Dependency Analysis
zigbee2mqtt
Direct and transitive dependency freshness, license, and CVE exposure from the latest SBOM.
56%
Freshness
337
Dependencies
117
Outdated
0
Stale
6.1
Avg Behind
Dependency List
Latest release 2.10.0
| Dependency | Type | Current | Latest | Behind | CVE | License |
|---|---|---|---|---|---|---|
|
vite
npm
|
Transitive | 6.3.5 | 8.0.16 | 83 behind | 5 high | Apache-2.0 AND BSD-2-Clause AND CC0-1.0 AND ISC AND MIT |
|
minimatch
npm
|
Transitive | 9.0.5 | 10.2.5 | 36 behind | 3 high | ISC |
|
picomatch
npm
|
Transitive | 4.0.2 | 4.0.4 | 4 behind | 2 high | MIT |
|
fast-uri
npm
|
Transitive | 3.1.0 | 3.1.2 | 2 behind | 2 high | BSD-3-Clause |
|
brace-expansion
npm
|
Transitive | 5.0.2 | 5.0.6 | 9 behind | 1 medium | MIT |
|
postcss
npm
|
Transitive | 8.5.6 | 8.5.15 | 9 behind | 1 medium | MIT |
|
ip-address
npm
|
Transitive | 10.1.0 | 10.2.0 | 2 behind | 1 medium | MIT |
|
@rollup/rollup-linux-arm64-gnu
npm
|
Transitive | 4.44.0 | 4.61.0 | 56 behind | — | MIT |
|
@vitest/expect
npm
|
Transitive | 3.2.4 | 4.1.8 | 56 behind | — | MIT |
|
@vitest/mocker
npm
|
Transitive | 3.2.4 | 4.1.8 | 56 behind | — | MIT |
|
@vitest/pretty-format
npm
|
Transitive | 3.2.4 | 4.1.8 | 56 behind | — | MIT |
|
@vitest/runner
npm
|
Transitive | 3.2.4 | 4.1.8 | 56 behind | — | MIT |
|
@vitest/snapshot
npm
|
Transitive | 3.2.4 | 4.1.8 | 56 behind | — | MIT |
|
@vitest/spy
npm
|
Transitive | 3.2.4 | 4.1.8 | 56 behind | — | MIT |
|
@vitest/utils
npm
|
Transitive | 3.2.4 | 4.1.8 | 56 behind | — | MIT |
|
vitest
npm
|
Direct | 3.2.4 | 4.1.8 | 56 behind | — | BSD-3-Clause AND ISC AND MIT |
|
@rollup/rollup-linux-x64-gnu
npm
|
Transitive | 4.44.0 | 4.61.0 | 55 behind | — | MIT |
|
@vitest/coverage-v8
npm
|
Direct | 3.2.4 | 4.1.8 | 55 behind | — | MIT |
|
tinybench
npm
|
Transitive | 2.9.0 | 6.0.2 | 32 behind | — | MIT |
|
undici-types
npm
|
Transitive | 7.16.0 | 8.3.0 | 32 behind | — | MIT |
|
vite-node
npm
|
Transitive | 3.2.4 | 6.0.0 | 25 behind | — | MIT |
|
lru-cache
npm
|
Transitive | 10.4.3 | 11.5.1 | 21 behind | — | ISC |
|
@babel/parser
npm
|
Transitive | 7.27.5 | 7.29.7 | 20 behind | — | MIT |
|
@babel/types
npm
|
Transitive | 7.27.6 | 7.29.7 | 19 behind | — | MIT |
|
@esbuild/aix-ppc64
npm
|
Transitive | 0.25.5 | 0.28.0 | 18 behind | — | MIT |
|
@esbuild/android-arm64
npm
|
Transitive | 0.25.5 | 0.28.0 | 18 behind | — | MIT |
|
supports-color
npm
|
Transitive | 7.2.0 | 10.2.2 | 18 behind | — | MIT |
|
@esbuild/android-arm
npm
|
Transitive | 0.25.5 | 0.28.0 | 17 behind | — | MIT |
|
