facebook/react: dependency drift, scanned

libyears behind

338.0

direct dependencies

Health55C 55★

Open upgrades

from dependabot

.nvmrc v20.19.0packageManager yarn@1.22.22

Beyond npm

Container base images and CI actions are dependencies too, and appear in no lockfile.

Actions22 pinned to something that can move

tsickert/discord-webhook86dc739 pinned

react/react/.github/workflows/shared_check_maintainer.ymlmain

actions/cachev4

actions/checkoutv4

actions/setup-nodev4

actions/upload-artifactv4

actions/cachev4

react/react/.github/workflows/compiler_prereleases.ymlmain

actions/cachev4

actions/setup-nodev4

actions/checkoutv4

rust-lang/crates-io-auth-actionv1

dtolnay/rust-toolchainstable

actions/setup-nodev4

actions/checkoutv4

dtolnay/rust-toolchainstable

actions/cachev4

dtolnay/rust-toolchainstable

actions/checkoutv4

actions/cachev4

actions/setup-nodev4

A tag or branch can be moved by whoever controls the action. Only a full commit SHA cannot, which is what GitHub’s own hardening guide asks for.

Direct dependencies

111 resolved

Ordered by attention: staleness, maintenance and security, each shown beside the headline so the number can be argued with.

PackageVersionBehindYearsAttention

rimrafdev · wants ^3.0.0

3.0.0

→ 6.1.3

3 major6.51

58stale 100 · maint 30 · sec 0

mkdirpdev · wants ^0.5.1

0.5.5

→ 3.0.1

3 major3.06

56stale 100 · maint 25 · sec 0

to-fast-propertiesdev · wants ^2.0.0

2.0.0

→ 4.0.0

2 major4.16

56stale 100 · maint 25 · sec 0

cli-tabledev · wants ^0.3.1

0.3.1

→ 0.3.11

10 patch7.12

54stale 95 · maint 25 · sec 0

eslint-config-prettierdev · wants ^6.9.0

6.9.0

→ 10.1.8

4 major5.56

51stale 100 · maint 10 · sec 0

eslint-plugin-reactdev · wants ^6.7.1

6.10.3

→ 7.37.5

1 major8.04

51stale 100 · maint 10 · sec 0

@babel/clidev · wants ^7.10.5

7.10.5

→ 8.0.6

1 major6.18

48stale 100 · maint 0 · sec 0

@babel/code-framedev · wants ^7.10.4

7.12.13

→ 8.0.6

1 major5.62

48stale 100 · maint 0 · sec 0

@babel/helper-module-importsdev · wants ^7.10.4

7.10.4

→ 8.0.0

1 major5.96

48stale 100 · maint 0 · sec 0

@babel/parserdev · wants ^7.11.3

7.14.3

→ 8.0.8

1 major5.39

48stale 100 · maint 0 · sec 0

@babel/plugin-external-helpersdev · wants ^7.10.4

7.10.4

→ 8.0.1

1 major5.96

48stale 100 · maint 0 · sec 0

@babel/plugin-syntax-typescriptdev · wants ^7.14.5

7.14.5

→ 8.0.3

1 major5.05

48stale 100 · maint 0 · sec 0

@babel/plugin-transform-arrow-functionsdev · wants ^7.10.4

7.10.4

→ 8.0.1

1 major5.96

48stale 100 · maint 0 · sec 0

@babel/plugin-transform-block-scoped-functionsdev · wants ^7.10.4

7.10.4

→ 8.0.1

1 major5.96

48stale 100 · maint 0 · sec 0

@babel/plugin-transform-block-scopingdev · wants ^7.11.1

7.11.1

→ 8.0.8

1 major6.17

48stale 100 · maint 0 · sec 0

@babel/plugin-transform-destructuringdev · wants ^7.10.4

7.10.4

→ 8.0.5

1 major6.20

48stale 100 · maint 0 · sec 0

@babel/plugin-transform-for-ofdev · wants ^7.10.4

7.10.4

→ 8.0.7

1 major6.27

48stale 100 · maint 0 · sec 0

@babel/plugin-transform-literalsdev · wants ^7.10.4

7.10.4

→ 8.0.1

1 major5.96

48stale 100 · maint 0 · sec 0

@babel/plugin-transform-modules-commonjsdev · wants ^7.10.4

