Public recordExceptional
Software health reportschema 0.34.0 · metrics 2.10.0 · 2026-09-13 08:55 UTC
vaadin / flow
Vaadin Flow is a Java framework binding Vaadin web components to Java. This is part of Vaadin 10+.
vaadin/flow holds a health index of 96 out of 100, placing it in the Exceptional band. It scores highest on Vitality (100/100) and lowest on Engineering Quality (70/100). It was last updated today. 3 contributors account for most of its recent work.
96
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean, calibrated against the distribution of the public record so bands carry percentile meaning; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At Risk ceiling of 34.
96
Exceptional93-100The record's top tier (≈ top 5%); essentially all checked criteria met
Excellent80-92Strong across the board; minor gaps
Good65-79Healthy; gaps are limited and manageable
Moderate50-64Acceptable with notable gaps; review recommended
Weak35-49Material weaknesses across several areas
At Risk20-34Significant weaknesses; adoption warrants caution
Critical1-19Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
The weighted overall 84 is calibrated to 96 on the published index scale (record calibration 2026-08-02).
Ownership
VaadinOrganization · verified domain
883 followers432 public repossince Nov 2011
This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish |
|---|---|---|---|---|---|
| Maven | com.vaadin:flow-dnd | 25.3.0-beta3 | - | 623 | 2 days ago |
| Maven | com.vaadin:flow-data | 25.3.0-beta3 | - | 664 | 2 days ago |
| Maven | com.vaadin:flow-push | 25.3.0-beta3 | - | 664 | 2 days ago |
| Maven | com.vaadin:flow-react | 25.3.0-beta3 | - | 194 | 2 days ago |
| Maven | com.vaadin:flow-client | 25.3.0-beta3 | - | 664 | 2 days ago |
| Maven | com.vaadin:flow-jandex | 25.3.0-beta3 | - | 429 | 2 days ago |
| Maven | com.vaadin:flow-server | 25.3.0-beta3 | - | 664 | 2 days ago |
| Maven | com.vaadin:flow-webpush | 25.3.0-beta3 | - | 231 | 2 days ago |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
100
Development activity
100Exceptional
How it's scored
| 36/36 | Push recency — last push 0 days ago |
| 36/36 | Commit cadence — 52/52 weeks with commits |
| 18/18 | Commit volume — 1,475 commits in the last year |
| 10/10 | OpenSSF Scorecard: Maintained — 30 commit(s) and 22 issue activity found in the last 90 days -- score normalized to 10 |
Inputs used
| commits_last_year | 1,475 |
| human_commit_share | 0.39 |
| days_since_last_push | 0 |
| active_weeks_last_year | 52 |
Release discipline
100Exceptional
How it's scored
| 27/27 | Ships releases — 100 releases published |
| 36/36 | Release recency — latest release 2 days ago |
| 27/27 | Release cadence — a release every ~1 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 100 |
| latest_release_tag | 25.1.16 |
| releases_from_tags | no |
| days_since_latest_release | 2 |
| mean_days_between_releases | 1 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
80
Popularity & adoption
75Good
How it's scored
| 46.6/60 | Stars — 752 stars |
| 19.5/25 | Forks — 220 forks |
| 9.1/15 | Watchers — 45 watchers |
Inputs used
| forks | 220 |
| stars | 752 |
| watchers | 45 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
85Excellent
How it's scored
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (Apache-2.0) |
| 18/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 7.2/7.2 | Issue template |
| 6.3/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| readme_badges | 0 |
| has_contributing | yes |
| has_issue_template | yes |
| has_code_of_conduct | no |
| readme_badge_services | — |
| has_pull_request_template | yes |
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
88
How it's scored
| 36/54 | Bus factor — 3 contributor(s) cover half of all commits |
| 14.7/22.5 | Commit distribution — top contributor authored 34% of commits |
| 13.5/13.5 | Contributor breadth — 97 contributors |
| 10/10 | OpenSSF Scorecard: Contributors — project has 12 contributing companies or organizations |
Inputs used
| bus_factor | 3 |
| contributors_sampled | 97 |
| top_contributor_share | 0.345 |
Issue & PR responsiveness
89Excellent
How it's scored
| 35.2/42 | Issue resolution — 84% of issues closed |
| 26.9/30 | PR acceptance — 15,331/17,105 decided PRs merged |
| 0/13 | Newcomer PR acceptance — no first-time contributor's PR decided in 30d |
| 15/15 | OpenSSF Scorecard: Code-Review — all changesets reviewed |
Inputs used
| merged_prs | 15,331 |
| open_issues | 1,281 |
| closed_issues | 6,634 |
| prs_merged_7d | 33 |
| prs_decided_7d | 34 |
| prs_merged_30d | 33 |
| prs_decided_30d | 34 |
| issue_closed_ratio | 0.838 |
| closed_unmerged_prs | 1,774 |
| first_time_authors_30d | 0 |
| first_time_prs_merged_30d | 0 |
| first_time_prs_decided_30d | 0 |
Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.
