๐Ÿ“ฆ SBOM Diff Report

Generated by sbomlyze ยท 2026-11-02T03:07:40Z

SBOM Comparison

BeforeAfter
Fileprevious.cdx.jsoncurrent.cdx.json
File Size1 MB2 MB
Formatsyftsyft
Components9331445
PURL Coverage88.9%92.8%
License Coverage45.2%64.6%
Hash Coverage10.5%6.8%
421
Added
0
Removed
13
Changed

Key Findings

๐Ÿ“ˆ Attack surface: +512 packages (54.9%)
๐Ÿšจ 12 version downgrades detected: agent-base 7.1.4โ†’6.0.2, ajv 8.20.0โ†’6.15.0, escape-string-regexp 5.0.0โ†’4.0.0, find-up 7.0.0โ†’4.1.0, https-proxy-agent 7.0.6โ†’5.0.1 + 7 more
๐Ÿ”„ 1 version upgrades (1 major) among 933 shared packages
โœ… Core system packages stable: github (249), golang (102), file (98), pypi (50) unchanged
๐Ÿ“œ License shift: copyleft +26, permissive +478

Drift Summary

TypeCountStatus
Version13โœ… OK
Integrity0โœ… OK
Metadata0โœ… OK

New Dependencies by Depth

DepthCountRisk
1 (direct)0Low
2137Medium
3+111High
โž• Added Components (421)
NameVersionTypeLicense
@adobe/css-tools4.5.0npmMIT
@alloc/quick-lru5.2.0npmMIT
@axe-core/playwright4.13.0npmMPL-2.0
@babel/code-frame7.29.7npmMIT
@babel/compat-data7.29.7npmMIT
@babel/core7.29.7npmMIT
@babel/generator7.29.7npmMIT
@babel/helper-compilation-targets7.29.7npmMIT
@babel/helper-globals7.29.7npmMIT
@babel/helper-module-imports7.29.7npmMIT
@babel/helper-module-transforms7.29.7npmMIT
@babel/helper-string-parser7.29.7npmMIT
@babel/helper-validator-identifier7.29.7npmMIT
@babel/helper-validator-option7.29.7npmMIT
@babel/helpers7.29.7npmMIT
@babel/parser7.29.7npmMIT
@babel/template7.29.7npmMIT
@babel/traverse7.29.7npmMIT
@babel/types7.29.7npmMIT
@bcoe/v8-coverage1.0.2npmMIT
@cacheable/memory2.2.0npmMIT
@cacheable/utils2.5.0npmMIT
@emnapi/core1.11.0npmMIT
@emnapi/runtime1.11.0npmMIT
@emnapi/wasi-threads1.2.1npmMIT
@esbuild/aix-ppc640.28.1npmMIT
@esbuild/android-arm0.28.1npmMIT
@esbuild/android-arm640.28.1npmMIT
@esbuild/android-x640.28.1npmMIT
@esbuild/darwin-arm640.28.1npmMIT
@esbuild/darwin-x640.28.1npmMIT
@esbuild/freebsd-arm640.28.1npmMIT
@esbuild/freebsd-x640.28.1npmMIT
@esbuild/linux-arm0.28.1npmMIT
@esbuild/linux-arm640.28.1npmMIT
@esbuild/linux-ia320.28.1npmMIT
@esbuild/linux-loong640.28.1npmMIT
@esbuild/linux-mips64el0.28.1npmMIT
@esbuild/linux-ppc640.28.1npmMIT
@esbuild/linux-riscv640.28.1npmMIT
@esbuild/linux-s390x0.28.1npmMIT
@esbuild/linux-x640.28.1npmMIT
@esbuild/netbsd-arm640.28.1npmMIT
@esbuild/netbsd-x640.28.1npmMIT
@esbuild/openbsd-arm640.28.1npmMIT
@esbuild/openbsd-x640.28.1npmMIT
