Open Social install profile for Drupal
goalgorilla/open_social holds a health index of 80 out of 100, placing it in the Excellent band. It scores highest on Vitality (86/100) and lowest on Security (53/100). It was last updated 28 days ago. 5 contributors account for most of its recent work.
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean, calibrated against the distribution of the public record so bands carry percentile meaning; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At Risk ceiling of 34.
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
The weighted overall 68 is calibrated to 80 on the published index scale (record calibration 2026-08-02).
This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.
| Registry | Package | Version | Downloads / mo | Versions | Last publish |
|---|---|---|---|---|---|
| Packagist | goalgorilla/open_social | 13.1.0 | 2,736 | 496 | 32 days ago |
Is the project alive — is code being written and are releases shipping?
| 28.8/36 | Push recency — last push 28 days ago |
| 33.2/36 | Commit cadence — 48/52 weeks with commits |
| 18/18 | Commit volume — 596 commits in the last year |
| 10/10 | OpenSSF Scorecard: Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| commits_last_year | 596 |
| human_commit_share | 0.99 |
| days_since_last_push | 28 |
| active_weeks_last_year | 48 |
| 16.2/27 | Ships releases — 100 version tags (no GitHub releases) |
| 36/36 | Release recency — latest release 32 days ago |
| 19.8/27 | Release cadence — a release every ~69.9 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
| releases_count | 100 |
| latest_release_tag | 13.1.0 |
| releases_from_tags | yes |
| days_since_latest_release | 32 |
| mean_days_between_releases | 69.9 |
Does the project have users, downloads, attention, and a welcoming setup for contributors?
| 36.9/60 | Stars — 190 stars |
| 18.6/25 | Forks — 171 forks |
| 8.1/15 | Watchers — 30 watchers |
| forks | 171 |
| stars | 190 |
| watchers | 30 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (GPL-2.0) |
| 0/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
| has_readme | yes |
| has_license | yes |
| readme_badges | 3 |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| readme_badge_services | shields.io, travis-ci.com |
| has_pull_request_template | no |
| 45.8/80 | Monthly downloads — 2,736 downloads/month across packagist |
| 4/20 | Registry dependents — 3 packages depend on it |
| packages | goalgorilla/open_social |
| dependents | 3 |
| ecosystems | packagist |
| total_downloads | 469,483 |
| monthly_downloads | 2,736 |
| unverified_packages_excluded | — |
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
| 45.9/54 | Bus factor — 5 contributor(s) cover half of all commits |
| 18.5/22.5 | Commit distribution — top contributor authored 18% of commits |
| 13.5/13.5 | Contributor breadth — 71 contributors |
| 10/10 | OpenSSF Scorecard: Contributors — project has 29 contributing companies or organizations |
| bus_factor | 5 |
| contributors_sampled | 71 |
| top_contributor_share | 0.18 |
| 0/42 | Issue resolution — no issues or no data |
| 23.7/30 | PR acceptance — 3,416/4,325 decided PRs merged |
| 0/13 | Newcomer PR acceptance — no first-time contributor's PR decided in 30d |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
| merged_prs | 3,416 |
| open_issues | 0 |
| closed_issues | 0 |
| prs_merged_7d | 0 |
| prs_decided_7d | 0 |
| prs_merged_30d | 0 |
| prs_decided_30d | 0 |
| issue_closed_ratio | — |
| closed_unmerged_prs | 909 |
| first_time_authors_30d | 0 |
| first_time_prs_merged_30d | 0 |
| first_time_prs_decided_30d | 0 |
| 30/30 | Ownership backing — organization-owned |
| 20/20 | Verified domain |
| 10.9/25 | Owner reach — 32 followers of goalgorilla |
| 22.4/25 | Track record — 26 public repos, account ~10 yr old |
| followers | 32 |
| owner_type | Organization |
| is_verified | yes |
| owner_login | goalgorilla |
| public_repos | 26 |
| account_age_days | 3,915 |
| 25/25 | Published & resolvable — 1 package(s) on packagist |
| 35/35 | Publish recency — latest publish 32 days ago |
| 20/20 | Version history — 496 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
| packages | goalgorilla/open_social |
| ecosystems | packagist |
| any_deprecated | no |
| min_days_since_publish | 32 |
Are baseline engineering and documentation practices in place?
| 0/24 | CI workflows |
| 24/24 | Tests present |
| 16/16 | Linter config — phpcs.xml, phpstan.neon |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard: CI-Tests — no data |
| has_ci | no |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | yes |
| has_precommit_config | no |
| 30/30 | README |
| 0/25 | Documentation directory |
| 15/15 | Documentation / homepage site — http://www.getopensocial.com |
| 10/10 | Repository description |
| 10/10 | Topics — 5 topics |
| 10/10 | Wiki |
| topics | drupal, community, distribution, social, social-network |
| has_wiki | yes |
| homepage | http://www.getopensocial.com |
| docs_site | http://www.getopensocial.com |
| has_readme | yes |
| has_docs_dir | no |
| has_description | yes |
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 2.2/7.5 | Branch-Protection — branch protection is not maximal on development and all release branches |
| 0/2.5 | CI-Tests — no data |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
| 2.5/2.5 | Contributors — project has 29 contributing companies or organizations |
| 0/10 | Dangerous-Workflow — no data |
| 7.5/7.5 | Dependency-Update-Tool — update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 7.5/7.5 | Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 0/5 | Packaging — no data |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — no SAST tool detected |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — no data |
| 0/7.5 | Token-Permissions — no data |
| 0/7.5 | Vulnerabilities — 191 existing vulnerabilities detected |
| source | openssf_scorecard |
| checks_evaluated | 13 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 5 |
| scorecard_aggregate | 4.1 |
| 35/35 | Direct dependencies free of known advisories — no direct dependency carries a known advisory |
| 0/25 | Indirect dependencies free of known advisories — transitive set not separable from development and test dependencies in this scope |
| 0/40 | No advisories left outstanding — no advisory carries a publication date |
| source | osv |
| advisories | 264 |
| affected_packages | 89 |
| assessed_packages | 980 |
| unassessed_packages | 77 |
| affected_by_severity | critical 11, high 52, moderate 22, low 4 |
| direct_affected_packages | 0 |
How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight (4%): agent tooling is a real maintenance signal, but a repository with none can still reach 100/100.
| 45/45 | Agent instructions — libraries/rich_text_json_exchange/AGENTS.md, libraries/rich_text_json_exchange/CLAUDE.md |
| 0/15 | Machine-readable docs (llms.txt) |
| 40/40 | Legible commit history — 82 of 99 human commits state their intent (structured subject or explanatory body) |
| has_llms_txt | no |
| llms_txt_url | — |
| legible_history_share | 0.828 |
| agent_instruction_files | libraries/rich_text_json_exchange/AGENTS.md, libraries/rich_text_json_exchange/CLAUDE.md |
| agent_instruction_max_bytes | 8,417 |
| 0/18 | One-command bootstrap |
| 22/22 | Automated tests |
| 11/11 | Lint / format config — phpcs.xml, phpstan.neon |
| 0/11 | Static type checking |
| 10/10 | Reproducible environment — Dockerfile, lockfile |
| 10/10 | Demonstrated agent practice — 16 of the last 100 commits agent-authored or agent-credited |
| 0/8 | Automated maintenance — no automated dependency updates observed |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| has_nix | no |
| has_tests | yes |
| lockfiles | yarn.lock |
| has_dockerfile | yes |
| typed_language | no |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | yes |
| typecheck_configs | — |
| agent_commit_share | 0.16 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
| 0/45 | Type-checkable code — PHP without a type-check config |
| 55/55 | Manageable file sizes — 1/1,789 source files over 60KB |
| primary_language | PHP |
| largest_source_bytes | 70,107 |
| source_files_sampled | 1,789 |
| oversized_source_files | 1 |
| 40/40 | API schema (OpenAPI/GraphQL/proto) — modules/custom/social_analytics/asyncapi.yml, modules/custom/social_graphql/graphql/open_social.graphqls, modules/custom/social_graphql/graphql/signed_file_upload_schema_extension.base.graphqls, modules/custom/social_graphql/graphql/signed_file_upload_schema_extension.extension.graphqls, modules/custom/social_graphql/tests/modules/test_social_graphql_file_upload/graphql/file_upload_test_schema_extension.extension.graphqls, modules/social_features/social_branding/graphql/social_branding_schema_extension.base.graphqls, modules/social_features/social_branding/graphql/social_branding_schema_extension.extension.graphqls, modules/social_features/social_comment/asyncapi.yml, modules/social_features/social_comment/graphql/social_comment_schema_extension.base.graphqls, modules/social_features/social_comment/graphql/social_comment_schema_extension.extension.graphqls, modules/social_features/social_event/asyncapi.yml, modules/social_features/social_event/graphql/social_event_flexible_group_schema_extension.extension.graphqls, modules/social_features/social_event/graphql/social_event_organization_schema_extension.extension.graphqls, modules/social_features/social_event/graphql/social_event_schema_extension.base.graphqls, modules/social_features/social_event/graphql/social_event_schema_extension.extension.graphqls, modules/social_features/social_event/graphql/social_event_tagging_schema_extension.extension.graphqls, modules/social_features/social_follow_user/asyncapi.yml, modules/social_features/social_group/modules/social_group_flexible_group/asyncapi.yml, modules/social_features/social_group/modules/social_group_flexible_group/graphql/social_group_flexible_group_schema_extension.base.graphqls, modules/social_features/social_group/modules/social_group_flexible_group/graphql/social_group_flexible_group_schema_extension.extension.graphqls, modules/social_features/social_like/asyncapi.yml, modules/social_features/social_like/graphql/social_like_schema_extension.extension.graphqls, modules/social_features/social_post/asyncapi.yml, modules/social_features/social_post/graphql/social_post_schema_extension.extension.graphqls, modules/social_features/social_private_message/graphql/social_private_message_schema_extension.extension.graphqls, modules/social_features/social_profile/graphql/social_profile_schema_extension.base.graphqls, modules/social_features/social_profile/graphql/social_profile_schema_extension.extension.graphqls, modules/social_features/social_tagging/graphql/social_tagging_schema_extension.base.graphqls, modules/social_features/social_tagging/graphql/social_tagging_schema_extension.extension.graphqls, modules/social_features/social_topic/asyncapi.yml, modules/social_features/social_topic/graphql/social_topic_flexible_group_schema_extension.extension.graphqls, modules/social_features/social_topic/graphql/social_topic_organization_schema_extension.extension.graphqls, modules/social_features/social_topic/graphql/social_topic_schema_extension.base.graphqls, modules/social_features/social_topic/graphql/social_topic_schema_extension.extension.graphqls, modules/social_features/social_topic/graphql/social_topic_tagging_schema_extension.extension.graphqls, modules/social_features/social_user/asyncapi.yml, modules/social_features/social_user/graphql/social_user_schema_extension.base.graphqls, modules/social_features/social_user/graphql/social_user_schema_extension.extension.graphqls |
| 0/20 | MCP server |
| 0/40 | Runnable examples |
| example_dirs | — |
| has_mcp_signal | no |
| api_schema_files | modules/custom/social_analytics/asyncapi.yml, modules/custom/social_graphql/graphql/open_social.graphqls, modules/custom/social_graphql/graphql/signed_file_upload_schema_extension.base.graphqls, modules/custom/social_graphql/graphql/signed_file_upload_schema_extension.extension.graphqls, modules/custom/social_graphql/tests/modules/test_social_graphql_file_upload/graphql/file_upload_test_schema_extension.extension.graphqls, modules/social_features/social_branding/graphql/social_branding_schema_extension.base.graphqls, modules/social_features/social_branding/graphql/social_branding_schema_extension.extension.graphqls, modules/social_features/social_comment/asyncapi.yml, modules/social_features/social_comment/graphql/social_comment_schema_extension.base.graphqls, modules/social_features/social_comment/graphql/social_comment_schema_extension.extension.graphqls, modules/social_features/social_event/asyncapi.yml, modules/social_features/social_event/graphql/social_event_flexible_group_schema_extension.extension.graphqls, modules/social_features/social_event/graphql/social_event_organization_schema_extension.extension.graphqls, modules/social_features/social_event/graphql/social_event_schema_extension.base.graphqls, modules/social_features/social_event/graphql/social_event_schema_extension.extension.graphqls, modules/social_features/social_event/graphql/social_event_tagging_schema_extension.extension.graphqls, modules/social_features/social_follow_user/asyncapi.yml, modules/social_features/social_group/modules/social_group_flexible_group/asyncapi.yml, modules/social_features/social_group/modules/social_group_flexible_group/graphql/social_group_flexible_group_schema_extension.base.graphqls, modules/social_features/social_group/modules/social_group_flexible_group/graphql/social_group_flexible_group_schema_extension.extension.graphqls, modules/social_features/social_like/asyncapi.yml, modules/social_features/social_like/graphql/social_like_schema_extension.extension.graphqls, modules/social_features/social_post/asyncapi.yml, modules/social_features/social_post/graphql/social_post_schema_extension.extension.graphqls, modules/social_features/social_private_message/graphql/social_private_message_schema_extension.extension.graphqls, modules/social_features/social_profile/graphql/social_profile_schema_extension.base.graphqls, modules/social_features/social_profile/graphql/social_profile_schema_extension.extension.graphqls, modules/social_features/social_tagging/graphql/social_tagging_schema_extension.base.graphqls, modules/social_features/social_tagging/graphql/social_tagging_schema_extension.extension.graphqls, modules/social_features/social_topic/asyncapi.yml, modules/social_features/social_topic/graphql/social_topic_flexible_group_schema_extension.extension.graphqls, modules/social_features/social_topic/graphql/social_topic_organization_schema_extension.extension.graphqls, modules/social_features/social_topic/graphql/social_topic_schema_extension.base.graphqls, modules/social_features/social_topic/graphql/social_topic_schema_extension.extension.graphqls, modules/social_features/social_topic/graphql/social_topic_tagging_schema_extension.extension.graphqls, modules/social_features/social_user/asyncapi.yml, modules/social_features/social_user/graphql/social_user_schema_extension.base.graphqls, modules/social_features/social_user/graphql/social_user_schema_extension.extension.graphqls |
| interfaces_expected_of | network-service |
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Each point covers 10 days.