Ownership & stewardship
96Exceptional
How it's scored
| 30/30 | Ownership backing — organization-owned |
| 20/20 | Verified domain |
| 21.2/25 | Owner reach — 883 followers of vaadin |
| 25/25 | Track record — 432 public repos, account ~14 yr old |
Inputs used
| followers | 883 |
| owner_type | Organization |
| is_verified | yes |
| owner_login | vaadin |
| public_repos | 432 |
| account_age_days | 5,426 |
Package maintenance
100Exceptional
How it's scored
| 25/25 | Published & resolvable — 8 package(s) on maven |
| 35/35 | Publish recency — latest publish 2 days ago |
| 20/20 | Version history — 664 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | com.vaadin:flow-dnd, com.vaadin:flow-data, com.vaadin:flow-push, com.vaadin:flow-react, com.vaadin:flow-client, com.vaadin:flow-jandex, com.vaadin:flow-server, com.vaadin:flow-webpush |
| ecosystems | maven |
| any_deprecated | no |
| min_days_since_publish | 2 |
Engineering Quality
Are baseline engineering and documentation practices in place?
70
Engineering practices
84Excellent
How it's scored
| 24/24 | CI workflows — 12 workflow(s) |
| 24/24 | Tests present |
| 16/16 | Linter config — eslint.config.mjs |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard: CI-Tests — 30 out of 30 merged PRs checked by a CI test -- score normalized to 10 |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | yes |
| has_precommit_config | no |
Documentation
50Moderate
How it's scored
| 30/30 | README |
| 0/25 | Documentation directory |
| 0/15 | Documentation / homepage site |
| 10/10 | Repository description |
| 10/10 | Topics — 4 topics |
| 0/10 | Wiki |
Inputs used
| topics | vaadin, java, web-application-framework, vaadin-flow |
| has_wiki | no |
| homepage | — |
| docs_site | — |
| has_readme | yes |
| has_docs_dir | no |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
75
Security posture
69Good
How it's scored
| 3/7.5 | Binary-Artifacts — binaries present in source code |
| 0/7.5 | Branch-Protection — no data |
| 2.5/2.5 | CI-Tests — 30 out of 30 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 7.5/7.5 | Code-Review — all changesets reviewed |
| 2.5/2.5 | Contributors — project has 12 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 7.5/7.5 | Dependency-Update-Tool — update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 7.5/7.5 | Maintained — 30 commit(s) and 22 issue activity found in the last 90 days -- score normalized to 10 |
| 5/5 | Packaging — packaging workflow detected |
| 4.5/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 9 |
| 5/5 | SAST — SAST tool detected |
| 5/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — no data |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 0/7.5 | Vulnerabilities — 11 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 16 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 2 |
| scorecard_aggregate | 6.9 |
Excluded from scoring (no data or not applicable): Branch-Protection, Signed-Releases. Remaining weights renormalized.
Dependency advisories
100Exceptional
How it's scored
| 35/35 | Direct dependencies free of known advisories — no direct dependency carries a known advisory |
| 25/25 | Indirect dependencies free of known advisories — no indirect dependency carries a known advisory |
| 0/40 | No advisories left outstanding — no advisory carries a publication date |
Inputs used
| source | osv |
| advisories | 0 |
| affected_packages | 0 |
| assessed_packages | 13 |
| unassessed_packages | 0 |
| affected_by_severity | none |
| direct_affected_packages | 0 |
Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the maven:com.vaadin:flow-dnd@25.3.0-beta3 runtime dependency closure — what installing the published package pulls in — 13 packages. Reachability is not analyzed.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight (4%): agent tooling is a real maintenance signal, but a repository with none can still reach 100/100.