@esbuild/openharmony-arm640.28.1npmMIT
@esbuild/sunos-x640.28.1npmMIT
@esbuild/win32-arm640.28.1npmMIT
@esbuild/win32-ia320.28.1npmMIT
@esbuild/win32-x640.28.1npmMIT
@eslint-community/eslint-utils4.9.1npmMIT
@eslint-community/regexpp4.12.2npmMIT
@eslint/config-array0.23.5npmApache-2.0
@eslint/config-helpers0.7.0npmApache-2.0
@eslint/core1.2.1npmApache-2.0
@eslint/js10.0.1npmMIT
@eslint/object-schema3.0.5npmApache-2.0
@eslint/plugin-kit0.7.3npmApache-2.0
@hapi/address5.1.1npmBSD-3-Clause
@hapi/formula3.0.2npmBSD-3-Clause
@hapi/hoek11.0.7npmBSD-3-Clause
@hapi/pinpoint2.0.1npmBSD-3-Clause
@hapi/tlds1.1.7npmBSD-3-Clause
@hapi/topo6.0.2npmBSD-3-Clause
@humanfs/core0.19.2npmApache-2.0
@humanfs/node0.16.8npmApache-2.0
@humanfs/types0.15.0npmApache-2.0
@humanwhocodes/module-importer1.0.1npmApache-2.0
@humanwhocodes/retry0.4.3npmApache-2.0
@inquirer/ansi2.0.7npmMIT
@inquirer/confirm6.1.1npmMIT
@inquirer/core11.2.1npmMIT
@inquirer/figures2.0.7npmMIT
@inquirer/type4.0.7npmMIT
@istanbuljs/load-nyc-config1.1.0npmISC
@istanbuljs/schema0.1.6npmMIT
@joshwooding/vite-plugin-react-docgen-typescript0.7.0npmMIT
@jridgewell/remapping2.3.5npmMIT
@keyv/bigmap1.3.1npmMIT
@keyv/serialize1.1.1npmMIT
@mswjs/interceptors0.41.9npmMIT
@napi-rs/wasm-runtime1.1.4npmMIT
@netlify/functions6.0.0npmMIT
@netlify/types3.0.0npmMIT
@open-draft/deferred-promise2.2.0npmMIT
@open-draft/logger0.3.0npmMIT
@open-draft/until2.1.0npmMIT
@oxc-parser/binding-android-arm-eabi0.127.0npmMIT
@oxc-parser/binding-android-arm640.127.0npmMIT
@oxc-parser/binding-darwin-arm640.127.0npmMIT
@oxc-parser/binding-darwin-x640.127.0npmMIT
@oxc-parser/binding-freebsd-x640.127.0npmMIT
@oxc-parser/binding-linux-arm-gnueabihf0.127.0npmMIT
@oxc-parser/binding-linux-arm-musleabihf0.127.0npmMIT
@oxc-parser/binding-linux-arm64-gnu0.127.0npmMIT
@oxc-parser/binding-linux-arm64-musl0.127.0npmMIT
@oxc-parser/binding-linux-ppc64-gnu0.127.0npmMIT
@oxc-parser/binding-linux-riscv64-gnu0.127.0npmMIT
@oxc-parser/binding-linux-riscv64-musl0.127.0npmMIT
@oxc-parser/binding-linux-s390x-gnu0.127.0npmMIT
@oxc-parser/binding-linux-x64-gnu0.127.0npmMIT
@oxc-parser/binding-linux-x64-musl0.127.0npmMIT
@oxc-parser/binding-openharmony-arm640.127.0npmMIT
@oxc-parser/binding-wasm32-wasi0.127.0npmMIT
@oxc-parser/binding-win32-arm64-msvc0.127.0npmMIT
@oxc-parser/binding-win32-ia32-msvc0.127.0npmMIT
@oxc-parser/binding-win32-x64-msvc0.127.0npmMIT
@oxc-project/types0.127.0npmMIT
@oxc-resolver/binding-android-arm-eabi11.21.2npmMIT