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 3 | Branch-Protection | branch protection is not maximal on development and all release branches |
| n/a | CI-Tests | no pull request found |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/30 approved changesets -- score normalized to 0 |
| 10 | Contributors | project has 29 contributing companies or organizations |
| n/a | Dangerous-Workflow | no workflows found |
| 10 | Dependency-Update-Tool | update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| n/a | Packaging | packaging workflow not detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | no SAST tool detected |
| 0 | Security-Policy | security policy file not detected |
| n/a | Signed-Releases | no releases found |
| n/a | Token-Permissions | No tokens found |
| 0 | Vulnerabilities | 191 existing vulnerabilities detected |
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| Packagist | cweagans/composer-patches | ^1.6.0 | composer.json |
| Packagist | drupal/address | ^1.12.0 || ^2.0.1 | composer.json |
| Packagist | drupal/admin_toolbar | 3.6.3 | composer.json |
| Packagist | drupal/advancedqueue | ^1.3 | composer.json |
| Packagist | drupal/ajax_comments | 1.0.0-beta6 | composer.json |
| Packagist | drupal/better_exposed_filters | 7.0.5 | composer.json |
| Packagist | drupal/block_field | 1.0.0-rc5 | composer.json |
| Packagist | drupal/bootstrap | 3.34 | composer.json |
| Packagist | drupal/ckeditor | 1.0.2 | composer.json |
| Packagist | drupal/ckeditor5_plugin_pack | ^1.4 | composer.json |
| Packagist | drupal/color | ^2.0@alpha | composer.json |
| Packagist | drupal/config_modify | ^1 | composer.json |
| Packagist | drupal/config_update | 2.0.0-alpha4 | composer.json |
| Packagist | drupal/core | ^10.5.6 | composer.json |
| Packagist | drupal/core-composer-scaffold | ^11 | composer.json |
| Packagist | drupal/crop | 2.4.0 | composer.json |
| Packagist | drupal/csv_serialization | 2.1.0 || ~3.0 || ~4.0 | composer.json |
| Packagist | drupal/data_policy | 2.0.9 | composer.json |
| Packagist | drupal/dynamic_entity_reference | ^3.2.0 | composer.json |
| Packagist | drupal/editor_advanced_link | 2.3.3 | composer.json |
| Packagist | drupal/entity | 1.8.0 | composer.json |
| Packagist | drupal/entity_reference_revisions | 1.14.0 | composer.json |
| Packagist | drupal/exif_orientation | 1.5.0 | composer.json |
| Packagist | drupal/field_group | 4.0.0 | composer.json |
| Packagist | drupal/flag | ^4.0@beta | composer.json |
| Packagist | drupal/flexible_permissions | 2.0.1 | composer.json |
| Packagist | drupal/gin | ^3.0 | composer.json |
| Packagist | drupal/ginvite | 3.0.4 | composer.json |
| Packagist | drupal/graphql | ^5 | composer.json |
| Packagist | drupal/graphql_oauth | 1.0.0-alpha4 | composer.json |
| Packagist | drupal/grequest | ^2.2 | composer.json |
| Packagist | drupal/group | 2.3.2 | composer.json |
| Packagist | drupal/hux | 1.6.1 | composer.json |
| Packagist | drupal/image_effects | ^4.0 | composer.json |
| Packagist | drupal/image_widget_crop | 3.0.0 | composer.json |
| Packagist | drupal/inline_entity_form | ^1.0@RC | composer.json |
| Packagist | drupal/jquery_ui | 1.8.0 | composer.json |
| Packagist | drupal/jquery_ui_accordion | 2.1.0 | composer.json |
| Packagist | drupal/jquery_ui_autocomplete | 2.1.0 | composer.json |
| Packagist | drupal/jquery_ui_datepicker | 2.1.1 | composer.json |
| Packagist | drupal/jquery_ui_draggable | 2.1.0 | composer.json |
| Packagist | drupal/jquery_ui_resizable | 2.1.0 | composer.json |
| Packagist | drupal/jquery_ui_slider | ^2.1 | composer.json |
| Packagist | drupal/jquery_ui_touch_punch | ^1.1 | composer.json |
| Packagist | drupal/kpi_analytics | ^3.1 | composer.json |
| Packagist | drupal/lazy | 4.0.2 | composer.json |
| Packagist | drupal/like_and_dislike | 2.0.1 | composer.json |
| Packagist | drupal/login_tracker | ^2.0 | composer.json |
| Packagist | drupal/meeting_api | ^1.0@alpha | composer.json |
| Packagist | drupal/meeting_api_bbb | ^1.0@alpha | composer.json |
| Packagist | drupal/message | 1.8.0 | composer.json |
| Packagist | drupal/metatag | 2.2.0 | composer.json |
| Packagist | drupal/override_node_options | 2.9.0 | composer.json |
| Packagist | drupal/paragraphs | 1.21.0 | composer.json |
| Packagist | drupal/pathauto | 1.14.0 | composer.json |
| Packagist | drupal/private_message | ^3.0 | composer.json |
| Packagist | drupal/profile | 1.12.0 | composer.json |
| Packagist | drupal/r4032login | ^2.2 | composer.json |
| Packagist | drupal/redirect | ^1.11 | composer.json |
| Packagist | drupal/responsive_table_filter | ^2.0 | composer.json |
| Packagist | drupal/role_delegation | 1.5.0 | composer.json |
| Packagist | drupal/search_api | ^1.40 | composer.json |
| Packagist | drupal/search_api_solr | 4.3.10 | composer.json |
| Packagist | drupal/select2 | ^2.0 | composer.json |
| Packagist | drupal/shariff | 2.0.1 | composer.json |
| Packagist | drupal/smart_trim | ^2.1 | composer.json |
| Packagist | drupal/symfony_mailer | ^1.5 | composer.json |
| Packagist | drupal/taxonomy_access_fix | ^4.0 | composer.json |
| Packagist | drupal/token | 1.16.0 | composer.json |
| Packagist | drupal/ultimate_cron | 2.0.0-alpha8 | composer.json |
| Packagist | drupal/update_helper | ^3 || ^4 | composer.json |
| Packagist | drupal/url_embed | 3.0.0 | composer.json |
| Packagist | drupal/variationcache | ^1.4 | composer.json |
| Packagist | drupal/video_embed_field | 2.5.0 | composer.json |
| Packagist | drupal/views_bulk_operations | 4.4.4 | composer.json |
| Packagist | drupal/views_ef_fieldset | ^1.10 | composer.json |
| Packagist | drupal/views_infinite_scroll | 2.0.3 | composer.json |
| Packagist | drupal/votingapi | 3.0.0-beta5 | composer.json |
| Packagist | drupal/weight | 3.6.0 | composer.json |
| Packagist | eluceo/ical | ^2.7 | composer.json |
| Packagist | goalgorilla/open_social_upgrade_patches | ^1 || ^2 | composer.json |
| Packagist | goalgorilla/rich_text_json_exchange | self.version | composer.json |
| Packagist | league/csv | ^9.0 | composer.json |
| Packagist | matomo/device-detector | ^3.13 | composer.json |
| Packagist | minishlink/web-push | ^9.0 || ^10.0 | composer.json |
| Packagist | npm-asset/autosize | ~4.0.2 | composer.json |
| Packagist | npm-asset/bootstrap | v3.4.1 | composer.json |
| Packagist | npm-asset/d3 | v3.5.17 | composer.json |
| Packagist | npm-asset/diff | ^3.5 | composer.json |
| Packagist | npm-asset/emoji-picker-element | ^1.10 | composer.json |
| Packagist | npm-asset/fullcalendar | ^6.1 | composer.json |
| Packagist | npm-asset/jquery-ui-touch-punch | ^0.2.3 | composer.json |
| Packagist | npm-asset/jquery.caret | ^0.3.1 | composer.json |
| Packagist | npm-asset/lazysizes | ^5.3 | composer.json |
| Packagist | npm-asset/morris.js06 | ^0.6.6 | composer.json |
| Packagist | npm-asset/node-waves | 0.7.6 | composer.json |
| Packagist | npm-asset/photoswipe | ^4.1.2 | composer.json |
| Packagist | npm-asset/raphael | 2.3.0 | composer.json |
| Packagist | npm-asset/react | ^16.7.0 | composer.json |
| Packagist | npm-asset/react-dom | ^16.7.0 | composer.json |
| Packagist | npm-asset/select2 | ~4.0.5 | composer.json |
| Packagist | npm-asset/shariff | ^3.0.1 | composer.json |
| Packagist | npm-asset/slick-carousel | ~1.8.1 | composer.json |
| Packagist | npm-asset/tablesaw | ~3.1.0 | composer.json |
| Packagist | oomphinc/composer-installers-extender | ~1.0 || ~2.0 | composer.json |
| Packagist | spatie/color | ^1.2 | composer.json |
Full resolved dependency set from the GitHub dependency graph: 106 direct and 951 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
| Registry | Package | Version | Relation |
|---|---|---|---|
| Packagist | cweagans/composer-patches | — | direct |
| Packagist | drupal/address | — | direct |
| Packagist | drupal/admin_toolbar | 3.6.3 | direct |
| Packagist | drupal/advancedqueue | — | direct |
| Packagist | drupal/ajax_comments | — | direct |
| Packagist | drupal/better_exposed_filters | 7.0.5 | direct |
| Packagist | drupal/block_field | — | direct |
| Packagist | drupal/bootstrap | 3.34 | direct |
| Packagist | drupal/ckeditor | 1.0.2 | direct |
| Packagist | drupal/ckeditor5_plugin_pack | — | direct |
| Packagist | drupal/color | — | direct |
