facebook/react: dependency drift, scanned

libyears behind

334.5

direct dependencies

Health55C 55★

Open upgrades

no bot PRs waiting

.nvmrc v20.19.0packageManager yarn@1.22.22

Beyond npm

Container base images and CI actions are dependencies too, and appear in no lockfile.

Actions22 pinned to something that can move

react/react/.github/workflows/shared_check_maintainer.ymlmain

tsickert/discord-webhook86dc739 pinned

actions/cachev4

actions/upload-artifactv4

actions/checkoutv4

actions/cachev4

actions/setup-nodev4

react/react/.github/workflows/compiler_prereleases.ymlmain

actions/setup-nodev4

actions/cachev4

actions/checkoutv4

dtolnay/rust-toolchainstable

rust-lang/crates-io-auth-actionv1

actions/checkoutv4

dtolnay/rust-toolchainstable

actions/setup-nodev4

actions/checkoutv4

dtolnay/rust-toolchainstable

actions/cachev4

actions/setup-nodev4

actions/cachev4

A tag or branch can be moved by whoever controls the action. Only a full commit SHA cannot, which is what GitHub’s own hardening guide asks for.

Direct dependencies

112 resolved

Ordered by attention: staleness, maintenance and security, each shown beside the headline so the number can be argued with.

PackageVersionBehindYearsAttention

rimrafdev · wants ^3.0.0

3.0.0

→ 6.1.3

3 major6.51

58stale 100 · maint 30 · sec 0

mkdirpdev · wants ^0.5.1

0.5.5

→ 3.0.1

3 major3.06

56stale 100 · maint 25 · sec 0

to-fast-propertiesdev · wants ^2.0.0

2.0.0

→ 4.0.0

2 major4.16

56stale 100 · maint 25 · sec 0

cli-tabledev · wants ^0.3.1

0.3.1

→ 0.3.11

10 patch7.12

54stale 95 · maint 25 · sec 0

eslint-config-prettierdev · wants ^6.9.0

6.9.0

→ 10.1.8

4 major5.56

51stale 100 · maint 10 · sec 0

eslint-plugin-reactdev · wants ^6.7.1

6.10.3

→ 7.37.5

1 major8.04

51stale 100 · maint 10 · sec 0

glob-streamdev · wants ^6.1.0

6.1.0

→ 8.0.3

2 major8.26

51stale 100 · maint 10 · sec 0

@babel/clidev · wants ^7.10.5

7.10.5

→ 8.0.5

1 major5.98

48stale 100 · maint 0 · sec 0

@babel/code-framedev · wants ^7.10.4

7.12.13

→ 8.0.0

1 major5.36

48stale 100 · maint 0 · sec 0

@babel/helper-module-importsdev · wants ^7.10.4

7.10.4

→ 8.0.0

1 major5.96

48stale 100 · maint 0 · sec 0

@babel/parserdev · wants ^7.11.3

7.14.3

→ 8.0.5

1 major5.14

48stale 100 · maint 0 · sec 0

@babel/plugin-external-helpersdev · wants ^7.10.4

7.10.4

→ 8.0.1

1 major5.96

48stale 100 · maint 0 · sec 0

@babel/plugin-syntax-typescriptdev · wants ^7.14.5

7.14.5

→ 8.0.3

1 major5.05

48stale 100 · maint 0 · sec 0

@babel/plugin-transform-arrow-functionsdev · wants ^7.10.4

7.10.4

→ 8.0.1

1 major5.96

48stale 100 · maint 0 · sec 0

@babel/plugin-transform-block-scoped-functionsdev · wants ^7.10.4

7.10.4

→ 8.0.1

1 major5.96

48stale 100 · maint 0 · sec 0

@babel/plugin-transform-block-scopingdev · wants ^7.11.1

7.11.1

→ 8.0.5

1 major5.87

48stale 100 · maint 0 · sec 0

@babel/plugin-transform-destructuringdev · wants ^7.10.4

7.10.4

→ 8.0.5

1 major5.96

48stale 100 · maint 0 · sec 0

@babel/plugin-transform-for-ofdev · wants ^7.10.4

7.10.4

→ 8.0.1

1 major5.96

48stale 100 · maint 0 · sec 0

@babel/plugin-transform-literalsdev · wants ^7.10.4

7.10.4

→ 8.0.1

1 major5.96