@oxc-resolver/binding-android-arm6411.21.2npmMIT
@oxc-resolver/binding-darwin-arm6411.21.2npmMIT
@oxc-resolver/binding-darwin-x6411.21.2npmMIT
@oxc-resolver/binding-freebsd-x6411.21.2npmMIT
@oxc-resolver/binding-linux-arm-gnueabihf11.21.2npmMIT
@oxc-resolver/binding-linux-arm-musleabihf11.21.2npmMIT
@oxc-resolver/binding-linux-arm64-gnu11.21.2npmMIT
@oxc-resolver/binding-linux-arm64-musl11.21.2npmMIT
@oxc-resolver/binding-linux-ppc64-gnu11.21.2npmMIT
@oxc-resolver/binding-linux-riscv64-gnu11.21.2npmMIT
@oxc-resolver/binding-linux-riscv64-musl11.21.2npmMIT
@oxc-resolver/binding-linux-s390x-gnu11.21.2npmMIT
@oxc-resolver/binding-linux-x64-gnu11.21.2npmMIT
@oxc-resolver/binding-linux-x64-musl11.21.2npmMIT
@oxc-resolver/binding-openharmony-arm6411.21.2npmMIT
@oxc-resolver/binding-wasm32-wasi11.21.2npmMIT
@oxc-resolver/binding-win32-arm64-msvc11.21.2npmMIT
@oxc-resolver/binding-win32-x64-msvc11.21.2npmMIT
@playwright/test1.61.1npmApache-2.0
@polka/url1.0.0-next.29npmMIT
@rolldown/binding-android-arm-eabi1.2.7npmMIT
@rolldown/binding-android-arm641.2.7npmMIT
@rolldown/binding-darwin-arm641.2.7npmMIT
@rolldown/binding-darwin-x641.2.7npmMIT
@rolldown/binding-freebsd-x641.2.7npmMIT
@rolldown/binding-linux-arm-gnueabihf1.2.7npmMIT
@rolldown/binding-linux-arm64-gnu1.2.7npmMIT
@rolldown/binding-linux-arm64-musl1.2.7npmMIT
@rolldown/binding-linux-ppc64-gnu1.2.7npmMIT
@rolldown/binding-linux-s390x-gnu1.2.7npmMIT
@rolldown/binding-linux-x64-gnu1.2.7npmMIT
@rolldown/binding-linux-x64-musl1.2.7npmMIT
@rolldown/binding-openharmony-arm641.2.7npmMIT
@rolldown/binding-win32-arm64-msvc1.2.7npmMIT
@rolldown/binding-win32-x64-msvc1.2.7npmMIT
@rolldown/pluginutils1.0.1npmMIT
@rollup/pluginutils5.4.0npmMIT
@standard-schema/spec1.1.0npmMIT
@storybook/addon-a11y10.6.0npmMIT
@storybook/builder-vite10.6.0npmMIT
@storybook/global5.0.0npmMIT
@storybook/icons2.0.2npmMIT
@storybook/react10.6.0npmMIT
@storybook/react-dom-shim10.6.0npmMIT
@storybook/react-vite10.6.0npmMIT
@tailwindcss/node4.3.3npmMIT
@tailwindcss/oxide4.3.3npmMIT
@tailwindcss/oxide-android-arm644.3.3npmMIT
@tailwindcss/oxide-darwin-arm644.3.3npmMIT
@tailwindcss/oxide-darwin-x644.3.3npmMIT
@tailwindcss/oxide-freebsd-x644.3.3npmMIT
@tailwindcss/oxide-linux-arm-gnueabihf4.3.3npmMIT
@tailwindcss/oxide-linux-arm64-gnu4.3.3npmMIT
@tailwindcss/oxide-linux-arm64-musl4.3.3npmMIT
@tailwindcss/oxide-linux-x64-gnu4.3.3npmMIT
@tailwindcss/oxide-linux-x64-musl4.3.3npmMIT
@tailwindcss/oxide-wasm32-wasi4.3.3npmMIT
