9.9
direct dependencies10
from renovate and dependabotBeyond npm
Container base images and CI actions are dependencies too, and appear in no lockfile.
Actions4 pinned to something that can move
actions/checkoutv7
github/codeql-action/initv4.39.1
github/codeql-action/autobuildv4.39.1
github/codeql-action/analyzev4.39.1
A tag or branch can be moved by whoever controls the action. Only a full commit SHA cannot, which is what GitHub’s own hardening guide asks for.
Direct dependencies
119 resolvedOrdered by attention: staleness, maintenance and security, each shown beside the headline so the number can be argued with.
PackageVersionBehindYearsAttention
markdown-tabledev · wants 2.0.0
2.0.0
→ 3.0.4
47stale 82 · maint 25 · sec 0
cookieprod · wants 0.7.2
0.7.2
→ 2.0.1
43stale 71 · maint 0 · sec 0
5.9.3
→ 7.0.2
35stale 59 · maint 0 · sec 0
natsdev · wants 2.29.3 · deprecated
2.29.3
26stale 0 · maint 80 · sec 0
content-typeprod · wants 2.1.0
2.1.0
→ 3.1.1
17stale 29 · maint 0 · sec 0
type-isprod · wants 2.1.0
2.1.0
→ 3.0.0
17stale 29 · maint 0 · sec 0
class-transformerprod · wants 0.5.1
0.5.1
10stale 0 · maint 25 · sec 0
encodeurlprod · wants 2.0.0
2.0.0
10stale 0 · maint 25 · sec 0
fast-querystringprod · wants 1.1.2
1.1.2
10stale 0 · maint 25 · sec 0
fast-safe-stringifyprod · wants 2.1.1
2.1.1
10stale 0 · maint 25 · sec 0
iterareprod · wants 1.2.1
1.2.1
10stale 0 · maint 25 · sec 0
object-hashprod · wants 3.0.0
3.0.0
10stale 0 · maint 25 · sec 0
on-finishedprod · wants 2.4.1
2.4.1
→ 2.4.2
10stale 0 · maint 25 · sec 0
reflect-metadataprod · wants 0.2.2
0.2.2
10stale 0 · maint 25 · sec 0
uidprod · wants 2.0.2
2.0.2
10stale 0 · maint 25 · sec 0
5.1.0
→ 5.1.2
8stale 14 · maint 0 · sec 0
coverallsdev · wants 3.1.1
3.1.1
8stale 0 · maint 25 · sec 0
delete-emptydev · wants 3.0.0
3.0.0
8stale 0 · maint 25 · sec 0
fancy-logdev · wants 2.0.0
2.0.0
8stale 0 · maint 25 · sec 0
gulp-clang-formatdev · wants 1.0.27
1.0.27
8stale 0 · maint 25 · sec 0
gulp-cleandev · wants 0.4.0
0.4.0
8stale 0 · maint 25 · sec 0
gulp-sourcemapsdev · wants 3.0.0
3.0.0
8stale 0 · maint 25 · sec 0
gulp-typescriptdev · wants 5.0.1
5.0.1
8stale 0 · maint 25 · sec 0
gulp-watchdev · wants 5.0.1
5.0.1
8stale 0 · maint 25 · sec 0
kafkajsdev · wants 2.2.4
2.2.4
8stale 0 · maint 25 · sec 0
lerna-changelogdev · wants 2.2.0
2.2.0
8stale 0 · maint 25 · sec 0
rxjs-compatdev · wants 6.6.7
6.6.7
8stale 0 · maint 25 · sec 0
secure-json-parseprod · wants 4.1.0
4.1.0
→ 4.1.1
8stale 13 · maint 0 · sec 0
ts-nodedev · wants 10.9.2
10.9.2
8stale 0 · maint 25 · sec 0
tsconfig-pathsdev · wants 4.2.0
4.2.0
8stale 0 · maint 25 · sec 0
@nuxt/opencollectiveprod · wants 0.4.1
0.4.1
4stale 0 · maint 10 · sec 0
cookie-signatureprod · wants 1.2.2
1.2.2
4stale 0 · maint 10 · sec 0
load-esmprod · wants 1.0.3
1.0.3
4stale 0 · maint 10 · sec 0
rxjsprod · wants 7.8.2
7.8.2
4stale 0 · maint 10 · sec 0
tslibprod · wants 2.8.1
2.8.1