| Packagist | drupal/config_modify | — | direct |
| Packagist | drupal/config_update | — | direct |
| Packagist | drupal/core | — | direct |
| Packagist | drupal/core-composer-scaffold | — | direct |
| Packagist | drupal/crop | 2.4.0 | direct |
| Packagist | drupal/csv_serialization | — | direct |
| Packagist | drupal/data_policy | 2.0.9 | direct |
| Packagist | drupal/dynamic_entity_reference | — | direct |
| Packagist | drupal/editor_advanced_link | 2.3.3 | direct |
| Packagist | drupal/entity | 1.8.0 | direct |
| Packagist | drupal/entity_reference_revisions | 1.14.0 | direct |
| Packagist | drupal/exif_orientation | 1.5.0 | direct |
| Packagist | drupal/field_group | 4.0.0 | direct |
| Packagist | drupal/flag | — | direct |
| Packagist | drupal/flexible_permissions | 2.0.1 | direct |
| Packagist | drupal/gin | — | direct |
| Packagist | drupal/ginvite | 3.0.4 | direct |
| Packagist | drupal/graphql | — | direct |
| Packagist | drupal/graphql_oauth | — | direct |
| Packagist | drupal/grequest | — | direct |
| Packagist | drupal/group | 2.3.2 | direct |
| Packagist | drupal/hux | 1.6.1 | direct |
| Packagist | drupal/image_effects | — | direct |
| Packagist | drupal/image_widget_crop | 3.0.0 | direct |
| Packagist | drupal/inline_entity_form | — | direct |
| Packagist | drupal/jquery_ui | 1.8.0 | direct |
| Packagist | drupal/jquery_ui_accordion | 2.1.0 | direct |
| Packagist | drupal/jquery_ui_autocomplete | 2.1.0 | direct |
| Packagist | drupal/jquery_ui_datepicker | 2.1.1 | direct |
| Packagist | drupal/jquery_ui_draggable | 2.1.0 | direct |
| Packagist | drupal/jquery_ui_resizable | 2.1.0 | direct |
| Packagist | drupal/jquery_ui_slider | — | direct |
| Packagist | drupal/jquery_ui_touch_punch | — | direct |
| Packagist | drupal/kpi_analytics | — | direct |
| Packagist | drupal/lazy | 4.0.2 | direct |
| Packagist | drupal/like_and_dislike | 2.0.1 | direct |
| Packagist | drupal/login_tracker | — | direct |
| Packagist | drupal/meeting_api | — | direct |
| Packagist | drupal/meeting_api_bbb | — | direct |
| Packagist | drupal/message | 1.8.0 | direct |
| Packagist | drupal/metatag | 2.2.0 | direct |
| Packagist | drupal/override_node_options | 2.9.0 | direct |
| Packagist | drupal/paragraphs | 1.21.0 | direct |
| Packagist | drupal/pathauto | 1.14.0 | direct |
| Packagist | drupal/private_message | — | direct |
| Packagist | drupal/profile | 1.12.0 | direct |
| Packagist | drupal/r4032login | — | direct |
| Packagist | drupal/redirect | — | direct |
| Packagist | drupal/responsive_table_filter | — | direct |
| Packagist | drupal/role_delegation | 1.5.0 | direct |
| Packagist | drupal/search_api | — | direct |
| Packagist | drupal/search_api_solr | 4.3.10 | direct |
| Packagist | drupal/select2 | — | direct |
| Packagist | drupal/shariff | 2.0.1 | direct |
| Packagist | drupal/smart_trim | — | direct |
| Packagist | drupal/symfony_mailer | — | direct |
| Packagist | drupal/taxonomy_access_fix | — | direct |
| Packagist | drupal/token | 1.16.0 | direct |
| Packagist | drupal/ultimate_cron | — | direct |
| Packagist | drupal/update_helper | — | direct |
| Packagist | drupal/url_embed | 3.0.0 | direct |
| Packagist | drupal/variationcache | — | direct |
| Packagist | drupal/video_embed_field | 2.5.0 | direct |
| Packagist | drupal/views_bulk_operations | 4.4.4 | direct |
| Packagist | drupal/views_ef_fieldset | — | direct |
| Packagist | drupal/views_infinite_scroll | 2.0.3 | direct |
| Packagist | drupal/votingapi | — | direct |
| Packagist | drupal/weight | 3.6.0 | direct |
| Packagist | eluceo/ical | — | direct |
| Packagist | goalgorilla/open_social_upgrade_patches | — | direct |
| Packagist | goalgorilla/rich_text_json_exchange | — | direct |
| Packagist | league/csv | — | direct |
| Packagist | matomo/device-detector | — | direct |
| Packagist | minishlink/web-push | — | direct |
| Packagist | npm-asset/autosize | — | direct |
| Packagist | npm-asset/bootstrap | 3.4.1 | direct |
| Packagist | npm-asset/d3 | 3.5.17 | direct |
| Packagist | npm-asset/diff | — | direct |
| Packagist | npm-asset/emoji-picker-element | — | direct |
| Packagist | npm-asset/fullcalendar | — | direct |
| Packagist | npm-asset/jquery-ui-touch-punch | — | direct |
| Packagist | npm-asset/jquery.caret | — | direct |
| Packagist | npm-asset/lazysizes | — | direct |
| Packagist | npm-asset/morris.js06 | — | direct |
| Packagist | npm-asset/node-waves | 0.7.6 | direct |
| Packagist | npm-asset/photoswipe | — | direct |
| Packagist | npm-asset/raphael | 2.3.0 | direct |
| Packagist | npm-asset/react | — | direct |
| Packagist | npm-asset/react-dom | — | direct |
| Packagist | npm-asset/select2 | — | direct |
| Packagist | npm-asset/shariff | — | direct |
| Packagist | npm-asset/slick-carousel | — | direct |
| Packagist | npm-asset/tablesaw | — | direct |
| Packagist | oomphinc/composer-installers-extender | — | direct |
| Packagist | spatie/color | — | direct |
| npm | @babel/runtime | 7.9.2 | indirect |
| npm | @types/color-name | 1.1.1 | indirect |
| npm | a-sync-waterfall | 1.0.1 | indirect |
| npm | abbrev | 1.1.1 | indirect |
| npm | accepts | 1.3.7 | indirect |
| npm | acorn | 3.3.0 | indirect |
| npm | acorn | 5.7.4 | indirect |
| npm | acorn-jsx | 3.0.1 | indirect |
| npm | after | 0.8.2 | indirect |
| npm | ajv | 4.11.8 | indirect |
| npm | ajv | 5.5.2 | indirect |
| npm | ajv | 6.12.2 | indirect |
| npm | ajv-keywords | 1.5.1 | indirect |
| npm | ajv-keywords | 2.1.1 | indirect |
| npm | amdefine | 1.0.1 | indirect |
| npm | ansi-colors | 1.1.0 | indirect |
| npm | ansi-cyan | 0.1.1 | indirect |
| npm | ansi-escapes | 1.4.0 | indirect |
| npm | ansi-escapes | 3.2.0 | indirect |
| npm | ansi-gray | 0.1.1 | indirect |
| npm | ansi-red | 0.1.1 | indirect |
| npm | ansi-regex | 2.1.1 | indirect |
| npm | ansi-regex | 3.0.0 | indirect |
| npm | ansi-regex | 5.0.0 | indirect |
| npm | ansi-styles | 2.2.1 | indirect |
| npm | ansi-styles | 3.2.1 | indirect |
| npm | ansi-styles | 4.2.1 | indirect |
| npm | ansi-wrap | 0.1.0 | indirect |
| npm | anymatch | 2.0.0 | indirect |
| npm | anymatch | 3.1.1 | indirect |
| npm | aproba | 1.2.0 | indirect |
| npm | archy | 1.0.0 | indirect |
| npm | are-we-there-yet | 1.1.5 | indirect |
| npm | argparse | 1.0.10 | indirect |
| npm | arr-diff | 1.1.0 | indirect |
| npm | arr-diff | 4.0.0 | indirect |
| npm | arr-flatten | 1.1.0 | indirect |
| npm | arr-union | 2.1.0 | indirect |
| npm | arr-union | 3.1.0 | indirect |
| npm | array-differ | 1.0.0 | indirect |
| npm | array-each | 1.0.1 | indirect |
| npm | array-find-index | 1.0.2 | indirect |
| npm | array-slice | 0.2.3 | indirect |
| npm | array-slice | 1.1.0 | indirect |
| npm | array-union | 1.0.2 | indirect |
| npm | array-uniq | 1.0.3 | indirect |
| npm | array-unique | 0.2.1 | indirect |
| npm | array-unique | 0.3.2 | indirect |
| npm | arraybuffer.slice | 0.0.7 | indirect |
| npm | asap | 2.0.6 | indirect |
| npm | asn1 | 0.2.4 | indirect |
| npm | assert-plus | 1.0.0 | indirect |
| npm | assign-symbols | 1.0.0 | indirect |
| npm | async | 1.5.2 | indirect |
| npm | async-each | 1.0.3 | indirect |
| npm | async-each-series | 0.1.1 | indirect |
| npm | async-foreach | 0.1.3 | indirect |
| npm | async-limiter | 1.0.1 | indirect |
| npm | asynckit | 0.4.0 | indirect |
| npm | at-least-node | 1.0.0 | indirect |
| npm | atob | 2.1.2 | indirect |
| npm | autoprefixer | 7.2.6 | indirect |
| npm | aws-sign2 | 0.7.0 | indirect |
| npm | aws4 | 1.9.1 | indirect |
| npm | axios | 0.19.0 | indirect |
| npm | babel-code-frame | 6.26.0 | indirect |
| npm | backo2 | 1.0.2 | indirect |
| npm | balanced-match | 0.4.2 | indirect |
| npm | balanced-match | 1.0.0 | indirect |
| npm | base | 0.11.2 | indirect |
| npm | base64-arraybuffer | 0.1.5 | indirect |
| npm | base64id | 1.0.0 | indirect |
| npm | batch | 0.6.1 | indirect |
| npm | bcrypt-pbkdf | 1.0.2 | indirect |
| npm | beeper | 1.1.1 | indirect |
| npm | better-assert | 1.0.2 | indirect |
| npm | binary-extensions | 1.13.1 | indirect |
| npm | binary-extensions | 2.0.0 | indirect |
| npm | bindings | 1.5.0 | indirect |
| npm | blob | 0.0.5 | indirect |
| npm | block-stream | 0.0.9 | indirect |
| npm | bluebird | 3.7.2 | indirect |
| npm | boolbase | 1.0.0 | indirect |
| npm | brace-expansion | 1.1.11 | indirect |