@tailwindcss/oxide-win32-arm64-msvc4.3.3npmMIT
@tailwindcss/oxide-win32-x64-msvc4.3.3npmMIT
@tailwindcss/postcss4.3.3npmMIT
@testing-library/dom10.4.2npmMIT
@testing-library/jest-dom6.9.1npmMIT
@testing-library/react16.3.3npmMIT
@testing-library/user-event14.6.7npmMIT
@tybys/wasm-util0.10.2npmMIT
@types/aria-query5.0.4npmMIT
@types/babel__core7.20.5npmMIT
@types/babel__generator7.27.0npmMIT
@types/babel__template7.4.4npmMIT
@types/babel__traverse7.28.0npmMIT
@types/chai5.2.3npmMIT
@types/deep-eql4.0.2npmMIT
@types/doctrine0.0.9npmMIT
@types/dompurify3.2.0npmMIT
@types/esrecurse4.3.1npmMIT
@types/js-yaml4.0.9npmMIT
@types/json-schema7.0.15npmMIT
@types/node26.5.1npmMIT
@types/react19.3.0npmMIT
@types/react-dom19.3.0npmMIT
@types/resolve1.20.6npmMIT
@types/set-cookie-parser2.4.10npmMIT
@types/statuses2.0.6npmMIT
@typescript-eslint/eslint-plugin8.70.0npmMIT
@typescript-eslint/parser8.70.0npmMIT
@typescript-eslint/project-service8.70.0npmMIT
@typescript-eslint/scope-manager8.70.0npmMIT
@typescript-eslint/tsconfig-utils8.70.0npmMIT
@typescript-eslint/type-utils8.70.0npmMIT
@typescript-eslint/types8.70.0npmMIT
@typescript-eslint/typescript-estree8.70.0npmMIT
@typescript-eslint/utils8.70.0npmMIT
@typescript-eslint/visitor-keys8.70.0npmMIT
@vitejs/plugin-react6.1.1npmMIT
@vitest/coverage-v85.0.1npmMIT
@vitest/expect3.2.4npmMIT
@vitest/istanbul-lib-coverage1.0.1npmMIT
@vitest/istanbul-lib-report1.0.1npmMIT
@vitest/mocker5.0.1npmMIT
@vitest/pretty-format3.2.4npmMIT
@vitest/spy3.2.4npmMIT
@vitest/ui5.0.0npmMIT
@vitest/utils3.2.4npmMIT
@webcontainer/env1.1.1npmMIT
acorn8.17.0npmMIT
acorn-jsx5.3.2npmMIT
aria-query5.3.0npmApache-2.0
assertion-error2.0.1npmMIT
ast-types0.16.1npmMIT
ast-v8-to-istanbul1.0.6npmMIT
asynckit0.4.0npmMIT
axe-core4.13.0npmMPL-2.0
axios1.18.1npmMIT
baseline-browser-mapping2.11.20npmApache-2.0
browserslist4.28.8npmMIT
bundle-name4.1.0npmMIT
cacheable2.5.0npmMIT
camelcase5.3.1npmMIT
caniuse-lite1.0.30001810npmCC-BY-4.0
chai5.3.3npmMIT
check-error2.1.3npmMIT
cli-width4.1.0npmISC
cliui8.0.1npmISC
combined-stream1.0.8npmMIT
convert-source-map2.0.0npmMIT
cookie1.1.1npmMIT
css.escape1.5.1npmMIT
csstype3.2.3npmMIT
deep-eql5.0.2npmMIT
deep-is0.1.4npmMIT
default-browser5.5.0npmMIT
default-browser-id5.0.1npmMIT
define-lazy-prop3.0.0npmMIT
delayed-stream1.0.0npmMIT
detect-libc2.1.2npmApache-2.0
doctrine3.0.0npmApache-2.0
dom-accessibility-api0.5.16npmMIT
electron-to-chromium1.5.418npmISC
empathic2.0.1npmMIT