4stale 0 · maint 10 · sec 0
@as-integrations/express5dev · wants 1.1.2
1.1.2
3stale 0 · maint 10 · sec 0
@types/amqplibdev · wants 0.10.8
0.10.8
3stale 0 · maint 10 · sec 0
@types/corsdev · wants 2.8.19
2.8.19
3stale 0 · maint 10 · sec 0
@types/gulpdev · wants 4.0.18
4.0.18
3stale 0 · maint 10 · sec 0
@types/http-errorsdev · wants 2.0.5
2.0.5
3stale 0 · maint 10 · sec 0
amqp-connection-managerdev · wants 5.0.1
5.0.1
3stale 0 · maint 10 · sec 0
graphql-subscriptionsdev · wants 3.0.0
3.0.0
3stale 0 · maint 10 · sec 0
gulpdev · wants 5.0.1
5.0.1
3stale 0 · maint 10 · sec 0
huskydev · wants 9.1.7
9.1.7
3stale 0 · maint 10 · sec 0
6.15.3
→ 6.17.0
3stale 5 · maint 0 · sec 0
@apollo/serverdev · wants 5.5.1
5.5.1
0stale 0 · maint 0 · sec 0
@commitlint/clidev · wants 21.2.4
21.2.4
0stale 0 · maint 0 · sec 0
@commitlint/config-angulardev · wants 21.2.4
21.2.4
0stale 0 · maint 0 · sec 0
@fastify/corsdev · wants 11.3.1
11.3.1
0stale 0 · maint 0 · sec 0
@fastify/corsprod · wants 11.3.1
11.3.1
0stale 0 · maint 0 · sec 0
@fastify/formbodydev · wants 9.0.1
9.0.1
0stale 0 · maint 0 · sec 0
@fastify/formbodyprod · wants 9.0.1
9.0.1
0stale 0 · maint 0 · sec 0
@fastify/middiedev · wants 9.3.6
9.3.6
0stale 0 · maint 0 · sec 0
@fastify/middieprod · wants 9.3.6
9.3.6
0stale 0 · maint 0 · sec 0
@fastify/multipartdev · wants 10.1.6
10.1.6
0stale 0 · maint 0 · sec 0
@fastify/staticdev · wants 10.1.7
10.1.7
0stale 0 · maint 0 · sec 0
@fastify/viewdev · wants 12.0.1
12.0.1
0stale 0 · maint 0 · sec 0
@grpc/grpc-jsdev · wants 1.14.6
1.14.6
0stale 0 · maint 0 · sec 0
@grpc/proto-loaderdev · wants 0.8.1
0.8.1
0stale 0 · maint 0 · sec 0
@nats-io/transport-nodedev · wants ^3.0.2
3.4.0
0stale 0 · maint 0 · sec 0
@nestjs/apollodev · wants 14.0.3
14.0.3
→ 14.1.0
0stale 0 · maint 0 · sec 0
@nestjs/graphqldev · wants 14.0.3
14.0.3
→ 14.1.0
0stale 0 · maint 0 · sec 0
@nestjs/mongoosedev · wants 12.0.0
12.0.0
0stale 0 · maint 0 · sec 0
@nestjs/typeormdev · wants 12.0.2
12.0.2
0stale 0 · maint 0 · sec 0
@standard-schema/specdev · wants 1.1.0
1.1.0
0stale 0 · maint 0 · sec 0
@standard-schema/specprod · wants 1.1.0
1.1.0
0stale 0 · maint 0 · sec 0
@types/expressdev · wants 5.0.6
5.0.6
0stale 0 · maint 0 · sec 0
@types/nodedev · wants 26.6.5
26.6.5
0stale 0 · maint 0 · sec 0
@types/supertestdev · wants 7.2.1
7.2.1
0stale 0 · maint 0 · sec 0
@types/wsdev · wants 8.18.2
8.18.2
0stale 0 · maint 0 · sec 0
@vitest/coverage-istanbuldev · wants 5.0.5
5.0.5
0stale 0 · maint 0 · sec 0
@vitest/coverage-v8dev · wants 5.0.5
5.0.5
0stale 0 · maint 0 · sec 0
amqplibdev · wants 2.2.0
2.2.0
0stale 0 · maint 0 · sec 0
ansisprod · wants 4.4.0
4.4.0
0stale 0 · maint 0 · sec 0
body-parserdev · wants 2.4.0
2.4.0
0stale 0 · maint 0 · sec 0
cache-managerdev · wants 7.2.9
7.2.9
0stale 0 · maint 0 · sec 0
class-validatorprod · wants 0.15.1
0.15.1
0stale 0 · maint 0 · sec 0
conventional-changelogdev · wants 8.1.3
8.1.3
0stale 0 · maint 0 · sec 0