93
Agent context & guidance
85Excellent
How it's scored
| 45/45 | Agent instructions — CLAUDE.md |
| 0/15 | Machine-readable docs (llms.txt) |
| 40/40 | Legible commit history — 39 of 39 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| llms_txt_url | — |
| legible_history_share | 1 |
| agent_instruction_files | CLAUDE.md |
| agent_instruction_max_bytes | 3,058 |
Verify loop (build / test / typecheck)
94Exceptional
How it's scored
| 12.6/18 | One-command bootstrap — flow-bom/pom.xml, flow-build-tools/pom.xml, flow-client/pom.xml (toolchain convention, no task runner) |
| 22/22 | Automated tests |
| 11/11 | Lint / format config — eslint.config.mjs |
| 11/11 | Static type checking — flow-client/src/test/frontend/tsconfig.json, flow-client/tsconfig.json, flow-server/src/main/resources/com/vaadin/flow/server/frontend/tsconfig.json, flow-server/src/main/resources/tsconfig.json, vaadin-dev-server/tsconfig.json |
| 10/10 | Reproducible environment — lockfile |
| 10/10 | Demonstrated agent practice — 14 of the last 100 commits agent-authored or agent-credited |
| 8/8 | Automated maintenance — 16 of the last 100 commits are automated dependency updates |
| 9/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 9 |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | package-lock.json |
| has_dockerfile | no |
| typed_language | yes |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | yes |
| typecheck_configs | flow-client/src/test/frontend/tsconfig.json, flow-client/tsconfig.json, flow-server/src/main/resources/com/vaadin/flow/server/frontend/tsconfig.json, flow-server/src/main/resources/tsconfig.json, vaadin-dev-server/tsconfig.json |
| agent_commit_share | 0.14 |
| toolchain_manifests | flow-bom/pom.xml, flow-build-tools/pom.xml, flow-client/pom.xml, flow-data/pom.xml, flow-devloop-daemon/pom.xml, flow-dnd/pom.xml, flow-html-components-testbench/pom.xml, flow-html-components/pom.xml, flow-jandex/pom.xml, flow-lit-template/pom.xml, flow-plugins/flow-dev-bundle-plugin/pom.xml, flow-plugins/flow-gradle-plugin/build.gradle, flow-plugins/flow-gradle-plugin/pom.xml, flow-plugins/flow-maven-plugin/pom.xml, flow-plugins/flow-maven-plugin/src/it/appshellconfiguration-external-annotations/pom.xml, flow-plugins/flow-maven-plugin/src/it/classfinder-lookup/pom.xml, flow-plugins/flow-maven-plugin/src/it/commercial-banner-build/pom.xml, flow-plugins/flow-maven-plugin/src/it/deprecated-property-warning/pom.xml, flow-plugins/flow-maven-plugin/src/it/deps-with-classifier-dups-project/pom.xml, flow-plugins/flow-maven-plugin/src/it/flow-addon/pom.xml, flow-plugins/flow-maven-plugin/src/it/frontend-scanner-tuning-project/pom.xml, flow-plugins/flow-maven-plugin/src/it/ignore-maven-deps-from-project/pom.xml, flow-plugins/flow-maven-plugin/src/it/install-dev-cli/pom.xml, flow-plugins/flow-maven-plugin/src/it/lifecycle-participant-delete-token-file/pom.xml, flow-plugins/flow-maven-plugin/src/it/offending-dependency-project/pom.xml, flow-plugins/flow-maven-plugin/src/it/plugin-pinned-deps-project/pom.xml, flow-plugins/flow-maven-plugin/src/it/resources-from-project/pom.xml, flow-plugins/flow-maven-plugin/src/it/vaadin-skip-test/pom.xml, flow-plugins/flow-plugin-base/pom.xml, flow-plugins/pom.xml, flow-polymer-template/pom.xml, flow-polymer2lit/pom.xml, flow-push/pom.xml, flow-react/pom.xml, flow-server-production-mode/pom.xml, flow-server/pom.xml