| npm | braces | 2.3.2 | indirect |
| npm | braces | 3.0.2 | indirect |
| npm | browser-sync | 2.26.7 | indirect |
| npm | browser-sync-client | 2.26.6 | indirect |
| npm | browser-sync-ui | 2.26.4 | indirect |
| npm | browserslist | 2.11.3 | indirect |
| npm | bs-recipes | 1.3.4 | indirect |
| npm | bs-snippet-injector | 2.0.1 | indirect |
| npm | buffer-from | 1.1.1 | indirect |
| npm | bump-regex | 2.9.0 | indirect |
| npm | bytes | 3.1.0 | indirect |
| npm | cache-base | 1.0.1 | indirect |
| npm | caller-path | 0.1.0 | indirect |
| npm | callsite | 1.0.0 | indirect |
| npm | callsites | 0.2.0 | indirect |
| npm | camelcase | 2.1.1 | indirect |
| npm | camelcase | 3.0.0 | indirect |
| npm | camelcase | 5.3.1 | indirect |
| npm | camelcase-keys | 2.1.0 | indirect |
| npm | caniuse-lite | 1.0.30001048 | indirect |
| npm | caseless | 0.12.0 | indirect |
| npm | chalk | 1.1.3 | indirect |
| npm | chalk | 2.4.2 | indirect |
| npm | chalk | 4.0.0 | indirect |
| npm | chardet | 0.4.2 | indirect |
| npm | cheerio | 0.22.0 | indirect |
| npm | chokidar | 2.1.8 | indirect |
| npm | chokidar | 3.4.0 | indirect |
| npm | chownr | 1.1.4 | indirect |
| npm | circular-json | 0.3.3 | indirect |
| npm | clap | 1.2.3 | indirect |
| npm | class-utils | 0.3.6 | indirect |
| npm | clean-css | 4.2.1 | indirect |
| npm | cli-cursor | 1.0.2 | indirect |
| npm | cli-cursor | 2.1.0 | indirect |
| npm | cli-width | 1.1.1 | indirect |
| npm | cli-width | 2.2.1 | indirect |
| npm | clipboard | 2.0.6 | indirect |
| npm | cliui | 3.2.0 | indirect |
| npm | cliui | 6.0.0 | indirect |
| npm | clone | 0.2.0 | indirect |
| npm | clone | 1.0.4 | indirect |
| npm | clone | 2.1.2 | indirect |
| npm | clone-buffer | 1.0.0 | indirect |
| npm | clone-stats | 0.0.1 | indirect |
| npm | clone-stats | 1.0.0 | indirect |
| npm | cloneable-readable | 1.1.3 | indirect |
| npm | co | 4.6.0 | indirect |
| npm | coa | 1.0.4 | indirect |
| npm | code-point-at | 1.1.0 | indirect |
| npm | collection-visit | 1.0.0 | indirect |
| npm | color-convert | 1.9.3 | indirect |
| npm | color-convert | 2.0.1 | indirect |
| npm | color-name | 1.1.3 | indirect |
| npm | color-name | 1.1.4 | indirect |
| npm | color-support | 1.1.3 | indirect |
| npm | colors | 1.1.2 | indirect |
| npm | combined-stream | 1.0.8 | indirect |
| npm | commander | 2.20.3 | indirect |
| npm | commander | 3.0.2 | indirect |
| npm | component-bind | 1.0.0 | indirect |
| npm | component-emitter | 1.2.1 | indirect |
| npm | component-emitter | 1.3.0 | indirect |
| npm | component-inherit | 0.0.3 | indirect |
| npm | concat-map | 0.0.1 | indirect |
| npm | concat-stream | 1.6.2 | indirect |
| npm | concat-with-sourcemaps | 1.1.0 | indirect |
| npm | connect | 3.6.6 | indirect |
| npm | connect-history-api-fallback | 1.6.0 | indirect |
| npm | console-control-strings | 1.1.0 | indirect |
| npm | cookie | 0.3.1 | indirect |
| npm | copy-descriptor | 0.1.1 | indirect |
| npm | core-util-is | 1.0.2 | indirect |
| npm | cosmiconfig | 2.2.2 | indirect |
| npm | cross-spawn | 3.0.1 | indirect |
| npm | cross-spawn | 5.1.0 | indirect |
| npm | css-mqpacker | 6.0.2 | indirect |
| npm | css-select | 1.2.0 | indirect |
| npm | css-what | 2.1.3 | indirect |
| npm | csso | 2.3.2 | indirect |
| npm | currently-unhandled | 0.4.1 | indirect |
| npm | d | 1.0.1 | indirect |
| npm | dashdash | 1.14.1 | indirect |
| npm | dateformat | 1.0.12 | indirect |
| npm | dateformat | 2.2.0 | indirect |
| npm | debug | 2.6.9 | indirect |
| npm | debug | 3.1.0 | indirect |
| npm | debug | 3.2.6 | indirect |
| npm | debug | 4.1.1 | indirect |
| npm | decamelize | 1.2.0 | indirect |
| npm | decode-uri-component | 0.2.0 | indirect |
| npm | deep-extend | 0.6.0 | indirect |
| npm | deep-is | 0.1.3 | indirect |
| npm | defaults | 1.0.3 | indirect |
| npm | define-property | 0.2.5 | indirect |
| npm | define-property | 1.0.0 | indirect |
| npm | define-property | 2.0.2 | indirect |
| npm | del | 3.0.0 | indirect |
| npm | delayed-stream | 1.0.0 | indirect |
| npm | delegate | 3.2.0 | indirect |
| npm | delegates | 1.0.0 | indirect |
| npm | depd | 1.1.2 | indirect |
| npm | deprecated | 0.0.1 | indirect |
| npm | destroy | 1.0.4 | indirect |
| npm | detect-file | 1.0.0 | indirect |
| npm | detect-libc | 1.0.3 | indirect |
| npm | dev-ip | 1.0.1 | indirect |
| npm | doctrine | 1.5.0 | indirect |
| npm | doctrine | 2.1.0 | indirect |
| npm | dom-serializer | 0.1.1 | indirect |
| npm | dom-serializer | 0.2.2 | indirect |
| npm | domelementtype | 1.3.1 | indirect |
| npm | domelementtype | 2.0.1 | indirect |
| npm | domhandler | 2.4.2 | indirect |
| npm | domutils | 1.5.1 | indirect |
| npm | domutils | 1.7.0 | indirect |
| npm | duplexer | 0.1.1 | indirect |
| npm | duplexer2 | 0.0.2 | indirect |
| npm | duplexify | 3.7.1 | indirect |
| npm | easy-extender | 2.3.4 | indirect |
| npm | eazy-logger | 3.0.2 | indirect |
| npm | ecc-jsbn | 0.1.2 | indirect |
| npm | ee-first | 1.1.1 | indirect |
| npm | electron-to-chromium | 1.3.420 | indirect |
| npm | emoji-regex | 8.0.0 | indirect |
| npm | encodeurl | 1.0.2 | indirect |
| npm | end-of-stream | 0.1.5 | indirect |
| npm | end-of-stream | 1.4.4 | indirect |
| npm | engine.io | 3.2.1 | indirect |
| npm | engine.io-client | 3.2.1 | indirect |
| npm | engine.io-client | 3.4.1 | indirect |
| npm | engine.io-parser | 2.1.3 | indirect |
| npm | engine.io-parser | 2.2.0 | indirect |
| npm | entities | 1.1.2 | indirect |
| npm | entities | 2.0.0 | indirect |
| npm | error-ex | 1.3.2 | indirect |
| npm | es5-ext | 0.10.53 | indirect |
| npm | es6-iterator | 2.0.3 | indirect |
| npm | es6-map | 0.1.5 | indirect |
| npm | es6-promise | 4.2.8 | indirect |
| npm | es6-set | 0.1.5 | indirect |
| npm | es6-symbol | 3.1.1 | indirect |
| npm | es6-symbol | 3.1.3 | indirect |
| npm | es6-weak-map | 2.0.3 | indirect |
| npm | escape-html | 1.0.3 | indirect |
| npm | escape-string-regexp | 1.0.5 | indirect |
| npm | escope | 3.6.0 | indirect |
| npm | eslint | 2.13.1 | indirect |
| npm | eslint | 4.19.1 | indirect |
| npm | eslint-scope | 3.7.3 | indirect |
| npm | eslint-visitor-keys | 1.1.0 | indirect |
| npm | espree | 3.5.4 | indirect |
| npm | esprima | 2.7.3 | indirect |
| npm | esprima | 4.0.1 | indirect |
| npm | esquery | 1.3.1 | indirect |
| npm | esrecurse | 4.2.1 | indirect |
| npm | estraverse | 4.3.0 | indirect |
| npm | estraverse | 5.1.0 | indirect |
| npm | esutils | 2.0.3 | indirect |
| npm | etag | 1.8.1 | indirect |
| npm | event-emitter | 0.3.5 | indirect |
| npm | event-stream | 3.0.20 | indirect |
| npm | event-stream | 4.0.1 | indirect |
| npm | eventemitter3 | 1.2.0 | indirect |
| npm | exit-hook | 1.1.1 | indirect |
| npm | expand-brackets | 2.1.4 | indirect |
| npm | expand-tilde | 2.0.2 | indirect |
| npm | ext | 1.4.0 | indirect |
| npm | extend | 3.0.2 | indirect |
| npm | extend-shallow | 1.1.4 | indirect |
| npm | extend-shallow | 2.0.1 | indirect |
| npm | extend-shallow | 3.0.2 | indirect |
| npm | external-editor | 2.2.0 | indirect |
| npm | extglob | 2.0.4 | indirect |
| npm | extsprintf | 1.3.0 | indirect |
| npm | extsprintf | 1.4.0 | indirect |
| npm | fancy-log | 1.3.3 | indirect |
| npm | fast-deep-equal | 1.1.0 | indirect |
| npm | fast-deep-equal | 3.1.1 | indirect |
| npm | fast-json-stable-stringify | 2.1.0 | indirect |
| npm | fast-levenshtein | 2.0.6 | indirect |
| npm | figures | 1.7.0 | indirect |
| npm | figures | 2.0.0 | indirect |
| npm | file-entry-cache | 1.3.1 | indirect |
| npm | file-entry-cache | 2.0.0 | indirect |
| npm | file-uri-to-path | 1.0.0 | indirect |
| npm | fill-range | 4.0.0 | indirect |
| npm | fill-range | 7.0.1 | indirect |
| npm | finalhandler | 1.1.0 | indirect |
| npm | find-index | 0.1.1 | indirect |
| npm | find-up | 1.1.2 | indirect |
| npm | find-up | 4.1.0 | indirect |
| npm | findup-sync | 2.0.0 | indirect |
| npm | findup-sync | 3.0.0 | indirect |
| npm | fined | 1.2.0 | indirect |
| npm | first-chunk-stream | 1.0.0 | indirect |
| npm | flagged-respawn | 1.0.1 | indirect |
| npm | flat-cache | 1.3.4 | indirect |
| npm | follow-redirects | 1.5.10 | indirect |
| npm | for-in | 1.0.2 | indirect |
| npm | for-own | 1.0.0 | indirect |
| npm | foreachasync | 3.0.0 | indirect |
| npm | forever-agent | 0.6.1 | indirect |