7.10.4

→ 8.0.1

1 major5.96

48stale 100 · maint 0 · sec 0

@babel/plugin-transform-object-superdev · wants ^7.10.4

7.10.4

→ 8.0.1

1 major5.96

48stale 100 · maint 0 · sec 0

@babel/plugin-transform-parametersdev · wants ^7.10.5

7.10.5

→ 8.0.5

1 major6.16

48stale 100 · maint 0 · sec 0

@babel/plugin-transform-shorthand-propertiesdev · wants ^7.10.4

7.10.4

→ 8.0.1

1 major5.96

48stale 100 · maint 0 · sec 0

@babel/plugin-transform-spreaddev · wants ^7.11.0

7.11.0

→ 8.0.8

1 major6.11

48stale 100 · maint 0 · sec 0

@babel/plugin-transform-template-literalsdev · wants ^7.10.5

7.10.5

→ 8.0.1

1 major5.92

48stale 100 · maint 0 · sec 0

@babel/preset-flowdev · wants ^7.10.4

7.10.4

→ 8.0.1

1 major5.96

48stale 100 · maint 0 · sec 0

@babel/traversedev · wants ^7.11.0

7.11.0

→ 8.0.7

1 major6.19

48stale 100 · maint 0 · sec 0

@rollup/plugin-commonjsdev · wants ^24.0.1

24.0.1

→ 29.0.3

5 major3.35

48stale 100 · maint 0 · sec 0

@typescript-eslint/eslint-plugindev · wants ^6.21.0

6.21.0

→ 8.72.1

2 major2.68

48stale 100 · maint 0 · sec 0

@typescript-eslint/parserdev · wants ^6.21.0

6.21.0

→ 8.72.1

2 major2.68

48stale 100 · maint 0 · sec 0

chalkdev · wants ^3.0.0

3.0.0

→ 6.0.1

3 major6.88

48stale 100 · maint 0 · sec 0

core-jsdev · wants ^3.6.4

3.6.4

→ 3.51.0

44 minor6.56

48stale 100 · maint 0 · sec 0

eslintdev · wants ^7.7.0

7.32.0

→ 10.13.0

3 major5.17

48stale 100 · maint 0 · sec 0

eslint-plugin-eslint-plugindev · wants ^3.5.3

3.5.3

→ 7.6.2

4 major5.05

48stale 100 · maint 0 · sec 0

filesizedev · wants ^6.0.1

6.0.1

→ 11.0.29

5 major6.92

48stale 100 · maint 0 · sec 0

flow-bindev · wants ^0.317.0

0.317.0

→ 0.337.0

18 major0.35

48stale 100 · maint 0 · sec 0

globdev · wants ^7.1.6

7.1.6

→ 13.0.6

6 major6.29

48stale 100 · maint 0 · sec 0

glob-streamdev · wants ^6.1.0

6.1.0

→ 8.0.4

2 major9.63

48stale 100 · maint 0 · sec 0

google-closure-compilerdev · wants ^20230206.0.0

20230206.0.0

→ 20261025.0.0

30805 major3.67

48stale 100 · maint 0 · sec 0

minimatchdev · wants ^3.0.4

3.0.4

→ 10.2.6

7 major9.22

48stale 100 · maint 0 · sec 0

semverdev · wants ^7.1.1

7.1.1

→ 7.8.5

7 minor6.51

48stale 99 · maint 0 · sec 0

through2dev · wants ^3.0.1

3.0.1

→ 5.0.12

2 major7.41

48stale 100 · maint 0 · sec 0

tmpdev · wants ^0.1.0

0.1.0

→ 0.2.7

1 major7.17

48stale 100 · maint 0 · sec 0

undicidev · wants ^5.28.4

5.28.4

→ 8.12.3

3 major2.53

48stale 100 · maint 0 · sec 0

yargsdev · wants ^15.3.1

15.3.1

→ 18.2.0

3 major6.52

48stale 100 · maint 0 · sec 0

gzip-sizedev · wants ^5.1.1

5.1.1

→ 7.0.0

2 major2.51

46stale 80 · maint 25 · sec 0

shelljsdev · wants ^0.8.5

0.8.5

→ 0.10.0

2 major3.34

46stale 90 · maint 10 · sec 0

web-streams-polyfilldev · wants ^3.1.1

3.1.1

→ 4.3.0

1 major4.69

46stale 96 · maint 0 · sec 0

@babel/plugin-transform-react-jsx-sourcedev · wants ^7.10.5

7.10.5

→ 7.29.7

19 minor5.86

45stale 94 · maint 0 · sec 0

typescriptdev · wants ^5.4.3

5.7.3

→ 7.0.2

2 major1.49

44stale 74 · maint 0 · sec 0

@rollup/plugin-node-resolvedev · wants ^15.0.1

15.0.1

→ 16.0.3

1 major2.98

37stale 70 · maint 10 · sec 0