, flow-test-generic/pom.xml, flow-test-util/pom.xml, flow-tests/pom.xml, flow-tests/servlet-containers/pom.xml, flow-tests/servlet-containers/tomcat10/pom.xml, flow-tests/test-application-theme/pom.xml, flow-tests/test-application-theme/reusable-theme/pom.xml, flow-tests/test-application-theme/test-reusable-as-parent-vite/pom.xml, flow-tests/test-application-theme/test-theme-component-live-reload/pom.xml, flow-tests/test-application-theme/test-theme-live-reload/pom.xml, flow-tests/test-application-theme/test-theme-reusable-vite/pom.xml, flow-tests/test-aura/pom.xml, flow-tests/test-ccdm-flow-navigation/pom.xml, flow-tests/test-ccdm/pom.xml, flow-tests/test-client-queue/pom.xml, flow-tests/test-commercial-banner/commercial-addon/pom.xml, flow-tests/test-commercial-banner/flow-application/pom.xml, flow-tests/test-commercial-banner/integration-test/pom.xml, flow-tests/test-commercial-banner/pom.xml, flow-tests/test-common/pom.xml, flow-tests/test-custom-frontend-directory/pom.xml, flow-tests/test-custom-frontend-directory/test-themes-custom-frontend-directory/pom.xml, flow-tests/test-custom-route-registry/pom.xml, flow-tests/test-default/pom.xml, flow-tests/test-dev-mode/pom.xml, flow-tests/test-devloop/devloop-app/pom.xml, flow-tests/test-devloop/devloop-shared/pom.xml, flow-tests/test-devloop/pom.xml, flow-tests/test-eager-bootstrap/pom.xml, flow-tests/test-embedded-jetty-12/pom.xml, flow-tests/test-embedding/embedding-reusable-custom-theme/pom.xml, flow-tests/test-embedding/embedding-test-assets/pom.xml, flow-tests/test-embedding/pom.xml, flow-tests/test-embedding/test-embedding-application-theme/pom.xml, flow-tests/test-embedding/test-embedding-generic/pom.xml, flow-tests/test-embedding/test-embedding-production-mode/pom.xml, flow-tests/test-embedding/test-embedding-reusable-theme/pom.xml, flow-tests/test-embedding/test-embedding-style-containment/pom.xml, flow-tests/test-embedding/test-embedding-theme-variant/pom.xml, flow-tests/test-express-build/frontend-add-on/pom.xml, flow-tests/test-express-build/java-add-on/pom.xml, flow-tests/test-express-build/pom.xml, flow-tests/test-express-build/test-dev-bundle-frontend-add-on/pom.xml, flow-tests/test-express-build/test-dev-bundle-java-add-on/pom.xml, flow-tests/test-express-build/test-dev-bundle-no-plugin/pom.xml, flow-tests/test-express-build/test-dev-bundle/pom.xml, flow-tests/test-express-build/test-embedding-express-build/pom.xml, flow-tests/test-express-build/test-flow-maven-plugin/pom.xml, flow-tests/test-express-build/test-parent-theme-express-build/pom.xml, flow-tests/test-express-build/test-parent-theme-in-frontend-prod/pom.xml, flow-tests/test-express-build/test-parent-theme-in-frontend/pom.xml, flow-tests/test-express-build/test-parent-theme-prod/pom.xml, flow-tests/test-express-build/test-prod-bundle-no-plugin/pom.xml, flow-tests/test-express-build/test-prod-bundle/pom.xml, flow-tests/test-express-build/test-reusable-theme-express-build/pom.xml, flow-tests/test-express-build/test-reusable-theme-no-assets/pom.xml, flow-tests/test-express-build/test-reusing-theme-express-build/pom.xml, flow-tests/test-express-build/test-theme-dev-bundle/pom.xml, flow-tests/test-express-build/test-theme-legacy-components-css-prod/pom.xml, flow-tests/test-frontend/addon-with-templates/pom.xml, flow-tests/test-frontend/pom.xml, flow-tests/test-frontend/test-bun/pom.xml, flow-tests/test