
Transitive | 0.6.0 | 0.7.0 | 1 behind | — | MIT AND HPND-Markus-Kuhn |
License Breakdown
MIT
242
Unknown
54
BSD-3-Clause
17
ISC
14
MPL-2.0
13
BSD-2-Clause AND BSD-3-Clause
11
Apache-2.0
9
BSD-2-Clause
3
0BSD
2
Apache-2.0 AND BSD-2-Clause
2
CC0-1.0 AND MIT
2
Apache-2.0 AND BSD-3-Clause AND LicenseRef-scancode-unknown-license-reference
1
Apache-2.0 AND LicenseRef-scancode-free-unknown
1
Apache-2.0 OR BSD-3-Clause OR (Apache-2.0 AND BSD-3-Clause)
1
BSD-2-Clause AND BSD-3-Clause AND MIT
1
BSD-3-Clause OR Apache-2.0
1
CC-BY-3.0 AND MIT
1
CC0-1.0 OR MIT OR (CC0-1.0 AND MIT)
1
ISC AND JSON AND MIT
1
LGPL-3.0 AND LGPL-3.0-only
1
MIT AND HPND-Markus-Kuhn
1
MIT AND MPL-2.0
1
MIT AND Python-2.0
1
MIT AND ZPL-2.1
1
MIT-0
1
MIT-CMU
1
Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD
1
CVE Severity
critical
0
high
0
medium
0
low
0
unknown
0