48stale 100 · maint 0 · sec 0

@babel/plugin-transform-modules-commonjsdev · wants ^7.10.4

7.10.4

→ 8.0.1

1 major5.96

48stale 100 · maint 0 · sec 0

@babel/plugin-transform-object-superdev · wants ^7.10.4

7.10.4

→ 8.0.1

1 major5.96

48stale 100 · maint 0 · sec 0

@babel/plugin-transform-parametersdev · wants ^7.10.5

7.10.5

→ 8.0.5

1 major5.92

48stale 100 · maint 0 · sec 0

@babel/plugin-transform-shorthand-propertiesdev · wants ^7.10.4

7.10.4

→ 8.0.1

1 major5.96

48stale 100 · maint 0 · sec 0

@babel/plugin-transform-spreaddev · wants ^7.11.0

7.11.0

→ 8.0.5

1 major5.88

48stale 100 · maint 0 · sec 0

@babel/plugin-transform-template-literalsdev · wants ^7.10.5

7.10.5

→ 8.0.1

1 major5.92

48stale 100 · maint 0 · sec 0

@babel/preset-flowdev · wants ^7.10.4

7.10.4

→ 8.0.1

1 major5.96

48stale 100 · maint 0 · sec 0

@babel/traversedev · wants ^7.11.0

7.11.0

→ 8.0.5

1 major5.94

48stale 100 · maint 0 · sec 0

@rollup/plugin-commonjsdev · wants ^24.0.1

24.0.1

→ 29.0.3

5 major3.35

48stale 100 · maint 0 · sec 0

@typescript-eslint/eslint-plugindev · wants ^6.21.0

6.21.0

→ 8.70.0

2 major2.55

48stale 100 · maint 0 · sec 0

@typescript-eslint/parserdev · wants ^6.21.0

6.21.0

→ 8.70.0

2 major2.55

48stale 100 · maint 0 · sec 0

chalkdev · wants ^3.0.0

3.0.0

→ 6.0.0

3 major6.71

48stale 100 · maint 0 · sec 0

core-jsdev · wants ^3.6.4

3.6.4

→ 3.50.0

44 minor6.56

48stale 100 · maint 0 · sec 0

eslintdev · wants ^7.7.0

7.32.0

→ 10.10.0

3 major5.07

48stale 100 · maint 0 · sec 0

eslint-plugin-eslint-plugindev · wants ^3.5.3

3.5.3

→ 7.6.2

4 major5.05

48stale 100 · maint 0 · sec 0

filesizedev · wants ^6.0.1

6.0.1

→ 11.0.23

5 major6.67

48stale 100 · maint 0 · sec 0

flow-bindev · wants ^0.317.0

0.317.0

→ 0.331.0

12 major0.22

48stale 100 · maint 0 · sec 0

globdev · wants ^7.1.6

7.1.6

→ 13.0.6

6 major6.29

48stale 100 · maint 0 · sec 0

google-closure-compilerdev · wants ^20230206.0.0

20230206.0.0

→ 20260909.0.0

30620 major3.55

48stale 100 · maint 0 · sec 0

minimatchdev · wants ^3.0.4

3.0.4

→ 10.2.6

7 major9.22

48stale 100 · maint 0 · sec 0

semverdev · wants ^7.1.1

7.1.1

→ 7.8.5

7 minor6.51

48stale 99 · maint 0 · sec 0

through2dev · wants ^3.0.1

3.0.1

→ 5.0.11

2 major7.41

48stale 100 · maint 0 · sec 0

tmpdev · wants ^0.1.0

0.1.0

→ 0.2.7

1 major7.17

48stale 100 · maint 0 · sec 0

undicidev · wants ^5.28.4

5.28.4

→ 8.10.2

3 major2.34

48stale 100 · maint 0 · sec 0

yargsdev · wants ^15.3.1

15.3.1

→ 18.1.0

3 major6.36

48stale 100 · maint 0 · sec 0

gzip-sizedev · wants ^5.1.1

5.1.1

→ 7.0.0

2 major2.51

46stale 80 · maint 25 · sec 0

shelljsdev · wants ^0.8.5

0.8.5

→ 0.10.0

2 major3.34

46stale 90 · maint 10 · sec 0

web-streams-polyfilldev · wants ^3.1.1

3.1.1

→ 4.3.0

1 major4.69

46stale 96 · maint 0 · sec 0

@babel/plugin-transform-react-jsx-sourcedev · wants ^7.10.5

7.10.5

→ 7.29.7

19 minor5.86

45stale 94 · maint 0 · sec 0

typescriptdev · wants ^5.4.3

5.7.3

→ 7.0.2

2 major1.49

44stale 74 · maint 0 · sec 0

eslint-plugin-jestdev · wants 28.4.0

28.4.0

→ 29.16.6

1 major2.32

37stale 77 · maint 0 · sec 0

@babel/preset-reactdev · wants ^7.23.3

7.23.3

→ 8.0.1

1 major2.60