enhanced-resolve5.24.3npmMIT
es-set-tostringtag2.1.0npmMIT
esbuild0.28.1npmMIT
escalade3.2.0npmMIT
eslint10.10.0npmMIT
eslint-plugin-react-hooks7.1.1npmMIT
eslint-plugin-react-refresh0.5.7npmMIT
eslint-scope9.1.2npmBSD-2-Clause
eslint-visitor-keys3.4.3npmApache-2.0
espree11.2.0npmBSD-2-Clause
esprima4.0.1npmBSD-2-Clause
esquery1.7.0npmBSD-3-Clause
esrecurse4.3.0npmBSD-2-Clause
estraverse5.3.0npmBSD-2-Clause
estree-walker2.0.2npmMIT
esutils2.0.3npmBSD-2-Clause
expect-type1.4.0npmApache-2.0
fast-json-stable-stringify2.1.0npmMIT
fast-levenshtein2.0.6npmMIT
fast-string-truncated-width3.0.3npmMIT
fast-string-width3.0.2npmMIT
fast-wrap-ansi0.2.2npmMIT
file-entry-cache11.1.5npmMIT
flat-cache6.1.23npmMIT
flatted3.4.4npmISC
follow-redirects1.16.0npmMIT
form-data4.0.6npmMIT
fsevents2.3.2npmMIT
gensync1.0.0-beta.2npmMIT
get-caller-file2.0.5npmISC
get-package-type0.1.0npmMIT
glob-parent6.0.2npmISC
globals17.12.0npmMIT
graceful-fs4.2.11npmISC
graphql16.14.2npmMIT
has-flag4.0.0npmMIT
has-tostringtag1.0.2npmMIT
hashery1.5.1npmMIT
headers-polyfill5.0.1npmMIT
hermes-estree0.25.1npmMIT
hermes-parser0.25.1npmMIT
hookified1.15.1npmMIT
html-escaper2.0.2npmMIT
ignore5.3.2npmMIT
indent-string4.0.0npmMIT
is-core-module2.16.2npmMIT
is-docker3.0.0npmMIT
is-extglob2.1.1npmMIT
is-glob4.0.3npmMIT
is-inside-container1.0.0npmMIT
is-node-process1.2.0npmMIT
is-wsl3.1.1npmMIT
istanbul-lib-coverage3.2.2npmBSD-3-Clause
istanbul-lib-instrument6.0.3npmBSD-3-Clause
istanbul-lib-report3.0.1npmBSD-3-Clause
istanbul-reports3.2.0npmBSD-3-Clause
jiti2.7.0npmMIT
joi18.2.8npmBSD-3-Clause
js-tokens10.0.0npmMIT
jsesc3.1.0npmMIT
json-stable-stringify-without-jsonify1.0.1npmMIT
json52.2.3npmMIT
jsonc-parser3.3.1npmMIT
keyv5.6.0npmMIT
levn0.4.1npmMIT
lightningcss1.32.0npmMPL-2.0
lightningcss-android-arm641.32.0npmMPL-2.0
lightningcss-darwin-arm641.32.0npmMPL-2.0
lightningcss-darwin-x641.32.0npmMPL-2.0
lightningcss-freebsd-x641.32.0npmMPL-2.0
lightningcss-linux-arm-gnueabihf1.32.0npmMPL-2.0
lightningcss-linux-arm64-gnu1.32.0npmMPL-2.0
lightningcss-linux-arm64-musl1.32.0npmMPL-2.0
lightningcss-linux-x64-gnu1.32.0npmMPL-2.0
lightningcss-linux-x64-musl1.32.0npmMPL-2.0
lightningcss-win32-arm64-msvc1.32.0npmMPL-2.0
lightningcss-win32-x64-msvc1.32.0npmMPL-2.0
lodash4.18.1npmMIT
loupe3.2.1npmMIT
lz-string1.5.0npmMIT
magic-string0.30.21npmMIT
magicast0.5.5npmMIT
make-dir4.0.0npmMIT
mime-db1.52.0npmMIT
mime-types2.1.35npmMIT
min-indent1.0.1npmMIT
minimist1.2.8npmMIT