corsprod · wants 2.8.6
2.8.6
0stale 0 · maint 0 · sec 0
eventsourcedev · wants 5.1.3
5.1.3
0stale 0 · maint 0 · sec 0
expressprod · wants 5.3.0
5.3.0
0stale 0 · maint 0 · sec 0
fast-json-stringifyprod · wants 7.2.0
7.2.0
0stale 0 · maint 0 · sec 0
fastifydev · wants 5.12.7
5.12.7
0stale 0 · maint 0 · sec 0
fastifyprod · wants 5.12.7
5.12.7
0stale 0 · maint 0 · sec 0
fastify-plugindev · wants 6.0.1
6.0.1
0stale 0 · maint 0 · sec 0
file-typeprod · wants 22.2.0
22.2.0
0stale 0 · maint 0 · sec 0
find-my-waydev · wants 9.10.0
9.10.0
0stale 0 · maint 0 · sec 0
find-my-wayprod · wants 9.10.0
9.10.0
0stale 0 · maint 0 · sec 0
graphqldev · wants 17.0.2
17.0.2
0stale 0 · maint 0 · sec 0
http-errorsdev · wants 2.0.1
2.0.1
0stale 0 · maint 0 · sec 0
ioredisdev · wants 6.0.0
6.0.0
0stale 0 · maint 0 · sec 0
lernadev · wants 10.1.1
10.1.1
0stale 0 · maint 0 · sec 0
light-my-requestdev · wants 6.8.0
6.8.0
0stale 0 · maint 0 · sec 0
light-my-requestprod · wants 6.8.0
6.8.0
0stale 0 · maint 0 · sec 0
lint-stageddev · wants 17.6.0
17.6.0
0stale 0 · maint 0 · sec 0
mime-typesprod · wants 3.0.2
3.0.2
0stale 0 · maint 0 · sec 0
mongoosedev · wants 9.11.4
9.11.4
0stale 0 · maint 0 · sec 0
mqttdev · wants 5.16.1
5.16.1
0stale 0 · maint 0 · sec 0
multerdev · wants 2.5.0
2.5.0
0stale 0 · maint 0 · sec 0
multerprod · wants 2.5.0
2.5.0
0stale 0 · maint 0 · sec 0
mysql2dev · wants 3.24.6
3.24.6
0stale 0 · maint 0 · sec 0
1.89.0
→ 1.90.0
0stale 0 · maint 0 · sec 0
path-to-regexpprod · wants 8.4.2
8.4.2
→ 9.0.0
0stale 0 · maint 0 · sec 0
prettierdev · wants ^3.7.4
3.9.10
0stale 0 · maint 0 · sec 0
redisdev · wants 6.3.0
6.3.0
0stale 0 · maint 0 · sec 0
sendprod · wants 1.2.1
1.2.1
0stale 0 · maint 0 · sec 0
serve-staticprod · wants 2.2.1
2.2.1
0stale 0 · maint 0 · sec 0
socket.ioprod · wants 4.8.4
4.8.4
0stale 0 · maint 0 · sec 0
socket.io-clientdev · wants 4.8.4
4.8.4
0stale 0 · maint 0 · sec 0
supertestdev · wants 7.3.1
7.3.1
0stale 0 · maint 0 · sec 0
ts-morphdev · wants 28.0.0
28.0.0
0stale 0 · maint 0 · sec 0
tsxdev · wants 4.23.15
4.23.15
0stale 0 · maint 0 · sec 0
typeormdev · wants 1.1.2
1.1.2
0stale 0 · maint 0 · sec 0
8.72.0
→ 8.72.1
0stale 0 · maint 0 · sec 0
uuidprod · wants 14.0.3
14.0.3
0stale 0 · maint 0 · sec 0
vitedev · wants 8.3.5
8.3.5
0stale 0 · maint 0 · sec 0
vitestdev · wants 5.0.5
5.0.5
0stale 0 · maint 0 · sec 0
wsdev · wants 8.22.0
8.22.0
0stale 0 · maint 0 · sec 0
wsprod · wants 8.22.0
8.22.0
0stale 0 · maint 0 · sec 0
See your own repositories like thisFive private repositories free, public ones always. Nothing is written to your code.
Start free with GitHub
npx libyearsPublic repositories, read from their manifests and lockfiles through the GitHub API and rescanned daily by the same pipeline every account uses. They belong to their maintainers, not to a customer of ours. Versions come from lockfiles, release dates from the npm registry, advisories from OSV.