-frontend/test-npm-legacy-lit-addon/pom.xml, flow-tests/test-frontend/test-npm/pom.xml, flow-tests/test-frontend/test-pnpm/pom.xml, flow-tests/test-frontend/vite-basics/pom.xml, flow-tests/test-frontend/vite-context-path/pom.xml, flow-tests/test-frontend/vite-embedded-no-theme/pom.xml, flow-tests/test-frontend/vite-embedded-webcomponent-resync-longpolling/pom.xml, flow-tests/test-frontend/vite-embedded-webcomponent-resync-ws/pom.xml, flow-tests/test-frontend/vite-embedded-webcomponent-resync-wsxhr/pom.xml, flow-tests/test-frontend/vite-embedded-webcomponent-resync/pom.xml, flow-tests/test-frontend/vite-embedded/pom.xml, flow-tests/test-frontend/vite-production-custom-frontend/pom.xml, flow-tests/test-frontend/vite-production/pom.xml, flow-tests/test-frontend/vite-pwa-custom-offline-path/pom.xml, flow-tests/test-frontend/vite-pwa-custom-sw/pom.xml, flow-tests/test-frontend/vite-pwa-disabled-offline/pom.xml, flow-tests/test-frontend/vite-pwa-production/pom.xml, flow-tests/test-frontend/vite-pwa/pom.xml, flow-tests/test-frontend/vite-test-assets/pom.xml, flow-tests/test-legacy-frontend/pom.xml, flow-tests/test-live-reload-multimodule-devbundle/pom.xml, flow-tests/test-live-reload-multimodule/library/pom.xml, flow-tests/test-live-reload-multimodule/pom.xml, flow-tests/test-live-reload-multimodule/theme/pom.xml, flow-tests/test-live-reload-multimodule/ui/pom.xml, flow-tests/test-live-reload/pom.xml, flow-tests/test-lumo-theme/pom.xml, flow-tests/test-lumo/pom.xml, flow-tests/test-misc/pom.xml, flow-tests/test-multi-war/deployment/pom.xml, flow-tests/test-multi-war/pom.xml, flow-tests/test-multi-war/test-war1/pom.xml, flow-tests/test-multi-war/test-war2/pom.xml, flow-tests/test-no-theme/pom.xml, flow-tests/test-npm-only-features/pom.xml, flow-tests/test-npm-only-features/test-npm-custom-frontend-directory/pom.xml, flow-tests/test-npm-only-features/test-npm-general/pom.xml, flow-tests/test-npm-only-features/test-npm-no-buildmojo/pom.xml, flow-tests/test-npm-only-features/test-npm-performance-regression/pom.xml, flow-tests/test-push-startup/pom.xml, flow-tests/test-pwa-disabled-offline/pom.xml, flow-tests/test-pwa/pom.xml, flow-tests/test-react-adapter/pom.xml, flow-tests/test-redeployment-no-cache/pom.xml, flow-tests/test-redeployment/pom.xml, flow-tests/test-resources/pom.xml, flow-tests/test-root-context/pom.xml, flow-tests/test-router-custom-context-encoded-prod/pom.xml, flow-tests/test-router-custom-context-encoded/pom.xml, flow-tests/test-router-custom-context/pom.xml, flow-tests/test-servlet/pom.xml, flow-tests/test-tailwindcss/pom.xml, flow-tests/test-theme-no-polymer/pom.xml, flow-tests/test-themes/pom.xml, flow-tests/test-vaadin-router/pom.xml, flow-tests/test-webpush/pom.xml, flow-tests/vaadin-spring-tests/pom.xml, flow-tests/vaadin-spring-tests/test-mvc-without-endpoints/pom.xml, flow-tests/vaadin-spring-tests/test-plain-spring-boot-reload-time/pom.xml, flow-tests/vaadin-spring-tests/test-spring-boot-contextpath/pom.xml, flow-tests/vaadin-spring-tests/test-spring-boot-jar/pom.xml, flow-tests/vaadin-spring-tests/test-spring-boot-only-prepare/pom.xml, flow-tests/vaadin-spring-tests/test-spring-boot-reload-time/pom.xml, flow-tests/vaadin-spring-tests/test-spring-boot-reverseproxy/pom.xml, flow-tests/vaadin-spring-tests/test-spring-boot-scan/pom.xml, flow-tests/vaadin-spring-tests/test-spring-boot-undertow/pom.xml, flow-tests