mrmime2.0.1npmMIT
msw2.15.0npmMIT
mute-stream3.0.0npmISC
nanoid3.3.18npmMIT
natural-compare1.4.0npmMIT
node-releases2.0.54npmMIT
obug2.2.1npmMIT
open10.2.0npmMIT
optionator0.9.4npmMIT
outvariant1.4.3npmMIT
oxc-parser0.127.0npmMIT
oxc-resolver11.21.2npmMIT
p-try2.2.0npmMIT
path-parse1.0.7npmMIT
path-to-regexp6.3.0npmMIT
pathe2.0.3npmMIT
pathval2.0.1npmMIT
picocolors1.1.1npmISC
playwright1.61.1npmApache-2.0
playwright-core1.61.1npmApache-2.0
postcss8.5.28npmMIT
prelude-ls1.2.1npmMIT
pretty-format27.5.1npmMIT
proxy-from-env2.1.0npmMIT
qified0.10.1npmMIT
react-docgen8.0.3npmMIT
react-docgen-typescript2.4.0npmMIT
react-is17.0.2npmMIT
recast0.23.11npmMIT
redent3.0.0npmMIT
require-directory2.1.1npmMIT
resolve1.22.12npmMIT
resolve-from5.0.0npmMIT
rettime0.11.11npmMIT
rolldown1.2.7npmMIT
run-applescript7.1.0npmMIT
rxjs7.8.2npmApache-2.0
semver6.3.1npmISC
set-cookie-parser3.1.0npmMIT
siginfo2.0.0npmISC
sirv3.0.2npmMIT
source-map0.6.1npmBSD-3-Clause
stackback0.0.2npmMIT
statuses2.0.2npmMIT
std-env4.2.0npmMIT
storybook10.6.0npmMIT
strict-event-emitter0.5.1npmMIT
strip-bom3.0.0npmMIT
strip-indent3.0.0npmMIT
supports-color7.2.0npmMIT
supports-preserve-symlinks-flag1.0.0npmMIT
tagged-tag1.0.0npmMIT
tailwindcss4.3.3npmMIT
tapable2.3.3npmMIT
tar-mini0.2.0npmMIT
test-exclude8.0.0npmISC
tiny-invariant1.3.3npmMIT
tinybench6.1.4npmMIT
tinyexec1.3.0npmMIT
tinyrainbow2.0.0npmMIT
tinyspy4.0.4npmMIT
totalist3.0.1npmMIT
ts-api-utils2.5.0npmMIT
ts-dedent2.3.0npmMIT
tsconfig-paths4.2.0npmMIT
type-check0.4.0npmMIT
typescript6.0.3npmApache-2.0
typescript-eslint8.70.0npmMIT
undici-types8.9.0npmMIT
until-async3.0.2npmMIT
update-browserslist-db1.3.2npmMIT
uri-js4.4.1npmBSD-2-Clause
vite8.3.0npmMIT
vite-plugin-compression22.5.3npmMIT
vite-plugin-istanbul9.0.1npmMIT
vitest5.0.1npmMIT
wait-on9.1.0npmMIT
why-is-node-running2.3.0npmMIT
word-wrap1.2.5npmMIT
ws8.21.3npmMIT
wsl-utils0.1.0npmMIT
y18n5.0.8npmISC
yargs17.7.3npmMIT
yargs-parser21.1.1npmISC
zod-validation-error4.0.2npmMIT
๐Ÿ”„ Changed Components (13)
NameBeforeAfterDrift
agent-base7.1.46.0.2๐Ÿ“ฆ Version
ajv8.20.06.15.0๐Ÿ“ฆ Version
escape-string-regexp5.0.04.0.0๐Ÿ“ฆ Version
find-up7.0.04.1.0๐Ÿ“ฆ Version
https-proxy-agent7.0.65.0.1๐Ÿ“ฆ Version
json-schema-traverse1.0.00.4.1๐Ÿ“ฆ Version
locate-path7.2.05.0.0๐Ÿ“ฆ Version
minimatch9.0.910.2.5๐Ÿ“ฆ Version
p-limit4.0.02.3.0๐Ÿ“ฆ Version
p-locate6.0.04.1.0๐Ÿ“ฆ Version
path-exists5.0.04.0.0๐Ÿ“ฆ Version
yallist5.0.03.1.1๐Ÿ“ฆ Version
yocto-queue1.2.20.1.0๐Ÿ“ฆ Version