| npm | fork-stream | 0.0.4 | indirect |
| npm | form-data | 2.3.3 | indirect |
| npm | fragment-cache | 0.2.1 | indirect |
| npm | fresh | 0.5.2 | indirect |
| npm | from | 0.1.7 | indirect |
| npm | front-matter | 2.1.2 | indirect |
| npm | fs-extra | 3.0.1 | indirect |
| npm | fs-extra | 9.0.0 | indirect |
| npm | fs-minipass | 1.2.7 | indirect |
| npm | fs.realpath | 1.0.0 | indirect |
| npm | fsevents | 1.2.12 | indirect |
| npm | fsevents | 2.1.3 | indirect |
| npm | fstream | 1.0.12 | indirect |
| npm | function-bind | 1.1.1 | indirect |
| npm | functional-red-black-tree | 1.0.1 | indirect |
| npm | gather-stream | 1.0.0 | indirect |
| npm | gauge | 2.7.4 | indirect |
| npm | gaze | 0.5.2 | indirect |
| npm | gaze | 1.1.3 | indirect |
| npm | generate-function | 2.3.1 | indirect |
| npm | generate-object-property | 1.2.0 | indirect |
| npm | get-caller-file | 1.0.3 | indirect |
| npm | get-caller-file | 2.0.5 | indirect |
| npm | get-stdin | 4.0.1 | indirect |
| npm | get-value | 2.0.6 | indirect |
| npm | getpass | 0.1.7 | indirect |
| npm | glob | 3.1.21 | indirect |
| npm | glob | 4.5.3 | indirect |
| npm | glob | 7.1.6 | indirect |
| npm | glob-parent | 3.1.0 | indirect |
| npm | glob-parent | 5.1.1 | indirect |
| npm | glob-stream | 3.1.18 | indirect |
| npm | glob-watcher | 0.0.6 | indirect |
| npm | glob2base | 0.0.12 | indirect |
| npm | global-modules | 1.0.0 | indirect |
| npm | global-prefix | 1.0.2 | indirect |
| npm | globals | 11.12.0 | indirect |
| npm | globals | 9.18.0 | indirect |
| npm | globby | 6.1.0 | indirect |
| npm | globule | 0.1.0 | indirect |
| npm | globule | 1.3.1 | indirect |
| npm | glogg | 1.0.2 | indirect |
| npm | gonzales-pe-sl | 4.2.3 | indirect |
| npm | good-listener | 1.2.2 | indirect |
| npm | graceful-fs | 4.2.4 | indirect |
| npm | growly | 1.3.0 | indirect |
| npm | gulp | 3.9.1 | indirect |
| npm | gulp-bump | 2.9.0 | indirect |
| npm | gulp-cheerio | 0.6.3 | indirect |
| npm | gulp-clean-css | 3.10.0 | indirect |
| npm | gulp-concat | 2.6.1 | indirect |
| npm | gulp-flatten | 0.3.1 | indirect |
| npm | gulp-if | 2.0.2 | indirect |
| npm | gulp-load-plugins | 1.6.0 | indirect |
| npm | gulp-match | 1.1.0 | indirect |
| npm | gulp-notify | 3.2.0 | indirect |
| npm | gulp-plumber | 1.2.1 | indirect |
| npm | gulp-postcss | 7.0.1 | indirect |
| npm | gulp-prefix-css | 0.0.4 | indirect |
| npm | gulp-prompt | 0.2.0 | indirect |
| npm | gulp-rename | 1.4.0 | indirect |
| npm | gulp-rsync | 0.0.8 | indirect |
| npm | gulp-rucksack | 0.1.4 | indirect |
| npm | gulp-sass | 3.2.1 | indirect |
| npm | gulp-sass | 4.1.0 | indirect |
| npm | gulp-sass-lint | 1.4.0 | indirect |
| npm | gulp-size | 2.1.0 | indirect |
| npm | gulp-size | 3.0.0 | indirect |
| npm | gulp-svgmin | 1.2.4 | indirect |
| npm | gulp-svgstore | 6.1.1 | indirect |
| npm | gulp-twig | 1.2.0 | indirect |
| npm | gulp-uglify | 3.0.2 | indirect |
| npm | gulp-util | 3.0.8 | indirect |
| npm | gulplog | 1.0.0 | indirect |
| npm | gzip-size | 3.0.0 | indirect |
| npm | gzip-size | 4.1.0 | indirect |
| npm | handlebars | 4.7.6 | indirect |
| npm | har-schema | 2.0.0 | indirect |
| npm | har-validator | 5.1.3 | indirect |
| npm | has | 1.0.3 | indirect |
| npm | has-ansi | 2.0.0 | indirect |
| npm | has-binary2 | 1.0.3 | indirect |
| npm | has-cors | 1.1.0 | indirect |
| npm | has-flag | 3.0.0 | indirect |
| npm | has-flag | 4.0.0 | indirect |
| npm | has-gulplog | 0.1.0 | indirect |
| npm | has-unicode | 2.0.1 | indirect |
| npm | has-value | 0.3.1 | indirect |
| npm | has-value | 1.0.0 | indirect |
| npm | has-values | 0.1.4 | indirect |
| npm | has-values | 1.0.0 | indirect |
| npm | highlight.js | 9.18.1 | indirect |
| npm | homedir-polyfill | 1.0.3 | indirect |
| npm | hosted-git-info | 2.8.8 | indirect |
| npm | htmlparser2 | 3.10.1 | indirect |
| npm | http-errors | 1.6.3 | indirect |
| npm | http-errors | 1.7.3 | indirect |
| npm | http-proxy | 1.15.2 | indirect |
| npm | http-signature | 1.2.0 | indirect |
| npm | iconv-lite | 0.4.24 | indirect |
| npm | ignore | 3.3.10 | indirect |
| npm | ignore-walk | 3.0.3 | indirect |
| npm | immutable | 3.8.2 | indirect |
| npm | imurmurhash | 0.1.4 | indirect |
| npm | in-publish | 2.0.1 | indirect |
| npm | indent-string | 2.1.0 | indirect |
| npm | indexof | 0.0.1 | indirect |
| npm | inflight | 1.0.6 | indirect |
| npm | inherits | 1.0.2 | indirect |
| npm | inherits | 2.0.3 | indirect |
| npm | inherits | 2.0.4 | indirect |
| npm | ini | 1.3.5 | indirect |
| npm | inquirer | 0.10.1 | indirect |
| npm | inquirer | 0.12.0 | indirect |
| npm | inquirer | 3.3.0 | indirect |
| npm | interpret | 1.2.0 | indirect |
| npm | invert-kv | 1.0.0 | indirect |
| npm | is | 3.3.0 | indirect |
| npm | is-absolute | 1.0.0 | indirect |
| npm | is-accessor-descriptor | 0.1.6 | indirect |
| npm | is-accessor-descriptor | 1.0.0 | indirect |
| npm | is-arrayish | 0.2.1 | indirect |
| npm | is-binary-path | 1.0.1 | indirect |
| npm | is-binary-path | 2.1.0 | indirect |
| npm | is-buffer | 1.1.6 | indirect |
| npm | is-buffer | 2.0.4 | indirect |
| npm | is-data-descriptor | 0.1.4 | indirect |
| npm | is-data-descriptor | 1.0.0 | indirect |
| npm | is-descriptor | 0.1.6 | indirect |
| npm | is-descriptor | 1.0.2 | indirect |
| npm | is-directory | 0.3.1 | indirect |
| npm | is-extendable | 0.1.1 | indirect |
| npm | is-extendable | 1.0.1 | indirect |
| npm | is-extglob | 2.1.1 | indirect |
| npm | is-finite | 1.1.0 | indirect |
| npm | is-fullwidth-code-point | 1.0.0 | indirect |
| npm | is-fullwidth-code-point | 2.0.0 | indirect |
| npm | is-fullwidth-code-point | 3.0.0 | indirect |
| npm | is-glob | 3.1.0 | indirect |
| npm | is-glob | 4.0.1 | indirect |
| npm | is-my-ip-valid | 1.0.0 | indirect |
| npm | is-my-json-valid | 2.20.0 | indirect |
| npm | is-number | 3.0.0 | indirect |
| npm | is-number | 7.0.0 | indirect |
| npm | is-number-like | 1.0.8 | indirect |
| npm | is-path-cwd | 1.0.0 | indirect |
| npm | is-path-in-cwd | 1.0.1 | indirect |
| npm | is-path-inside | 1.0.1 | indirect |
| npm | is-plain-object | 2.0.4 | indirect |
| npm | is-property | 1.0.2 | indirect |
| npm | is-relative | 1.0.0 | indirect |
| npm | is-resolvable | 1.1.0 | indirect |
| npm | is-typedarray | 1.0.0 | indirect |
| npm | is-unc-path | 1.0.0 | indirect |
| npm | is-utf8 | 0.2.1 | indirect |
| npm | is-windows | 1.0.2 | indirect |
| npm | is-wsl | 1.1.0 | indirect |
| npm | isarray | 0.0.1 | indirect |
| npm | isarray | 1.0.0 | indirect |
| npm | isarray | 2.0.1 | indirect |
| npm | isexe | 2.0.0 | indirect |
| npm | isobject | 2.1.0 | indirect |
| npm | isobject | 3.0.1 | indirect |
| npm | isstream | 0.1.2 | indirect |
| npm | js-base64 | 2.5.2 | indirect |
| npm | js-tokens | 3.0.2 | indirect |
| npm | js-yaml | 3.13.1 | indirect |
| npm | js-yaml | 3.7.0 | indirect |
| npm | jsbn | 0.1.1 | indirect |
| npm | json-schema | 0.2.3 | indirect |
| npm | json-schema-traverse | 0.3.1 | indirect |
| npm | json-schema-traverse | 0.4.1 | indirect |
| npm | json-stable-stringify | 1.0.1 | indirect |
| npm | json-stable-stringify-without-jsonify | 1.0.1 | indirect |
| npm | json-stringify-safe | 5.0.1 | indirect |
| npm | jsonfile | 3.0.1 | indirect |
| npm | jsonfile | 6.0.1 | indirect |
| npm | jsonify | 0.0.0 | indirect |
| npm | jsonpointer | 4.0.1 | indirect |
| npm | jsprim | 1.4.1 | indirect |
| npm | kind-of | 1.1.0 | indirect |
| npm | kind-of | 3.2.2 | indirect |
| npm | kind-of | 4.0.0 | indirect |
| npm | kind-of | 5.1.0 | indirect |
| npm | kind-of | 6.0.3 | indirect |
| npm | known-css-properties | 0.3.0 | indirect |
| npm | kss | 3.0.1 | indirect |
| npm | laggard | 2.0.1 | indirect |
| npm | lcid | 1.0.0 | indirect |
| npm | levn | 0.3.0 | indirect |
| npm | liftoff | 2.5.0 | indirect |
| npm | limiter | 1.1.5 | indirect |
| npm | linkify-it | 2.2.0 | indirect |
| npm | load-json-file | 1.1.0 | indirect |
| npm | localtunnel | 1.9.2 | indirect |
| npm | locate-path | 5.0.0 | indirect |
| npm | locutus | 2.0.11 | indirect |
| npm | lodash | 1.0.2 | indirect |
| npm | lodash | 3.10.1 | indirect |
| npm | lodash | 4.17.15 | indirect |
| npm | lodash._arraypool | 2.4.1 | indirect |
| npm | lodash._basebind | 2.4.1 | indirect |
| npm | lodash._basecopy | 3.0.1 | indirect |
| npm | lodash._basecreate | 2.4.1 | indirect |