36stale 74 · maint 0 · sec 0

@babel/plugin-transform-react-jsx-developmentdev · wants ^7.22.5

7.22.5

→ 8.0.1

1 major3.02

35stale 73 · maint 0 · sec 0

@rollup/plugin-babeldev · wants ^6.0.3

6.0.3

→ 7.1.0

1 major3.51

35stale 73 · maint 0 · sec 0

rollupdev · wants ^3.29.5

3.29.5

→ 4.63.2

1 major1.93

35stale 72 · maint 0 · sec 0

@babel/plugin-syntax-jsxdev · wants ^7.23.3

7.23.3

→ 8.0.1

1 major2.60

34stale 71 · maint 0 · sec 0

@babel/plugin-transform-react-jsxdev · wants ^7.23.4

7.23.4

→ 8.0.1

1 major2.57

34stale 71 · maint 0 · sec 0

@rollup/plugin-node-resolvedev · wants ^15.0.1

15.0.1

→ 16.0.3

1 major2.98

34stale 70 · maint 0 · sec 0

jest-snapshot-serializer-rawdev · wants ^1.2.0

1.2.0

→ 2.0.0

1 major2.22

33stale 52 · maint 25 · sec 0

@babel/coredev · wants ^7.11.1

7.24.5

→ 8.0.5

1 major2.13

32stale 66 · maint 0 · sec 0

eslint-plugin-ft-flowdev · wants ^2.0.3

2.0.3

→ 3.0.11

1 major1.66

30stale 45 · maint 25 · sec 0

@rollup/plugin-replacedev · wants ^5.0.2

5.0.2

→ 6.0.3

1 major2.87

28stale 59 · maint 0 · sec 0

minimistdev · wants ^1.2.3

1.2.3

→ 1.2.8

5 patch2.92

27stale 40 · maint 25 · sec 0

@babel/plugin-proposal-class-propertiesdev · wants ^7.10.4 · deprecated

7.10.4

current—

26stale 0 · maint 80 · sec 0

@babel/plugin-proposal-object-rest-spreaddev · wants ^7.11.0 · deprecated

7.11.0

current—

26stale 0 · maint 80 · sec 0

@babel/plugin-transform-class-propertiesdev · wants ^7.25.9

7.25.9

→ 8.0.1

1 major1.65

26stale 54 · maint 0 · sec 0

@babel/plugin-transform-classesdev · wants ^7.10.4

7.25.9

→ 8.0.5

1 major1.65

26stale 54 · maint 0 · sec 0

@babel/preset-typescriptdev · wants ^7.26.0

7.26.0

→ 8.0.1

1 major1.64

26stale 54 · maint 0 · sec 0

coffee-scriptdev · wants ^1.12.7 · deprecated

1.12.7

current—

26stale 0 · maint 80 · sec 0

prop-typesdev · wants ^15.6.2

15.7.2

→ 15.8.1

1 minor2.89

26stale 38 · maint 25 · sec 0

create-react-classdev · wants ^15.6.3

15.6.3

→ 15.7.0

1 minor2.71

25stale 35 · maint 25 · sec 0

@babel/preset-envdev · wants ^7.26.9

7.26.9

→ 8.0.5

1 major1.34

24stale 50 · maint 0 · sec 0

artdev · wants 0.10.1

0.10.1

→ 0.10.3

2 patch2.52

23stale 32 · maint 25 · sec 0

error-stack-parserdev · wants ^2.0.6

2.0.6

→ 2.1.4

1 minor2.42

23stale 32 · maint 25 · sec 0

@babel/plugin-transform-private-methodsdev · wants ^7.10.4

7.27.1

→ 8.0.1

1 major1.13

22stale 45 · maint 0 · sec 0

confusing-browser-globalsdev · wants ^1.0.9

1.0.9

→ 1.0.11

2 patch2.24

22stale 29 · maint 25 · sec 0

prettierdev · wants ^3.3.3

3.3.3

→ 3.9.6

6 minor2.02

20stale 42 · maint 0 · sec 0

rollup-plugin-dtsdev · wants ^6.1.1

6.1.1

→ 6.5.1

4 minor2.21

19stale 39 · maint 0 · sec 0

eslint-plugin-babeldev · wants ^5.3.0

5.3.0

→ 5.3.1

1 patch1.62

18stale 20 · maint 25 · sec 0

abortcontroller-polyfilldev · wants ^1.7.5

1.7.5

→ 1.7.8

3 patch2.17

17stale 29 · maint 10 · sec 0

rollup-plugin-prettierdev · wants ^4.1.1

4.1.1

→ 4.2.0

1 minor2.73

17stale 36 · maint 0 · sec 0

rollup-plugin-strip-bannerdev · wants ^3.0.0

3.0.0

→ 3.1.0

1 minor0.97

15stale 15 · maint 25 · sec 0

babel-plugin-syntax-hermes-parserdev · wants ^0.36.1

0.36.1

→ 0.37.0

1 major0.19