/vaadin-spring-tests/test-spring-boot/pom.xml, flow-tests/vaadin-spring-tests/test-spring-common/pom.xml, flow-tests/vaadin-spring-tests/test-spring-filter-packages/allowed-ui/pom.xml, flow-tests/vaadin-spring-tests/test-spring-filter-packages/lib-allowed/pom.xml, flow-tests/vaadin-spring-tests/test-spring-filter-packages/lib-blocked/pom.xml, flow-tests/vaadin-spring-tests/test-spring-filter-packages/lib-exclude/pom.xml, flow-tests/vaadin-spring-tests/test-spring-filter-packages/pom.xml, flow-tests/vaadin-spring-tests/test-spring-filter-packages/ui/pom.xml, flow-tests/vaadin-spring-tests/test-spring-helpers/pom.xml, flow-tests/vaadin-spring-tests/test-spring-security-flow-contextpath/pom.xml, flow-tests/vaadin-spring-tests/test-spring-security-flow-methodsecurity/pom.xml, flow-tests/vaadin-spring-tests/test-spring-security-flow-reverseproxy/pom.xml, flow-tests/vaadin-spring-tests/test-spring-security-flow-routepathaccesschecker/pom.xml, flow-tests/vaadin-spring-tests/test-spring-security-flow-standalone-routepathaccesschecker/pom.xml, flow-tests/vaadin-spring-tests/test-spring-security-flow-themes-contextpath/pom.xml, flow-tests/vaadin-spring-tests/test-spring-security-flow-themes-urlmapping/pom.xml, flow-tests/vaadin-spring-tests/test-spring-security-flow-urlmapping/pom.xml, flow-tests/vaadin-spring-tests/test-spring-security-flow-websocket/pom.xml, flow-tests/vaadin-spring-tests/test-spring-security-flow/pom.xml, flow-tests/vaadin-spring-tests/test-spring-security-pwa/pom.xml, flow-tests/vaadin-spring-tests/test-spring-security-webicons-urlmapping/pom.xml, flow-tests/vaadin-spring-tests/test-spring-security-webicons/pom.xml, flow-tests/vaadin-spring-tests/test-spring-war/pom.xml, flow-tests/vaadin-spring-tests/test-spring-white-list/pom.xml, flow-tests/vaadin-spring-tests/test-spring/pom.xml, flow-webpush/pom.xml, flow/pom.xml, pom.xml, vaadin-dev-server/pom.xml, vaadin-dev-server/src/test/resources/com/vaadin/base/devserver/maven/complex-multimodule/module2/pom.xml, vaadin-dev-server/src/test/resources/com/vaadin/base/devserver/maven/standard-multimodule/module1/pom.xml, vaadin-dev-server/src/test/resources/com/vaadin/base/devserver/maven/standard-multimodule/module2/pom.xml, vaadin-dev-server/src/test/resources/com/vaadin/base/devserver/maven/standard-multimodule/pom.xml, vaadin-dev-server/src/test/resources/stats-data/maven-project-folder1/pom.xml, vaadin-dev-server/src/test/resources/stats-data/maven-project-folder2/pom.xml, vaadin-spring/pom.xml |
| dependency_bot_commit_share | 0.16 |
Code legibility for models
100Exceptional
How it's scored
| 45/45 | Type-checkable code — Java (statically typed) |
| 54.7/55 | Manageable file sizes — 27/4,642 source files over 60KB |
Inputs used
| primary_language | Java |
| largest_source_bytes | 184,581 |
| source_files_sampled | 4,642 |
| oversized_source_files | 27 |
Machine-readable interfaces
100Exceptional
How it's scored
| 0/40 | API schema (OpenAPI/GraphQL/proto) — not applicable to this kind of software |
| 0/20 | MCP server — not applicable to this kind of software |
| 40/40 | Runnable examples — example, samples |
Inputs used
| example_dirs | example, samples |
| has_mcp_signal | no |
| api_schema_files | — |
| interfaces_expected_of | — |
Excluded from scoring (no data or not applicable): API schema (OpenAPI/GraphQL/proto), MCP server. Remaining weights renormalized.