| npm | lodash._basecreatecallback | 2.4.1 | indirect |
| npm | lodash._basecreatewrapper | 2.4.1 | indirect |
| npm | lodash._baseisequal | 2.4.1 | indirect |
| npm | lodash._basetostring | 3.0.1 | indirect |
| npm | lodash._basevalues | 3.0.0 | indirect |
| npm | lodash._createwrapper | 2.4.1 | indirect |
| npm | lodash._getarray | 2.4.1 | indirect |
| npm | lodash._getnative | 3.9.1 | indirect |
| npm | lodash._isiterateecall | 3.0.9 | indirect |
| npm | lodash._isnative | 2.4.1 | indirect |
| npm | lodash._maxpoolsize | 2.4.1 | indirect |
| npm | lodash._objecttypes | 2.4.1 | indirect |
| npm | lodash._reescape | 3.0.0 | indirect |
| npm | lodash._reevaluate | 3.0.0 | indirect |
| npm | lodash._reinterpolate | 3.0.0 | indirect |
| npm | lodash._releasearray | 2.4.1 | indirect |
| npm | lodash._root | 3.0.1 | indirect |
| npm | lodash._setbinddata | 2.4.1 | indirect |
| npm | lodash._shimkeys | 2.4.1 | indirect |
| npm | lodash._slice | 2.4.1 | indirect |
| npm | lodash.assignin | 4.2.0 | indirect |
| npm | lodash.bind | 2.4.1 | indirect |
| npm | lodash.bind | 4.2.1 | indirect |
| npm | lodash.capitalize | 4.2.1 | indirect |
| npm | lodash.clonedeep | 4.5.0 | indirect |
| npm | lodash.createcallback | 2.4.4 | indirect |
| npm | lodash.defaults | 4.2.0 | indirect |
| npm | lodash.escape | 3.2.0 | indirect |
| npm | lodash.every | 2.4.1 | indirect |
| npm | lodash.filter | 4.6.0 | indirect |
| npm | lodash.flatten | 4.4.0 | indirect |
| npm | lodash.foreach | 4.5.0 | indirect |
| npm | lodash.forin | 2.4.1 | indirect |
| npm | lodash.forown | 2.4.1 | indirect |
| npm | lodash.identity | 2.4.1 | indirect |
| npm | lodash.isarguments | 3.1.0 | indirect |
| npm | lodash.isarray | 3.0.4 | indirect |
| npm | lodash.isfinite | 3.3.2 | indirect |
| npm | lodash.isfunction | 2.4.1 | indirect |
| npm | lodash.isobject | 2.4.1 | indirect |
| npm | lodash.isstring | 2.4.1 | indirect |
| npm | lodash.kebabcase | 4.1.1 | indirect |
| npm | lodash.keys | 2.4.1 | indirect |
| npm | lodash.keys | 3.1.2 | indirect |
| npm | lodash.map | 4.6.0 | indirect |
| npm | lodash.merge | 4.6.2 | indirect |
| npm | lodash.noop | 2.4.1 | indirect |
| npm | lodash.pick | 4.4.0 | indirect |
| npm | lodash.property | 2.4.1 | indirect |
| npm | lodash.reduce | 4.6.0 | indirect |
| npm | lodash.reject | 4.6.0 | indirect |
| npm | lodash.restparam | 3.6.1 | indirect |
| npm | lodash.some | 4.6.0 | indirect |
| npm | lodash.support | 2.4.1 | indirect |
| npm | lodash.template | 3.6.2 | indirect |
| npm | lodash.template | 4.5.0 | indirect |
| npm | lodash.templatesettings | 3.1.1 | indirect |
| npm | lodash.templatesettings | 4.2.0 | indirect |
| npm | log-symbols | 2.2.0 | indirect |
| npm | loud-rejection | 1.6.0 | indirect |
| npm | lru-cache | 2.7.3 | indirect |
| npm | lru-cache | 4.1.5 | indirect |
| npm | make-error | 1.3.6 | indirect |
| npm | make-error-cause | 1.2.2 | indirect |
| npm | make-iterator | 1.0.1 | indirect |
| npm | map-cache | 0.2.2 | indirect |
| npm | map-obj | 1.0.1 | indirect |
| npm | map-stream | 0.0.7 | indirect |
| npm | map-stream | 0.1.0 | indirect |
| npm | map-visit | 1.0.0 | indirect |
| npm | markdown-it | 10.0.0 | indirect |
| npm | math-expression-evaluator | 1.2.22 | indirect |
| npm | mdurl | 1.0.1 | indirect |
| npm | meow | 3.7.0 | indirect |
| npm | merge | 1.2.1 | indirect |
| npm | merge-stream | 1.0.1 | indirect |
| npm | micromatch | 3.1.10 | indirect |
| npm | mime | 1.4.1 | indirect |
| npm | mime-db | 1.44.0 | indirect |
| npm | mime-types | 2.1.27 | indirect |
| npm | mimic-fn | 1.2.0 | indirect |
| npm | minimatch | 0.2.14 | indirect |
| npm | minimatch | 2.0.10 | indirect |
| npm | minimatch | 3.0.4 | indirect |
| npm | minimist | 1.1.3 | indirect |
| npm | minimist | 1.2.5 | indirect |
| npm | minipass | 2.9.0 | indirect |
| npm | minizlib | 1.3.3 | indirect |
| npm | mitt | 1.2.0 | indirect |
| npm | mixin-deep | 1.3.2 | indirect |
| npm | mkdirp | 0.5.5 | indirect |
| npm | ms | 2.0.0 | indirect |
| npm | ms | 2.1.2 | indirect |
| npm | multipipe | 0.1.2 | indirect |
| npm | mute-stream | 0.0.5 | indirect |
| npm | mute-stream | 0.0.7 | indirect |
| npm | nan | 2.14.1 | indirect |
| npm | nanomatch | 1.2.13 | indirect |
| npm | natural-compare | 1.4.0 | indirect |
| npm | needle | 2.4.1 | indirect |
| npm | negotiator | 0.6.2 | indirect |
| npm | neo-async | 2.6.1 | indirect |
| npm | next-tick | 1.0.0 | indirect |
| npm | node-gyp | 3.8.0 | indirect |
| npm | node-notifier | 5.4.3 | indirect |
| npm | node-pre-gyp | 0.14.0 | indirect |
| npm | node-sass | 4.14.0 | indirect |
| npm | node-sass | ^4.14.1 | indirect |
| npm | node-sass-import-once | 1.2.0 | indirect |
| npm | node.extend | 2.0.2 | indirect |
| npm | nopt | 3.0.6 | indirect |
| npm | nopt | 4.0.3 | indirect |
| npm | normalize-package-data | 2.5.0 | indirect |
| npm | normalize-path | 2.1.1 | indirect |
| npm | normalize-path | 3.0.0 | indirect |
| npm | normalize-range | 0.1.2 | indirect |
| npm | npm-bundled | 1.1.1 | indirect |
| npm | npm-normalize-package-bin | 1.0.1 | indirect |
| npm | npm-packlist | 1.4.8 | indirect |
| npm | npmlog | 4.1.2 | indirect |
| npm | nth-check | 1.0.2 | indirect |
| npm | num2fraction | 1.2.2 | indirect |
| npm | number-is-nan | 1.0.1 | indirect |
| npm | nunjucks | 3.2.1 | indirect |
| npm | oauth-sign | 0.9.0 | indirect |
| npm | object-assign | 3.0.0 | indirect |
| npm | object-assign | 4.1.1 | indirect |
| npm | object-component | 0.0.3 | indirect |
| npm | object-copy | 0.1.0 | indirect |
| npm | object-path | 0.9.2 | indirect |
| npm | object-visit | 1.0.1 | indirect |
| npm | object.defaults | 1.1.0 | indirect |
| npm | object.map | 1.0.1 | indirect |
| npm | object.pick | 1.3.0 | indirect |
| npm | on-finished | 2.3.0 | indirect |
| npm | once | 1.3.3 | indirect |
| npm | once | 1.4.0 | indirect |
| npm | onetime | 1.1.0 | indirect |
| npm | onetime | 2.0.1 | indirect |
| npm | openurl | 1.1.1 | indirect |
| npm | opn | 5.3.0 | indirect |
| npm | optionator | 0.8.3 | indirect |
| npm | orchestrator | 0.3.8 | indirect |
| npm | ordered-read-streams | 0.1.0 | indirect |
| npm | os-homedir | 1.0.2 | indirect |
| npm | os-locale | 1.4.0 | indirect |
| npm | os-tmpdir | 1.0.2 | indirect |
| npm | osenv | 0.1.5 | indirect |
| npm | p-limit | 2.3.0 | indirect |
| npm | p-locate | 4.1.0 | indirect |
| npm | p-map | 1.2.0 | indirect |
| npm | p-try | 2.2.0 | indirect |
| npm | parse-filepath | 1.0.2 | indirect |
| npm | parse-json | 2.2.0 | indirect |
| npm | parse-node-version | 1.0.1 | indirect |
| npm | parse-passwd | 1.0.0 | indirect |
| npm | parseqs | 0.0.5 | indirect |
| npm | parseuri | 0.0.5 | indirect |
| npm | parseurl | 1.3.3 | indirect |
| npm | pascalcase | 0.1.1 | indirect |
| npm | path-dirname | 1.0.2 | indirect |
| npm | path-exists | 2.1.0 | indirect |
| npm | path-exists | 4.0.0 | indirect |
| npm | path-is-absolute | 1.0.1 | indirect |
| npm | path-is-inside | 1.0.2 | indirect |
| npm | path-parse | 1.0.6 | indirect |
| npm | path-root | 0.1.1 | indirect |
| npm | path-root-regex | 0.1.2 | indirect |
| npm | path-type | 1.1.0 | indirect |
| npm | pause-stream | 0.0.11 | indirect |
| npm | performance-now | 2.1.0 | indirect |
| npm | picomatch | 2.2.2 | indirect |
| npm | pify | 2.3.0 | indirect |
| npm | pify | 3.0.0 | indirect |
| npm | pinkie | 2.0.4 | indirect |
| npm | pinkie-promise | 2.0.1 | indirect |
| npm | pixrem | 4.0.1 | indirect |
| npm | plugin-error | 0.1.2 | indirect |
| npm | plugin-error | 1.0.1 | indirect |
| npm | plugin-log | 0.1.0 | indirect |
| npm | pluralize | 1.2.1 | indirect |
| npm | pluralize | 7.0.0 | indirect |
| npm | portscanner | 2.1.1 | indirect |
| npm | posix-character-classes | 0.1.1 | indirect |
| npm | postcss | 6.0.23 | indirect |
| npm | postcss | 7.0.27 | indirect |
| npm | postcss-alias | 2.0.0 | indirect |
| npm | postcss-clearfix | 2.0.1 | indirect |
| npm | postcss-color-rgba-fallback | 3.0.0 | indirect |
| npm | postcss-easings | 1.0.1 | indirect |
| npm | postcss-fontpath | 1.0.0 | indirect |
| npm | postcss-hexrgba | 1.0.2 | indirect |
| npm | postcss-input-style | 1.0.0 | indirect |
| npm | postcss-load-config | 1.2.0 | indirect |
| npm | postcss-load-options | 1.2.0 | indirect |
| npm | postcss-load-plugins | 2.3.0 | indirect |