eslint-plugin-jestdev · wants 28.4.0

28.4.0

→ 29.17.0

1 major2.44

37stale 78 · maint 0 · sec 0

@babel/preset-reactdev · wants ^7.23.3

7.23.3

→ 8.0.1

1 major2.60

36stale 74 · maint 0 · sec 0

rollupdev · wants ^3.29.5

3.29.5

→ 4.65.1

1 major2.06

36stale 74 · maint 0 · sec 0

@babel/plugin-transform-react-jsx-developmentdev · wants ^7.22.5

7.22.5

→ 8.0.1

1 major3.02

35stale 73 · maint 0 · sec 0

@rollup/plugin-babeldev · wants ^6.0.3

6.0.3

→ 7.1.0

1 major3.51

35stale 73 · maint 0 · sec 0

@babel/plugin-syntax-jsxdev · wants ^7.23.3

7.23.3

→ 8.0.1

1 major2.60

34stale 71 · maint 0 · sec 0

@babel/plugin-transform-react-jsxdev · wants ^7.23.4

7.23.4

→ 8.0.1

1 major2.57

34stale 71 · maint 0 · sec 0

@babel/coredev · wants ^7.11.1

7.24.5

→ 8.0.9

1 major2.44

33stale 69 · maint 0 · sec 0

jest-snapshot-serializer-rawdev · wants ^1.2.0

1.2.0

→ 2.0.0

1 major2.22

33stale 52 · maint 25 · sec 0

eslint-plugin-ft-flowdev · wants ^2.0.3

2.0.3

→ 3.0.11

1 major1.66

30stale 45 · maint 25 · sec 0

@rollup/plugin-replacedev · wants ^5.0.2

5.0.2

→ 6.0.3

1 major2.87

28stale 59 · maint 0 · sec 0

@babel/plugin-transform-classesdev · wants ^7.10.4

7.25.9

→ 8.0.8

1 major1.88

27stale 57 · maint 0 · sec 0

@babel/preset-typescriptdev · wants ^7.26.0

7.26.0

→ 8.0.7

1 major1.95

27stale 57 · maint 0 · sec 0

minimistdev · wants ^1.2.3

1.2.3

→ 1.2.8

5 patch2.92

27stale 40 · maint 25 · sec 0

@babel/plugin-proposal-class-propertiesdev · wants ^7.10.4 · deprecated

7.10.4

current—

26stale 0 · maint 80 · sec 0

@babel/plugin-proposal-object-rest-spreaddev · wants ^7.11.0 · deprecated

7.11.0

current—

26stale 0 · maint 80 · sec 0

@babel/plugin-transform-class-propertiesdev · wants ^7.25.9

7.25.9

→ 8.0.1

1 major1.65

26stale 54 · maint 0 · sec 0

@babel/preset-envdev · wants ^7.26.9

7.26.9

→ 8.0.7

1 major1.64

26stale 54 · maint 0 · sec 0

coffee-scriptdev · wants ^1.12.7 · deprecated

1.12.7

current—

26stale 0 · maint 80 · sec 0

prop-typesdev · wants ^15.6.2

15.7.2

→ 15.8.1

1 minor2.89

26stale 38 · maint 25 · sec 0

create-react-classdev · wants ^15.6.3

15.6.3

→ 15.7.0

1 minor2.71

25stale 35 · maint 25 · sec 0

artdev · wants 0.10.1

0.10.1

→ 0.10.3

2 patch2.52

23stale 32 · maint 25 · sec 0

error-stack-parserdev · wants ^2.0.6

2.0.6

→ 2.1.4

1 minor2.42

23stale 32 · maint 25 · sec 0

@babel/plugin-transform-private-methodsdev · wants ^7.10.4

7.27.1

→ 8.0.1

1 major1.13

22stale 45 · maint 0 · sec 0

confusing-browser-globalsdev · wants ^1.0.9

1.0.9

→ 1.0.11

2 patch2.24

22stale 29 · maint 25 · sec 0

prettierdev · wants ^3.3.3

3.3.3

→ 3.9.10

6 minor2.24

22stale 45 · maint 0 · sec 0

rollup-plugin-dtsdev · wants ^6.1.1

6.1.1

→ 6.5.1

4 minor2.21

19stale 39 · maint 0 · sec 0

eslint-plugin-babeldev · wants ^5.3.0

5.3.0

→ 5.3.1

1 patch1.62

18stale 20 · maint 25 · sec 0

rollup-plugin-prettierdev · wants ^4.1.1

4.1.1

→ 4.2.0

1 minor2.73

17stale 36 · maint 0 · sec 0

rollup-plugin-strip-bannerdev · wants ^3.0.0

3.0.0

→ 3.1.0

1 minor0.97

15stale 15 · maint 25 · sec 0

babel-plugin-syntax-hermes-parserdev · wants ^0.36.1

0.36.1

→ 0.37.0

1 major0.19

13stale 27 · maint 0 · sec 0

