Skip to content
Tools / zitadel / Dependencies

Dependency Analysis

zitadel

Direct and transitive dependency freshness, license, and CVE exposure from the latest SBOM.

67% Freshness
3507 Dependencies
929 Outdated
0 Stale
8.2 Avg Behind

Dependency List

Latest release v3.4.10

Dependency Type Current Latest Behind CVE License
minimatch
npm
Transitive 9.0.3 10.2.5 38 behind 3 high ISC
@babel/plugin-transform-modules-systemjs
npm
Transitive 7.25.7 7.29.7 22 behind 1 high MIT
picomatch
npm
Transitive 2.3.1 4.0.4 9 behind 2 high MIT
serialize-javascript
npm
Transitive 6.0.2 7.0.5 6 behind 2 high BSD-3-Clause
cross-spawn
npm
Transitive 7.0.3 7.0.6 3 behind 1 high MIT
fast-uri
npm
Transitive 3.1.0 3.1.2 2 behind 2 high BSD-3-Clause
github.com/russellhaering/goxmldsig
golang
Transitive v1.5.0 1 high Apache-2.0
postcss
npm
Transitive 8.4.31 8.5.15 34 behind 1 medium MIT
@babel/helpers
npm
Transitive 7.25.7 7.29.7 32 behind 1 medium MIT
brace-expansion
npm
Transitive 1.1.11 5.0.6 18 behind 2 medium MIT
hono
npm
Transitive 4.12.15 4.12.23 8 behind 2 medium MIT
ajv
npm
Transitive 8.17.1 8.20.0 4 behind 1 medium MIT
ip-address
npm
Transitive 10.1.0 10.2.0 2 behind 1 medium MIT
@babel/runtime
npm
Transitive 7.25.7 1 medium MIT
github.com/gorilla/csrf
golang
Direct v1.7.2 2 medium BSD-3-Clause
golang.org/x/crypto
golang
Transitive v0.36.0 3 medium BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang
golang.org/x/crypto
golang
Direct v0.36.0 3 medium BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang
google.golang.org/protobuf
golang
Direct 1.26.0 1 medium BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang
webpack
npm
Transitive 5.103.0 5.107.2 13 behind 2 low MIT
github.com/go-chi/chi/v5
golang
Transitive v5.2.2 1 unknown MIT

License Breakdown

MIT 2436
Unknown 338
Apache-2.0 291
ISC 149
BSD-3-Clause 79
BSD-2-Clause 54
Apache-2.0 AND MIT 19
BlueOak-1.0.0 15
Apache-2.0 AND BSD-3-Clause 14
BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang 14
MPL-2.0 14
BSD-2-Clause AND LGPL-2.0-only AND LGPL-2.1-only AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-scancode-other-permissive AND MIT AND MPL-2.0 10
CC0-1.0 AND MIT 8
ISC AND MIT 7
Apache-2.0 AND BSD-3-Clause AND MIT 4
Unlicense 4
Apache-2.0 AND BSD-2-Clause AND LGPL-2.0-only AND LGPL-2.1-only AND LGPL-3.0-only AND LGPL-3.0-or-later AND LicenseRef-scancode-other-permissive AND MIT AND MPL-2.0 3
Apache-2.0 OR (Apache-2.0 AND LGPL-3.0-only) 3
CC-BY-4.0 3
0BSD 2
0BSD AND ISC AND MIT 2
0BSD AND MIT 2
BSD-2-Clause AND BSD-2-Clause-Views 2
BSD-2-Clause AND BSD-3-Clause 2
BSD-3-Clause AND LicenseRef-scancode-generic-cla AND MIT 2
BSD-3-Clause AND LicenseRef-scancode-protobuf 2
BSD-3-Clause AND MIT 2
CC0-1.0 2
(Apache-2.0 AND LicenseRef-scancode-unknown-license-reference AND MIT) OR (Apache-2.0 AND LicenseRef-scancode-unknown-license-reference) 1
(BSD-3-Clause AND Apache-2.0) 1
(CC-BY-4.0 AND MIT) 1
(MIT OR CC0-1.0) 1
AFL-2.1 AND AFL-3.0 AND BSD-3-Clause 1
Apache-2.0 AND BSD-2-Clause 1
Apache-2.0 OR MPL-2.0 1
BSD-2-Clause AND CC0-1.0 AND ISC AND MIT 1
BSD-2-Clause AND JSON 1
BSD-3-Clause AND ISC 1
BSD-3-Clause AND ISC AND MIT 1
BSD-3-Clause OR GPL-2.0-only 1
CC-BY-3.0 1
CC-BY-3.0 AND MIT 1
CC0-1.0 OR MIT OR (CC0-1.0 AND MIT) 1
LicenseRef-scancode-dco-1.1 AND MIT 1
LicenseRef-scancode-public-domain-disclaimer 1
LicenseRef-scancode-unknown-license-reference AND MIT 1
MIT AND MIT-0 1
MIT AND WTFPL 1
MIT OR (CC0-1.0 AND MIT) 1
MIT-0 1
Python-2.0 1

CVE Severity

critical 0
high 7
medium 11
low 1
unknown 1

Beta — feedback welcome: [email protected]