status="ready" · all 19 packages render (no silent cap): sorted by severity by default, so the critical minimist sits on top. The search box matches package names and import chains alike (typing "vite" leaves minimist alone), the dropdown switches between direct-only and transitive-only, and the numbers on the Vulnerable / Outdated toggles are real counts. Filtering down to nothing gets different copy than having nothing to begin with, plus a Clear filters way out.
Dependencies · web app
19 packages · 12 direct · 4 with advisories · 12 outdated · 2 unreviewed licences
Installed 4.3.4 → latest 4.4.11 minor behindLicence: MIT· permissive
Pulled in byviaeslint@eslint/eslintrc@humanwhocodes/config-array@humanwhocodes/object-schemaespreeacorn-jsx@babel/traverse@babel/helper-module-transforms
Installed 0.14.2 → latest 0.14.2up to dateLicence: Apache-2.0· permissive
Pulled in byvia@opentelemetry/auto-instrumentations-node@opentelemetry/instrumentation-runtime-node
rand-core-jstransitive55 kB
Installed 0.9.1 → latest 0.9.1up to dateLicence: (MIT OR Apache-2.0)· permissive
Pulled in byviacrypto-toolbox
status="ready" · defaultSort="outdated" + defaultScope="direct": staleness is graded instead of a flat "update available" — gulp-sass, 3 majors behind, outranks node-fetch (1), then come minor / patch / prerelease (drizzle-orm 2.0.0-beta.1 is older than 2.0.0), and last the latest-unknown @acme/internal-telemetry. The range markers answer the follow-up question, whether npm update can even reach it: ^0.9.9 to 1.0.0 needs a manifest edit.
Direct dependencies
19 packages · 12 direct · 4 with advisories · 12 outdated · 2 unreviewed licences
Showing 12 of 19 packages
gulp-sassdirect96 kB
Declared range ^2.1.4Installed 2.1.4 → latest 5.0.13 majors behind· needs a range bumpLicence: MIT· permissive
node-fetchdirect118 kB
Declared range ^0.9.9Installed 0.9.9 → latest 1.0.01 major behind· needs a range bumpLicence: MIT· permissive
date-fnsdirect1.3 MB
Declared range ^1.9.0Installed 1.9.0 → latest 1.10.01 minor behind· within rangeLicence: MIT· permissive
oracle-instant-driverdirect12.8 MB
Declared range ^3.1.0Installed 3.1.0 → latest 3.4.01 minor behind· within rangeLicence: SEE LICENSE IN LICENSE-ORACLE.txt· unreviewed
typescriptdirect22.4 MB
Declared range ~5.9.2Installed 5.9.2 → latest 5.9.31 patch behind· within rangeLicence: Apache-2.0· permissive
lodashdirect1.4 MB
Declared range ^4.17.20Installed 4.17.20 → latest 4.17.211 patch behind· within rangeLicence: MIT· permissive
Declared range ^19.2.0Installed 19.2.0 → latest 19.2.0up to dateLicence: MIT· permissive
flowchart-renderdirect2.1 MB
Declared range ^2.3.1Installed 2.3.1 → latest 2.3.1up to dateLicence: AGPL-3.0· strong copyleft
@acme/private-sdkdirect3.4 MB
Declared range ^1.0.0Installed 1.0.0 → latest 1.0.0up to dateLicence: UNLICENSED· proprietary
status="loading" · skeletonRows={6} — the skeleton reuses the two-line geometry of a real row; the animation holds still under prefers-reduced-motion, and screen readers get one role="status".
Dependencies
Loading dependencies
status="empty" · the dependency tree really is empty — deliberately worded apart from the filtered-to-nothing copy above.
Dependencies
No dependencies recorded
This project's manifest resolved to an empty tree — nothing to audit yet.
status="error" · errorMessage comes from the consumer; Try again only renders when onRetry is passed, and pressing it really runs error → loading → ready.
Dependencies · audit
Couldn't read the dependency tree
npm registry lookup failed for 3 of 19 packages (ETIMEDOUT after 10s).
Zyeon UI