| npm | postcss-opacity | 5.0.0 | indirect |
| npm | postcss-position | 1.1.0 | indirect |
| npm | postcss-pseudoelements | 5.0.0 | indirect |
| npm | postcss-quantity-queries | 0.5.0 | indirect |
| npm | postcss-reporter | 5.0.0 | indirect |
| npm | postcss-responsive-type | 1.0.0 | indirect |
| npm | postcss-value-parser | 3.3.1 | indirect |
| npm | postcss-vmin | 3.0.0 | indirect |
| npm | postcss-will-change | 2.0.0 | indirect |
| npm | prelude-ls | 1.1.2 | indirect |
| npm | pretty-bytes | 3.0.1 | indirect |
| npm | pretty-bytes | 4.0.2 | indirect |
| npm | pretty-hrtime | 1.0.3 | indirect |
| npm | prismjs | 1.20.0 | indirect |
| npm | process-nextick-args | 2.0.1 | indirect |
| npm | progress | 1.1.8 | indirect |
| npm | progress | 2.0.3 | indirect |
| npm | pseudomap | 1.0.2 | indirect |
| npm | psl | 1.8.0 | indirect |
| npm | punycode | 2.1.1 | indirect |
| npm | q | 1.5.1 | indirect |
| npm | qs | 6.2.3 | indirect |
| npm | qs | 6.5.2 | indirect |
| npm | range-parser | 1.2.1 | indirect |
| npm | raw-body | 2.4.1 | indirect |
| npm | rc | 1.2.8 | indirect |
| npm | read-file-stdin | 0.2.1 | indirect |
| npm | read-pkg | 1.1.0 | indirect |
| npm | read-pkg-up | 1.0.1 | indirect |
| npm | readable-stream | 1.0.34 | indirect |
| npm | readable-stream | 1.1.14 | indirect |
| npm | readable-stream | 2.3.7 | indirect |
| npm | readable-stream | 3.6.0 | indirect |
| npm | readdirp | 2.2.1 | indirect |
| npm | readdirp | 3.4.0 | indirect |
| npm | readline2 | 1.0.1 | indirect |
| npm | rechoir | 0.6.2 | indirect |
| npm | redent | 1.0.0 | indirect |
| npm | reduce-css-calc | 1.3.0 | indirect |
| npm | reduce-function-call | 1.0.3 | indirect |
| npm | regenerator-runtime | 0.13.5 | indirect |
| npm | regex-not | 1.0.2 | indirect |
| npm | regexpp | 1.1.0 | indirect |
| npm | remove-trailing-separator | 1.1.0 | indirect |
| npm | repeat-element | 1.1.3 | indirect |
| npm | repeat-string | 1.6.1 | indirect |
| npm | repeating | 2.0.1 | indirect |
| npm | replace-ext | 0.0.1 | indirect |
| npm | replace-ext | 1.0.0 | indirect |
| npm | request | 2.88.2 | indirect |
| npm | require-directory | 2.1.1 | indirect |
| npm | require-from-string | 1.2.1 | indirect |
| npm | require-main-filename | 1.0.1 | indirect |
| npm | require-main-filename | 2.0.0 | indirect |
| npm | require-uncached | 1.0.3 | indirect |
| npm | requires-port | 1.0.0 | indirect |
| npm | resolve | 1.17.0 | indirect |
| npm | resolve-dir | 1.0.1 | indirect |
| npm | resolve-from | 1.0.1 | indirect |
| npm | resolve-url | 0.2.1 | indirect |
| npm | resp-modifier | 6.0.2 | indirect |
| npm | restore-cursor | 1.0.1 | indirect |
| npm | restore-cursor | 2.0.0 | indirect |
| npm | ret | 0.1.15 | indirect |
| npm | rgb-hex | 2.1.0 | indirect |
| npm | rimraf | 2.6.3 | indirect |
| npm | rimraf | 2.7.1 | indirect |
| npm | rucksack-css | 1.0.2 | indirect |
| npm | run-async | 0.1.0 | indirect |
| npm | run-async | 2.4.1 | indirect |
| npm | run-sequence | 1.2.2 | indirect |
| npm | rx | 4.1.0 | indirect |
| npm | rx-lite | 3.1.2 | indirect |
| npm | rx-lite | 4.0.8 | indirect |
| npm | rx-lite-aggregates | 4.0.8 | indirect |
| npm | rxjs | 5.5.12 | indirect |
| npm | safe-buffer | 5.1.2 | indirect |
| npm | safe-buffer | 5.2.0 | indirect |
| npm | safe-regex | 1.1.0 | indirect |
| npm | safer-buffer | 2.1.2 | indirect |
| npm | sass-graph | 2.2.4 | indirect |
| npm | sass-lint | 1.13.1 | indirect |
| npm | sax | 1.2.4 | indirect |
| npm | scss-tokenizer | 0.2.3 | indirect |
| npm | select | 1.1.2 | indirect |
| npm | semver | 4.3.6 | indirect |
| npm | semver | 5.3.0 | indirect |
| npm | semver | 5.7.1 | indirect |
| npm | send | 0.16.2 | indirect |
| npm | sequencify | 0.0.7 | indirect |
| npm | serve-index | 1.9.1 | indirect |
| npm | serve-static | 1.13.2 | indirect |
| npm | server-destroy | 1.0.1 | indirect |
| npm | set-blocking | 2.0.0 | indirect |
| npm | set-value | 2.0.1 | indirect |
| npm | setprototypeof | 1.1.0 | indirect |
| npm | setprototypeof | 1.1.1 | indirect |
| npm | shebang-command | 1.2.0 | indirect |
| npm | shebang-regex | 1.0.0 | indirect |
| npm | shelljs | 0.6.1 | indirect |
| npm | shellwords | 0.1.1 | indirect |
| npm | sigmund | 1.0.1 | indirect |
| npm | signal-exit | 3.0.3 | indirect |
| npm | slice-ansi | 0.0.4 | indirect |
| npm | slice-ansi | 1.0.0 | indirect |
| npm | snapdragon | 0.8.2 | indirect |
| npm | snapdragon-node | 2.1.1 | indirect |
| npm | snapdragon-util | 3.0.1 | indirect |
| npm | socket.io | 2.1.1 | indirect |
| npm | socket.io-adapter | 1.1.2 | indirect |
| npm | socket.io-client | 2.1.1 | indirect |
| npm | socket.io-client | 2.3.0 | indirect |
| npm | socket.io-parser | 3.2.0 | indirect |
| npm | socket.io-parser | 3.3.0 | indirect |
| npm | source-map | 0.4.4 | indirect |
| npm | source-map | 0.5.7 | indirect |
| npm | source-map | 0.6.1 | indirect |
| npm | source-map-resolve | 0.5.3 | indirect |
| npm | source-map-url | 0.4.0 | indirect |
| npm | sparkles | 1.0.1 | indirect |
| npm | spdx-correct | 3.1.0 | indirect |
| npm | spdx-exceptions | 2.3.0 | indirect |
| npm | spdx-expression-parse | 3.0.0 | indirect |
| npm | spdx-license-ids | 3.0.5 | indirect |
| npm | split | 0.2.10 | indirect |
| npm | split | 1.0.1 | indirect |
| npm | split-string | 3.1.0 | indirect |
| npm | sprintf-js | 1.0.3 | indirect |
| npm | sshpk | 1.16.1 | indirect |
| npm | static-extend | 0.1.2 | indirect |
| npm | statuses | 1.3.1 | indirect |
| npm | statuses | 1.4.0 | indirect |
| npm | statuses | 1.5.0 | indirect |
| npm | stdout-stream | 1.4.1 | indirect |
| npm | stream-combiner | 0.0.4 | indirect |
| npm | stream-combiner | 0.2.2 | indirect |
| npm | stream-consume | 0.1.1 | indirect |
| npm | stream-counter | 1.0.0 | indirect |
| npm | stream-shift | 1.0.1 | indirect |
| npm | stream-throttle | 0.1.3 | indirect |
| npm | string-width | 1.0.2 | indirect |
| npm | string-width | 2.1.1 | indirect |
| npm | string-width | 4.2.0 | indirect |
| npm | string_decoder | 0.10.31 | indirect |
| npm | string_decoder | 1.1.1 | indirect |
| npm | string_decoder | 1.3.0 | indirect |
| npm | strip-ansi | 3.0.1 | indirect |
| npm | strip-ansi | 4.0.0 | indirect |
| npm | strip-ansi | 6.0.0 | indirect |
| npm | strip-bom | 1.0.0 | indirect |
| npm | strip-bom | 2.0.0 | indirect |
| npm | strip-indent | 1.0.1 | indirect |
| npm | strip-json-comments | 1.0.4 | indirect |
| npm | strip-json-comments | 2.0.1 | indirect |
| npm | supports-color | 2.0.0 | indirect |
| npm | supports-color | 5.5.0 | indirect |
| npm | supports-color | 6.1.0 | indirect |
| npm | supports-color | 7.1.0 | indirect |
| npm | svgo | 0.7.2 | indirect |
| npm | symbol-observable | 1.0.1 | indirect |
| npm | table | 3.8.3 | indirect |
| npm | table | 4.0.2 | indirect |
| npm | tar | 2.2.2 | indirect |
| npm | tar | 4.4.13 | indirect |
| npm | ternary-stream | 2.1.1 | indirect |
| npm | text-table | 0.2.0 | indirect |
| npm | tfunk | 3.1.0 | indirect |
| npm | through | 2.3.8 | indirect |
| npm | through2 | 0.6.5 | indirect |
| npm | through2 | 2.0.3 | indirect |
| npm | through2 | 2.0.5 | indirect |
| npm | tildify | 1.2.0 | indirect |
| npm | time-stamp | 1.1.0 | indirect |
| npm | tiny-emitter | 2.1.0 | indirect |
| npm | tmp | 0.0.33 | indirect |
| npm | to-array | 0.1.4 | indirect |
| npm | to-object-path | 0.3.0 | indirect |
| npm | to-regex | 3.0.2 | indirect |
| npm | to-regex-range | 2.1.1 | indirect |
| npm | to-regex-range | 5.0.1 | indirect |
| npm | toidentifier | 1.0.0 | indirect |
| npm | tough-cookie | 2.5.0 | indirect |
| npm | trim-newlines | 1.0.0 | indirect |
| npm | true-case-path | 1.0.3 | indirect |
| npm | tunnel-agent | 0.6.0 | indirect |
| npm | tweetnacl | 0.14.5 | indirect |
| npm | twig | 1.15.1 | indirect |
| npm | twig-drupal-filters | 3.1.1 | indirect |
| npm | type | 1.2.0 | indirect |
| npm | type | 2.0.0 | indirect |
| npm | type-check | 0.3.2 | indirect |
| npm | typedarray | 0.0.6 | indirect |
| npm | ua-parser-js | 0.7.17 | indirect |
| npm | uc.micro | 1.0.6 | indirect |
| npm | uglify-js | 3.9.1 | indirect |
| npm | ultron | 1.1.1 | indirect |
| npm | unc-path-regex | 0.1.2 | indirect |
| npm | union-value | 1.0.1 | indirect |
| npm | unique-stream | 1.0.0 | indirect |
| npm | universalify | 0.1.2 | indirect |