Key facts
752GitHub stars
97contributors
1,475commits, last 12 months
0days since last push
100releases
3bus factor
1,281open issues
Maven, npmpackage ecosystems
Data collection warnings
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
More detail
Star and fork history 0 ★ / 220 ⇿
0Stars
220Forks
95Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 0Minor 3Patch 62
Each point covers 9 days.
OpenSSF Scorecard 6.9 / 10
6.9aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 4 | Binary-Artifacts | binaries present in source code |
| n/a | Branch-Protection | internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md |
| 10 | CI-Tests | 30 out of 30 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 10 | Code-Review | all changesets reviewed |
| 10 | Contributors | project has 12 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 10 | Dependency-Update-Tool | update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 30 commit(s) and 22 issue activity found in the last 90 days -- score normalized to 10 |
| 10 | Packaging | packaging workflow detected |
| 9 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 9 |
| 10 | SAST | SAST tool detected |
| 10 | Security-Policy | security policy file detected |
| n/a | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 0 | Vulnerabilities | 11 existing vulnerabilities detected |
Direct dependencies 135
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| Maven | com.vaadin:flow | ${project.version} | flow-bom/pom.xml |
| Maven | com.vaadin:flow-server | ${project.version} | flow-bom/pom.xml |
| Maven | com.vaadin:flow-polymer-template | ${project.version} | flow-bom/pom.xml |
| Maven | com.vaadin:flow-lit-template | ${project.version} | flow-bom/pom.xml |
| Maven | com.vaadin:flow-react | ${project.version} | flow-bom/pom.xml |
| Maven | com.vaadin:flow-push | ${project.version} | flow-bom/pom.xml |
| Maven | com.vaadin:flow-data | ${project.version} | flow-bom/pom.xml |
| Maven | com.vaadin:flow-client | ${project.version} | flow-bom/pom.xml |
| Maven | com.vaadin:flow-html-components | ${project.version} | flow-bom/pom.xml |
| Maven | com.vaadin:flow-server-production-mode | ${project.version} | flow-bom/pom.xml |
| Maven | com.vaadin:flow-html-components-testbench | ${project.version} | flow-bom/pom.xml |
| Maven | com.vaadin:flow-dnd | ${project.version} | flow-bom/pom.xml |
| Maven | com.vaadin:flow-build-tools | ${project.version} | flow-bom/pom.xml |
| Maven | com.vaadin:vaadin-dev-server | ${project.version} | flow-bom/pom.xml |
| Maven | com.vaadin:flow-devloop-daemon | ${project.version} | flow-bom/pom.xml |
| Maven | com.vaadin:flow-jandex | ${project.version} | flow-bom/pom.xml |
| Maven | com.vaadin:vaadin-spring | ${project.version} | flow-bom/pom.xml |
| Maven | com.vaadin:flow-webpush | ${project.version} | flow-bom/pom.xml |
| Maven | org.apache.commons:commons-compress | 1.28.0 | flow-build-tools/pom.xml |
| Maven | com.vaadin:flow-server | ${project.version} | flow-build-tools/pom.xml |
| Maven | org.ow2.asm:asm | — | flow-build-tools/pom.xml |
| Maven | tools.jackson.dataformat:jackson-dataformat-yaml | — | flow-build-tools/pom.xml |
| npm | @vaadin/common-frontend | 0.0.24 | flow-client/package.json |
| npm | lit | 3.3.3 | flow-client/package.json |
| Maven | com.google.gwt:gwt | ${gwt.version} | flow-client/pom.xml |
| Maven | com.vaadin:vaadin-testbench-core | ${testbench.version} | flow-client/pom.xml |
| Maven | com.vaadin:flow-server | ${project.version} | flow-data/pom.xml |