13stale 27 · maint 0 · sec 0

flow-remove-typesdev · wants ^2.317.0

2.317.0

→ 2.331.0

12 minor0.22

13stale 27 · maint 0 · sec 0

hermes-eslintdev · wants ^0.36.1

0.36.1

→ 0.37.0

1 major0.19

13stale 27 · maint 0 · sec 0

hermes-parserdev · wants ^0.36.1

0.36.1

→ 0.37.0

1 major0.19

13stale 27 · maint 0 · sec 0

prettier-plugin-hermes-parserdev · wants ^0.36.1

0.36.1

→ 0.37.0

1 major0.15

13stale 27 · maint 0 · sec 0

eslint-plugin-no-function-declare-after-returndev · wants ^1.0.0

1.0.0

→ 1.1.0

1 minor0.10

10stale 4 · maint 25 · sec 0

@babel/helper-define-mapdev · wants ^7.18.6

7.18.6

current—

8stale 0 · maint 25 · sec 0

@babel/plugin-syntax-dynamic-importdev · wants ^7.8.3

7.8.3

current—

8stale 0 · maint 25 · sec 0

@babel/plugin-syntax-import-metadev · wants ^7.10.4

7.10.4

current—

8stale 0 · maint 25 · sec 0

@rollup/plugin-typescriptdev · wants ^12.1.2

12.1.2

→ 12.3.0

2 minor0.85

8stale 16 · maint 0 · sec 0

@types/invariantdev · wants ^2.2.35

2.2.37

current—

8stale 0 · maint 25 · sec 0

babel-plugin-syntax-trailing-function-commasdev · wants ^6.5.0

6.22.0

current—

8stale 0 · maint 25 · sec 0

busboydev · wants ^1.6.0

1.6.0

current—

8stale 0 · maint 25 · sec 0

eslint-plugin-esdev · wants ^4.1.0

4.1.0

current—

8stale 0 · maint 25 · sec 0

eslint-plugin-no-for-of-loopsdev · wants ^1.0.0

1.0.1

current—

8stale 0 · maint 25 · sec 0

fbjs-scriptsdev · wants ^3.0.1

3.0.1

current—

8stale 0 · maint 25 · sec 0

jest-silent-reporterdev · wants ^0.6.0

0.6.0

current—

8stale 0 · maint 25 · sec 0

ncpdev · wants ^2.0.0

2.0.0

current—

8stale 0 · maint 25 · sec 0

random-seeddev · wants ^0.3.0

0.3.0

current—

8stale 0 · maint 25 · sec 0

react-lifecycles-compatdev · wants ^3.0.4

3.0.4

current—

8stale 0 · maint 25 · sec 0

signedsourcedev · wants ^2.0.0

2.0.0

current—

8stale 0 · maint 25 · sec 0

targzdev · wants ^1.0.1

1.0.1

current—

8stale 0 · maint 25 · sec 0

tsupdev · wants ^8.4.0

8.4.0

→ 8.5.1

1 minor0.71

6stale 12 · maint 0 · sec 0

babel-jestdev · wants ^30.4.1

30.4.1

→ 30.5.1

1 minor0.31

3stale 7 · maint 0 · sec 0

flow-typeddev · wants ^4.1.1

4.1.1

current—

3stale 0 · maint 10 · sec 0

jestdev · wants ^30.4.1

30.4.2

→ 30.5.1

1 minor0.30

3stale 7 · maint 0 · sec 0

jest-clidev · wants ^30.4.1

30.4.2

→ 30.5.1

1 minor0.30

3stale 7 · maint 0 · sec 0

jest-diffdev · wants ^30.4.1

30.4.1

→ 30.5.1

1 minor0.31

3stale 7 · maint 0 · sec 0

jest-environment-jsdomdev · wants ^30.4.1

30.4.1

→ 30.5.1

1 minor0.31

3stale 7 · maint 0 · sec 0

pretty-formatdev · wants ^30.4.1

30.4.1

→ 30.5.1

1 minor0.31

3stale 7 · maint 0 · sec 0

eslint-plugin-react-internaldev · wants link:./scripts/eslint-rules

0.0.0

current—

0stale 0 · maint 0 · sec 0

See your own repositories like thisFive private repositories free, public ones always. Nothing is written to your code.

Start free with GitHubnpx libyears

Public repositories, read from their manifests and lockfiles through the GitHub API and rescanned daily by the same pipeline every account uses. They belong to their maintainers, not to a customer of ours. Versions come from lockfiles, release dates from the npm registry, advisories from OSV.