@esbuild/android-x64
npm
|
Transitive | 0.25.5 | 0.28.0 | 17 behind | — | MIT |
|
@esbuild/darwin-arm64
npm
|
Transitive | 0.25.5 | 0.28.0 | 17 behind | — | MIT |
|
@esbuild/darwin-x64
npm
|
Transitive | 0.25.5 | 0.28.0 | 17 behind | — | MIT |
|
@esbuild/freebsd-arm64
npm
|
Transitive | 0.25.5 | 0.28.0 | 17 behind | — | MIT |
|
@esbuild/freebsd-x64
npm
|
Transitive | 0.25.5 | 0.28.0 | 17 behind | — | MIT |
|
@esbuild/linux-arm
npm
|
Transitive | 0.25.5 | 0.28.0 | 17 behind | — | MIT |
|
@esbuild/linux-arm64
npm
|
Transitive | 0.25.5 | 0.28.0 | 17 behind | — | MIT |
|
@esbuild/linux-ia32
npm
|
Transitive | 0.25.5 | 0.28.0 | 17 behind | — | MIT |
|
@esbuild/linux-loong64
npm
|
Transitive | 0.25.5 | 0.28.0 | 17 behind | — | MIT |
|
@esbuild/linux-mips64el
npm
|
Transitive | 0.25.5 | 0.28.0 | 17 behind | — | MIT |
|
@esbuild/linux-ppc64
npm
|
Transitive | 0.25.5 | 0.28.0 | 17 behind | — | MIT |
|
@esbuild/linux-riscv64
npm
|
Transitive | 0.25.5 | 0.28.0 | 17 behind | — | MIT |
|
@esbuild/linux-s390x
npm
|
Transitive | 0.25.5 | 0.28.0 | 17 behind | — | MIT |
|
@esbuild/linux-x64
npm
|
Transitive | 0.25.5 | 0.28.0 | 17 behind | — | MIT |
|
@esbuild/netbsd-arm64
npm
|
Transitive | 0.25.5 | 0.28.0 | 17 behind | — | MIT |
|
@esbuild/netbsd-x64
npm
|
Transitive | 0.25.5 | 0.28.0 | 17 behind | — | MIT |
|
@esbuild/openbsd-arm64
npm
|
Transitive | 0.25.5 | 0.28.0 | 17 behind | — | MIT |
|
@esbuild/openbsd-x64
npm
|
Transitive | 0.25.5 | 0.28.0 | 17 behind | — | MIT |
|
@esbuild/sunos-x64
npm
|
Transitive | 0.25.5 | 0.28.0 | 17 behind | — | MIT |
|
@esbuild/win32-arm64
npm
|
Transitive | 0.25.5 | 0.28.0 | 17 behind | — | MIT |
|
@esbuild/win32-ia32
npm
|
Transitive | 0.25.5 | 0.28.0 | 17 behind | — | MIT |
|
@esbuild/win32-x64
npm
|
Transitive | 0.25.5 | 0.28.0 | 16 behind | — | MIT |
|
esbuild
npm
|
Transitive | 0.25.5 | 0.28.0 | 16 behind | — | MIT |
|
@types/node
npm
|
Direct | 24.12.2 | 25.9.1 | 15 behind | — | MIT |
|
emoji-regex
npm
|
Transitive | 8.0.0 | 10.6.0 | 14 behind | — | MIT |
|
@babel/helper-validator-identifier
npm
|
Transitive | 7.27.1 | 7.29.7 | 13 behind | — | MIT |
|
string-width
npm
|
Transitive | 4.2.3 | 8.2.1 | 13 behind | — | MIT |
|
tinyexec
npm
|
Transitive | 0.3.2 | 1.2.4 | 13 behind | — | MIT |
|
@babel/helper-string-parser
npm
|
Transitive | 7.27.1 | 7.29.7 | 12 behind | — | MIT |
|
ast-v8-to-istanbul
npm
|
Transitive | 0.3.3 | 1.0.3 | 12 behind | — | MIT |
|
chai
npm
|
Transitive | 5.2.0 | 6.2.2 | 12 behind | — | MIT |
|
brace-expansion
npm
|
Transitive | 2.0.2 | 5.0.6 | 11 behind | — | MIT |