| npm | universalify | 1.0.0 | indirect |
| npm | unpipe | 1.0.0 | indirect |
| npm | unset-value | 1.0.0 | indirect |
| npm | upath | 1.2.0 | indirect |
| npm | uri-js | 4.2.2 | indirect |
| npm | urix | 0.1.0 | indirect |
| npm | use | 3.1.1 | indirect |
| npm | user-home | 1.1.1 | indirect |
| npm | user-home | 2.0.0 | indirect |
| npm | util | 0.10.4 | indirect |
| npm | util-deprecate | 1.0.2 | indirect |
| npm | utils-merge | 1.0.1 | indirect |
| npm | uuid | 3.4.0 | indirect |
| npm | v8flags | 2.1.1 | indirect |
| npm | validate-npm-package-license | 3.0.4 | indirect |
| npm | verror | 1.10.0 | indirect |
| npm | vinyl | 0.4.6 | indirect |
| npm | vinyl | 0.5.3 | indirect |
| npm | vinyl | 2.2.0 | indirect |
| npm | vinyl-fs | 0.3.14 | indirect |
| npm | vinyl-sourcemaps-apply | 0.2.1 | indirect |
| npm | walk | 2.3.14 | indirect |
| npm | whet.extend | 0.9.9 | indirect |
| npm | which | 1.3.1 | indirect |
| npm | which-module | 1.0.0 | indirect |
| npm | which-module | 2.0.0 | indirect |
| npm | wide-align | 1.1.3 | indirect |
| npm | window-size | 0.2.0 | indirect |
| npm | word-wrap | 1.2.3 | indirect |
| npm | wordwrap | 1.0.0 | indirect |
| npm | wrap-ansi | 2.1.0 | indirect |
| npm | wrap-ansi | 6.2.0 | indirect |
| npm | wrappy | 1.0.2 | indirect |
| npm | write | 0.2.1 | indirect |
| npm | write-file-stdout | 0.0.2 | indirect |
| npm | ws | 3.3.3 | indirect |
| npm | ws | 6.1.4 | indirect |
| npm | xmlhttprequest-ssl | 1.5.5 | indirect |
| npm | xtend | 4.0.2 | indirect |
| npm | y18n | 3.2.1 | indirect |
| npm | y18n | 4.0.0 | indirect |
| npm | yallist | 2.1.2 | indirect |
| npm | yallist | 3.1.1 | indirect |
| npm | yargs | 15.3.1 | indirect |
| npm | yargs | 6.4.0 | indirect |
| npm | yargs | 6.6.0 | indirect |
| npm | yargs | 7.1.0 | indirect |
| npm | yargs-parser | 18.1.3 | indirect |
| npm | yargs-parser | 4.2.1 | indirect |
| npm | yargs-parser | 5.0.0 | indirect |
| npm | yeast | 0.1.2 | indirect |
| Packagist | cloudevents/sdk-php | — | indirect |
| Packagist | composer/installers | — | indirect |
| Packagist | dealerdirect/phpcodesniffer-composer-installer | — | indirect |
| Packagist | drupal/coder | — | indirect |
| Packagist | drush/drush | — | indirect |
| Packagist | goalgorilla/open_social_dev | — | indirect |
| Packagist | jangregor/phpstan-prophecy | — | indirect |
| Packagist | php | — | indirect |
| Packagist | phpstan/extension-installer | — | indirect |
| Packagist | phpstan/phpstan | — | indirect |
| Packagist | phpstan/phpstan-deprecation-rules | — | indirect |
| Packagist | phpstan/phpstan-phpunit | — | indirect |
| Packagist | phpunit/phpunit | — | indirect |
This repository publishes no package the index resolves, so its own dependency graph was assessed — 980 packages, which also include development and test pins that never ship: 89 carry known advisories, of which 0 are direct. 77 could not be assessed — no resolved version, an unsupported ecosystem, or beyond the reported package list.
| Package | Version | Relation | Severity | Advisories | Fixed in |
|---|---|---|---|---|---|
| handlebars | 4.7.6 | indirect | critical | 13 | 4.7.10 |
| immutable | 3.8.2 | indirect | critical | 3 | 5.1.8 |
| json-schema | 0.2.3 | indirect | critical | 1 | 0.4.0 |
| locutus | 2.0.11 | indirect | critical | 6 | 3.0.25 |
| lodash | 1.0.2 | indirect | critical | 5 | 4.18.0 |
| lodash | 3.10.1 | indirect | critical | 6 | 4.18.0 |
| minimist | 1.1.3 | indirect | critical | 2 | 1.2.6 |
| minimist | 1.2.5 | indirect | critical | 1 | 1.2.6 |
| socket.io-parser | 3.2.0 | indirect | critical | 5 | 4.2.7 |
| socket.io-parser | 3.3.0 | indirect | critical | 5 | 4.2.7 |
| xmlhttprequest-ssl | 1.5.5 | indirect | critical | 2 | 1.7.0 |
| ansi-regex | 3.0.0 | indirect | high | 1 | 6.0.1 |
| ansi-regex | 5.0.0 | indirect | high | 1 | 6.0.1 |
| axios | 0.19.0 | indirect | high | 25 | 1.18.0 |
| brace-expansion | 1.1.11 | indirect | high | 8 | 5.0.12 |
| braces | 2.3.2 | indirect | high | 2 | 3.0.3 |
| braces | 3.0.2 | indirect | high | 2 | 3.0.3 |
| browserslist | 2.11.3 | indirect | high | 2 | 4.28.7 |
| cross-spawn | 3.0.1 | indirect | high | 1 | 7.0.5 |
| cross-spawn | 5.1.0 | indirect | high | 1 | 7.0.5 |
| decode-uri-component | 0.2.0 | indirect | high | 2 | 0.5.0 |
| eazy-logger | 3.0.2 | indirect | high | 1 | 4.1.0 |
| engine.io | 3.2.1 | indirect | high | 2 | 6.2.1 |
| follow-redirects | 1.5.10 | indirect | high | 5 | 1.16.0 |
| form-data | 2.3.3 | indirect | high | 2 | 4.0.6 |
| glob-parent | 5.1.1 | indirect | high | 1 | 5.1.2 |
| http-proxy | 1.15.2 | indirect | high | 1 | 1.18.1 |
| ini | 1.3.5 | indirect | high | 1 | 1.3.6 |
| js-yaml | 3.13.1 | indirect | high | 5 | 4.3.2 |
| js-yaml | 3.7.0 | indirect | high | 7 | 4.3.2 |
| linkify-it | 2.2.0 | indirect | high | 2 | 5.0.2 |
| lodash | 4.17.15 | indirect | high | 6 | 4.18.0 |
| lodash.pick | 4.4.0 | indirect | high | 1 | 4.17.20 |
| lodash.template | 3.6.2 | indirect | high | 1 | 4.17.21 |
| lodash.template | 4.5.0 | indirect | high | 2 | 4.18.0 |
| merge | 1.2.1 | indirect | high | 1 | 2.1.1 |
| minimatch | 0.2.14 | indirect | high | 5 | 10.2.3 |
| minimatch | 2.0.10 | indirect | high | 5 | 10.2.3 |
| minimatch | 3.0.4 | indirect | high | 4 | 10.2.3 |
| nth-check | 1.0.2 | indirect | high | 1 | 2.0.1 |
| object-path | 0.9.2 | indirect | high | 3 | 0.11.8 |
| picomatch | 2.2.2 | indirect | high | 2 | 4.0.4 |
| postcss | 6.0.23 | indirect | high | 6 | 8.5.23 |
| postcss | 7.0.27 | indirect | high | 7 | 8.5.23 |
| prismjs | 1.20.0 | indirect | high | 6 | 1.30.0 |
| qs | 6.2.3 | indirect | high | 3 | 6.16.0 |
| qs | 6.5.2 | indirect | high | 3 | 6.16.0 |
| scss-tokenizer | 0.2.3 | indirect | high | 1 | 0.4.3 |
| semver | 4.3.6 | indirect | high | 1 | 7.5.2 |
| semver | 5.3.0 | indirect | high | 1 | 7.5.2 |
| semver | 5.7.1 | indirect | high | 1 | 7.5.2 |
| shelljs | 0.6.1 | indirect | high | 2 | 0.8.5 |
| socket.io | 2.1.1 | indirect | high | 2 | 4.6.2 |
| tar | 2.2.2 | indirect | high | 15 | 7.5.21 |
| tar | 4.4.13 | indirect | high | 18 | 7.5.21 |
| tmp | 0.0.33 | indirect | high | 2 | 0.2.6 |
| trim-newlines | 1.0.0 | indirect | high | 1 | 4.0.1 |
| ua-parser-js | 0.7.17 | indirect | high | 3 | 0.7.24 |
| uuid | 3.4.0 | indirect | high | 1 | 13.0.1 |
| ws | 3.3.3 | indirect | high | 2 | 8.21.0 |
| ws | 6.1.4 | indirect | high | 3 | 8.21.0 |
| y18n | 3.2.1 | indirect | high | 1 | 5.0.5 |
| y18n | 4.0.0 | indirect | high | 1 | 5.0.5 |
| @babel/runtime | 7.9.2 | indirect | moderate | 1 | 8.0.0-alpha.17 |
| ajv | 4.11.8 | indirect | moderate | 2 | 8.18.0 |
| ajv | 5.5.2 | indirect | moderate | 2 | 8.18.0 |
| ajv | 6.12.2 | indirect | moderate | 2 | 8.18.0 |
| highlight.js | 9.18.1 | indirect | moderate | 2 | 10.4.1 |
| hosted-git-info | 2.8.8 | indirect | moderate | 1 | 3.0.8 |
| jsonpointer | 4.0.1 | indirect | moderate | 1 | 5.0.0 |
| markdown-it | 10.0.0 | indirect | moderate | 3 | 15.0.1 |
| micromatch | 3.1.10 | indirect | moderate | 1 | 4.0.8 |
| node-notifier | 5.4.3 | indirect | moderate | 1 | 8.0.1 |
| node-sass | 4.14.0 | indirect | moderate | 1 | 7.0.0 |
| nunjucks | 3.2.1 | indirect | moderate | 1 | 3.2.4 |
| parseuri | 0.0.5 | indirect | moderate | 1 | — |
| path-parse | 1.0.6 | indirect | moderate | 1 | 1.0.7 |
| request | 2.88.2 | indirect | moderate | 1 | 3.0.0 |
| send | 0.16.2 | indirect | moderate | 1 | 0.19.0 |
| serve-static | 1.13.2 | indirect | moderate | 1 | 2.1.0 |
| sprintf-js | 1.0.3 | indirect | moderate | 1 | — |
| tough-cookie | 2.5.0 | indirect | moderate | 1 | 4.1.3 |
| word-wrap | 1.2.3 | indirect | moderate | 1 | 1.2.4 |
| yargs-parser | 4.2.1 | indirect | moderate | 1 | 18.1.1 |
| yargs-parser | 5.0.0 | indirect | moderate | 1 | 18.1.1 |
| cookie | 0.3.1 | indirect | low | 1 | 0.7.0 |
| debug | 3.2.6 | indirect | low | 1 | 4.3.1 |
| debug | 4.1.1 | indirect | low | 1 | 4.3.1 |
| es5-ext | 0.10.53 | indirect | low | 1 | 0.10.63 |
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Spotted something off in this report, or have thoughts to share? Wrong measurements, missed tooling, ideas, questions — anything is welcome. Every message is read and gets a response.
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v2.10.0, schema v0.34.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — Packagist.