flow-remove-typesdev · wants ^2.317.0

2.317.0

→ 2.337.0

18 minor0.35

13stale 28 · maint 0 · sec 0

hermes-eslintdev · wants ^0.36.1

0.36.1

→ 0.37.0

1 major0.19

13stale 27 · maint 0 · sec 0

hermes-parserdev · wants ^0.36.1

0.36.1

→ 0.37.0

1 major0.19

13stale 27 · maint 0 · sec 0

prettier-plugin-hermes-parserdev · wants ^0.36.1

0.36.1

→ 0.37.0

1 major0.15

13stale 27 · maint 0 · sec 0

@rollup/plugin-typescriptdev · wants ^12.1.2

12.1.2

→ 12.3.1

2 minor0.85

11stale 16 · maint 10 · sec 0

eslint-plugin-no-function-declare-after-returndev · wants ^1.0.0

1.0.0

→ 1.1.0

1 minor0.10

10stale 4 · maint 25 · sec 0

@babel/helper-define-mapdev · wants ^7.18.6

7.18.6

current—

8stale 0 · maint 25 · sec 0

@babel/plugin-syntax-dynamic-importdev · wants ^7.8.3

7.8.3

current—

8stale 0 · maint 25 · sec 0

@babel/plugin-syntax-import-metadev · wants ^7.10.4

7.10.4

current—

8stale 0 · maint 25 · sec 0

@types/invariantdev · wants ^2.2.35

2.2.37

current—

8stale 0 · maint 25 · sec 0

babel-plugin-syntax-trailing-function-commasdev · wants ^6.5.0

6.22.0

current—

8stale 0 · maint 25 · sec 0

busboydev · wants ^1.6.0

1.6.0

current—

8stale 0 · maint 25 · sec 0

eslint-plugin-esdev · wants ^4.1.0

4.1.0

current—

8stale 0 · maint 25 · sec 0

eslint-plugin-no-for-of-loopsdev · wants ^1.0.0

1.0.1

current—

8stale 0 · maint 25 · sec 0

fbjs-scriptsdev · wants ^3.0.1

3.0.1

current—

8stale 0 · maint 25 · sec 0

jest-silent-reporterdev · wants ^0.6.0

0.6.0

current—

8stale 0 · maint 25 · sec 0

ncpdev · wants ^2.0.0

2.0.0

current—

8stale 0 · maint 25 · sec 0

random-seeddev · wants ^0.3.0

0.3.0

current—

8stale 0 · maint 25 · sec 0

react-lifecycles-compatdev · wants ^3.0.4

3.0.4

current—

8stale 0 · maint 25 · sec 0

signedsourcedev · wants ^2.0.0

2.0.0

current—

8stale 0 · maint 25 · sec 0

targzdev · wants ^1.0.1

1.0.1

current—

8stale 0 · maint 25 · sec 0

tsupdev · wants ^8.4.0

8.4.0

→ 9.0.0

1 minor0.71

6stale 12 · maint 0 · sec 0

babel-jestdev · wants ^30.4.1

30.4.1

→ 30.5.2

1 minor0.36

3stale 7 · maint 0 · sec 0

flow-typeddev · wants ^4.1.1

4.1.1

current—

3stale 0 · maint 10 · sec 0

jestdev · wants ^30.4.1

30.4.2

→ 30.5.2

1 minor0.36

3stale 7 · maint 0 · sec 0

jest-clidev · wants ^30.4.1

30.4.2

→ 30.5.2

1 minor0.36

3stale 7 · maint 0 · sec 0

jest-diffdev · wants ^30.4.1

30.4.1

→ 30.5.2

1 minor0.36

3stale 7 · maint 0 · sec 0

jest-environment-jsdomdev · wants ^30.4.1

30.4.1

→ 30.5.2

1 minor0.36

3stale 7 · maint 0 · sec 0

pretty-formatdev · wants ^30.4.1

30.4.1

→ 30.5.1

1 minor0.32

3stale 7 · maint 0 · sec 0

eslint-plugin-react-internaldev · wants link:./scripts/eslint-rules

0.0.0

current—

0stale 0 · maint 0 · sec 0

See your own repositories like thisFive private repositories free, public ones always. Nothing is written to your code.

Start free with GitHubnpx libyears

Public repositories, read from their manifests and lockfiles through the GitHub API and rescanned daily by the same pipeline every account uses. They belong to their maintainers, not to a customer of ours. Versions come from lockfiles, release dates from the npm registry, advisories from OSV.