|
lru-cache
npm
|
Transitive | 11.2.7 | 11.5.1 | 10 behind | — | BlueOak-1.0.0 |
|
readable-stream
npm
|
Transitive | 2.3.8 | 4.7.0 | 10 behind | — | MIT |
|
string-width
npm
|
Transitive | 5.1.2 | 8.2.1 | 10 behind | — | MIT |
|
ansi-styles
npm
|
Transitive | 4.3.0 | 6.2.3 | 9 behind | — | MIT |
|
emoji-regex
npm
|
Transitive | 9.2.2 | 10.6.0 | 9 behind | — | MIT |
|
jackspeak
npm
|
Transitive | 3.4.3 | 4.2.3 | 9 behind | — | BlueOak-1.0.0 |
|
isexe
npm
|
Transitive | 2.0.0 | 4.0.0 | 8 behind | — | ISC |
|
nanoid
npm
|
Transitive | 3.3.11 | 5.1.11 | 8 behind | — | MIT |
|
readable-stream
npm
|
Transitive | 3.6.2 | 4.7.0 | 8 behind | — | MIT |
|
source-map
npm
|
Transitive | 0.6.1 | 0.7.6 | 8 behind | — | BSD-3-Clause |
|
glob
npm
|
Transitive | 10.5.0 | 13.0.6 | 7 behind | — | ISC |
|
nan
npm
|
Transitive | 2.23.0 | 2.27.0 | 7 behind | — | LicenseRef-scancode-dco-1.1 AND MIT |
|
which
npm
|
Transitive | 2.0.2 | 7.0.0 | 7 behind | — | ISC |
|
@jridgewell/trace-mapping
npm
|
Transitive | 0.3.25 | 0.3.31 | 6 behind | — | MIT |
|
balanced-match
npm
|
Transitive | 1.0.2 | 4.0.4 | 6 behind | — | MIT |
|
isarray
npm
|
Transitive | 1.0.0 | 2.0.5 | 6 behind | — | MIT |
|
node-addon-api
npm
|
Transitive | 8.3.0 | 8.8.0 | 6 behind | — | MIT |
|
pako
npm
|
Transitive | 1.0.11 | 2.1.0 | 6 behind | — | MIT AND Zlib |
|
wrap-ansi
npm
|
Direct | 7.0.0 | 10.0.0 | 6 behind | — | MIT |
|
@jridgewell/gen-mapping
npm
|
Transitive | 0.3.8 | 0.3.13 | 5 behind | — | MIT |
|
@jridgewell/sourcemap-codec
npm
|
Transitive | 1.5.0 | 1.5.5 | 5 behind | — | MIT |
|
ansi-regex
npm
|
Transitive | 5.0.1 | 6.2.2 | 5 behind | — | MIT |
|
color-convert
npm
|
Transitive | 2.0.1 | 3.1.3 | 5 behind | — | MIT |
|
magicast
npm
|
Transitive | 0.3.5 | 0.5.3 | 5 behind | — | MIT |
|
tinyrainbow
npm
|
Transitive | 2.0.0 | 3.1.0 | 5 behind | — | MIT |
|
why-is-node-running
npm
|
Transitive | 2.3.0 | 3.2.2 | 5 behind | — | MIT |
|
ws
npm
|
Direct | 8.20.0 | 8.21.0 | 5 behind | — | MIT |
|
@babel/runtime
npm
|
Transitive | 7.29.2 | 7.29.7 | 4 behind | — | MIT |
|
foreground-child
npm
|
Transitive | 3.3.1 | 4.0.3 | 4 behind | — | ISC |
|
html-escaper
npm
|
Transitive | 2.0.2 | 3.0.3 | 4 behind | — | MIT |
|
std-env
npm
|
Transitive | 3.9.0 | 4.1.0 | 4 behind | — | MIT |
|
@biomejs/biome
npm
|
Direct | 2.4.13 | 2.4.16 | 3 behind | — | Apache-2.0 AND MIT |
|
@biomejs/cli-darwin-arm64
npm
|
Transitive | 2.4.13 | 2.4.16 | 3 behind | — | MIT OR Apache-2.0 |
|
@biomejs/cli-darwin-x64
npm
|
Transitive | 2.4.13 | 2.4.16 | 3 behind | — | MIT OR Apache-2.0 |
|
@biomejs/cli-linux-arm64
npm
|
Transitive | 2.4.13 | 2.4.16 | 3 behind | — | MIT OR Apache-2.0 |
|
@biomejs/cli-linux-arm64-musl
npm
|
Transitive | 2.4.13 | 2.4.16 | 3 behind | — | MIT OR Apache-2.0 |
|
@biomejs/cli-linux-x64
npm
|
Transitive | 2.4.13 | 2.4.16 | 3 behind | — | MIT OR Apache-2.0 |
|
@biomejs/cli-linux-x64-musl
npm
|
Transitive | 2.4.13 | 2.4.16 | 3 behind | — | MIT OR Apache-2.0 |
|
@biomejs/cli-win32-arm64
npm
|
Transitive | 2.4.13 | 2.4.16 | 3 behind | — | MIT OR Apache-2.0 |
|
@biomejs/cli-win32-x64
npm
|
Transitive | 2.4.13 | 2.4.16 | 3 behind | — | MIT OR Apache-2.0 |
|
bl
npm
|
Transitive | 6.1.6 | 7.0.2 | 3 behind | — | MIT |
|
color-name
npm
|
Transitive | 1.1.4 | 2.1.0 | 3 behind | — | MIT |
|
event-target-shim
npm
|
Transitive | 5.0.1 | 6.0.2 | 3 behind | — | MIT |
|
glob
npm
|
Transitive | 13.0.3 | 13.0.6 | 3 behind | — | BlueOak-1.0.0 |
|
is-fullwidth-code-point
npm
|
Transitive | 3.0.0 | 5.1.0 | 3 behind | — | MIT |
|
is-stream
npm
|
Transitive | 2.0.1 | 4.0.1 | 3 behind | — | MIT |
|
js-sdsl
npm
|
Transitive | 4.3.0 | 4.4.2 | 3 behind | — | MIT |
|
magic-string
npm
|
Transitive | 0.30.17 | 0.30.21 | 3 behind | — | MIT |
|
path-scurry
npm
|
Transitive | 1.11.1 | 2.0.2 | 3 behind | — | BlueOak-1.0.0 |
|
stack-trace
npm
|
Transitive | 0.0.10 | 1.0.0 | 3 behind | — | MIT |
|
strip-ansi
npm
|
Transitive | 6.0.1 | 7.2.0 | 3 behind | — | MIT |
|
tinyglobby
npm
|
Transitive | 0.2.14 | 0.2.17 | 3 behind | — | MIT |
|
wrap-ansi
npm
|
Transitive | 8.1.0 | 10.0.0 | 3 behind | — | MIT |
|
@istanbuljs/schema
npm
|
Transitive | 0.1.3 | 0.1.6 | 2 behind | — | MIT |
|
balanced-match
npm
|
Transitive | 4.0.2 | 4.0.4 | 2 behind | — | MIT |
|
cac
npm
|
Transitive | 6.7.14 | 7.0.0 | 2 behind | — | MIT |
|
debug
npm
|
Transitive | 4.4.0 | 4.4.3 | 2 behind | — | MIT |
|
es-module-lexer
npm
|
Transitive | 1.7.0 | 2.1.0 | 2 behind | — | MIT |
|
expect-type
npm
|
Transitive | 1.2.1 | 1.3.0 | 2 behind | — | Apache-2.0 |
|
has-flag
npm
|
Transitive | 4.0.0 | 5.0.1 | 2 behind | — | MIT |
|
immediate
npm
|
Transitive | 3.0.6 | 3.3.0 | 2 behind | — | MIT |
|
js-yaml
npm
|
Direct | 4.1.1 | 4.2.0 | 2 behind | — | MIT |
|
loupe
npm
|
Transitive | 3.1.4 | 3.2.1 | 2 behind | — | MIT |
|
make-dir
npm
|
Transitive | 4.0.0 | 5.1.0 | 2 behind | — | MIT |
|
safe-buffer
npm
|
Transitive | 5.1.2 | 5.2.1 | 2 behind | — | MIT |
|
semver
npm
|
Direct | 7.7.4 | 7.8.1 | 2 behind | — | ISC |
|
send
npm
|
Transitive | 1.2.0 | 1.2.1 | 2 behind | — | MIT |
|
serve-static
npm
|
Transitive | 2.2.0 | 2.2.1 | 2 behind | — | MIT |
|
socks
npm
|
Transitive | 2.8.7 | 2.8.9 | 2 behind | — | MIT |
|
string_decoder
npm
|
Transitive | 1.1.1 | 1.3.0 | 2 behind | — | MIT |
|
test-exclude
npm
|
Transitive | 7.0.1 | 8.0.0 | 2 behind | — | ISC |
|
tinypool
npm
|
Transitive | 1.1.1 | 2.1.0 | 2 behind | — | MIT |
|
tmp
npm
|
Direct | 0.2.5 | 0.2.7 | 2 behind | — | MIT |
|
@date-fns/tz
npm
|
Transitive | 1.4.1 | 1.5.0 | 1 behind | — | MIT |
|
@isaacs/cliui
npm
|
Transitive | 8.0.2 | 9.0.0 | 1 behind | — | ISC |
|
@types/chai
npm
|
Transitive | 5.2.2 | 5.2.3 | 1 behind | — | MIT |
|
@types/estree
npm
|
Transitive | 1.0.8 | 1.0.9 | 1 behind | — | MIT |
|
bonjour-service
npm
|
Transitive | 1.3.0 | 1.4.0 | 1 behind | — | MIT |
|
check-error
npm
|
Transitive | 2.1.1 | 2.1.3 | 1 behind | — | MIT |
|
debug
npm
|
Transitive | 4.4.1 | 4.4.3 | 1 behind | — | MIT |
|
eastasianwidth
npm
|
Transitive | 0.2.0 | 0.3.0 | 1 behind | — | MIT |
|
fdir
npm
|
Transitive | 6.4.6 | 6.5.0 | 1 behind | — | MIT |
|
file-uri-to-path
npm
|
Transitive | 1.0.0 | 2.0.0 | 1 behind | — | MIT |
|
http-errors
npm
|
Transitive | 2.0.0 | 2.0.1 | 1 behind | — | MIT |
|
istanbul-reports
npm
|
Transitive | 3.1.7 | 3.2.0 | 1 behind | — | BSD-3-Clause |
|
js-tokens
npm
|
Transitive | 9.0.1 | 10.0.0 | 1 behind | — | MIT |
|
mime-types
npm
|
Transitive | 3.0.1 | 3.0.2 | 1 behind | — | MIT |
|
minipass
npm
|
Transitive | 7.1.2 | 7.1.3 | 1 behind | — | ISC |
|
path-key
npm
|
Transitive | 3.1.1 | 4.0.0 | 1 behind | — | MIT |
|
path-scurry
npm
|
Transitive | 2.0.1 | 2.0.2 | 1 behind | — | BlueOak-1.0.0 |
|
pathval
npm
|
Transitive | 2.0.0 | 2.0.1 | 1 behind | — | MIT |
|
shebang-regex
npm
|
Transitive | 3.0.0 | 4.0.0 | 1 behind | — | MIT |
|
statuses
npm
|
Transitive | 2.0.1 | 2.0.2 | 1 behind | — | MIT |
|
strip-ansi
npm
|
Transitive | 7.1.2 | 7.2.0 | 1 behind | — | MIT |
|
strip-literal
npm
|
Transitive | 3.0.0 | 3.1.0 | 1 behind | — | MIT |
|
tinyspy
npm
|
Transitive | 4.0.3 | 4.0.4 | 1 behind | — | MIT |
|
typedarray
npm
|
Transitive | 0.0.6 | 0.0.7 | 1 behind | — | MIT |
License Breakdown
MIT
255
ISC
18
Unknown
18
BlueOak-1.0.0
10
BSD-3-Clause
8
MIT OR Apache-2.0
8
Apache-2.0
3
Apache-2.0 AND MIT
2
GPL-3.0-or-later
2
0BSD
1
0BSD AND ISC AND MIT
1
Apache-2.0 AND BSD-2-Clause AND CC0-1.0 AND ISC AND MIT
1
BSD-3-Clause AND ISC AND MIT
1
GPL-2.0 OR MIT OR (GPL-2.0 AND MIT)
1
GPL-3.0
1
GPL-3.0-only OR MIT
1
ISC AND MIT
1
LicenseRef-scancode-dco-1.1 AND MIT
1
MIT AND Zlib
1
Python-2.0
1
Unlicense
1
CVE Severity
critical
0
high
5
medium
3
low
0
unknown
0