| Maven | com.vaadin:flow-server | ${project.version} | flow-dnd/pom.xml |
| Maven | com.vaadin:flow-server | ${project.version} | flow-html-components/pom.xml |
| Maven | com.vaadin:flow-data | ${project.version} | flow-html-components/pom.xml |
| Maven | com.vaadin:flow-server | ${project.version} | flow-lit-template/pom.xml |
| Maven | com.vaadin:flow-server | ${project.version} | flow-polymer-template/pom.xml |
| Maven | com.vaadin:license-checker | — | flow-polymer-template/pom.xml |
| Maven | net.bytebuddy:byte-buddy | — | flow-polymer-template/pom.xml |
| npm | esbuild | 0.28.1 | flow-polymer2lit/package.json |
| npm | a-node-html-parser | ^6.0.0-4 | flow-polymer2lit/package.json |
| npm | acorn | ^7.1.0 | flow-polymer2lit/package.json |
| npm | acorn-walk | ^8.2.0 | flow-polymer2lit/package.json |
| npm | magic-string | ^0.26.3 | flow-polymer2lit/package.json |
| npm | patch-package | ^6.4.7 | flow-polymer2lit/package.json |
| npm | prettier | ^2.1.2 | flow-polymer2lit/package.json |
| npm | typescript | ^6.0.2 | flow-polymer2lit/package.json |
| Maven | com.vaadin:flow-build-tools | ${project.version} | flow-polymer2lit/pom.xml |
| Maven | commons-io:commons-io | — | flow-polymer2lit/pom.xml |
| Maven | org.apache.commons:commons-text | 1.15.0 | flow-polymer2lit/pom.xml |
| Maven | org.jboss.forge.roaster:roaster-api | ${version.roaster} | flow-polymer2lit/pom.xml |
| Maven | org.jboss.forge.roaster:roaster-jdt | ${version.roaster} | flow-polymer2lit/pom.xml |
| Maven | com.vaadin.external.atmosphere:atmosphere-runtime | ${atmosphere.runtime.version} | flow-push/pom.xml |
| Maven | com.vaadin:flow-server | ${project.version} | flow-react/pom.xml |
| Maven | com.vaadin:flow-push | ${project.version} | flow-server/pom.xml |
| Maven | org.jspecify:jspecify | — | flow-server/pom.xml |
| Maven | org.slf4j:slf4j-api | — | flow-server/pom.xml |
| Maven | tools.jackson.core:jackson-core | — | flow-server/pom.xml |
| Maven | tools.jackson.core:jackson-databind | — | flow-server/pom.xml |
| Maven | org.jsoup:jsoup | ${jsoup.version} | flow-server/pom.xml |
| Maven | com.vaadin.external:gentyref | 1.2.0.vaadin1 | flow-server/pom.xml |
| Maven | junit:junit | — | flow-test-generic/pom.xml |
| Maven | org.junit.jupiter:junit-jupiter-api | — | flow-test-generic/pom.xml |
| Maven | org.junit.platform:junit-platform-launcher | — | flow-test-generic/pom.xml |
| Maven | org.slf4j:slf4j-api | — | flow-test-generic/pom.xml |
| Maven | commons-io:commons-io | — | flow-test-generic/pom.xml |
| Maven | com.vaadin:flow-test-generic | ${project.version} | flow-test-util/pom.xml |
| Maven | com.vaadin:flow-server | ${project.version} | flow-test-util/pom.xml |
| Maven | com.vaadin:flow-html-components | ${project.version} | flow-test-util/pom.xml |
| Maven | com.vaadin:vaadin-testbench-core | ${testbench.version} | flow-test-util/pom.xml |
| Maven | junit:junit | — | flow-test-util/pom.xml |
| Maven | com.vaadin:flow-html-components | ${project.version} | flow-tests/pom.xml |
| Maven | com.vaadin:flow-client | ${project.version} | flow-tests/pom.xml |
| Maven | com.vaadin:flow-dnd | ${project.version} | flow-tests/pom.xml |
| Maven | org.slf4j:slf4j-simple | — | flow-tests/pom.xml |
| Maven | org.slf4j:slf4j-simple | ${slf4j.version} | flow-tests/pom.xml |
| Maven | org.apache.maven.surefire:${failsafe.provider.artifactId} | ${maven.failsafe.plugin.version} | flow-tests/pom.xml |
| Maven | com.sun.xml.bind:jaxb-impl | ${jaxb.version} | flow-tests/pom.xml |
| Maven | com.vaadin:flow-server | ${project.version} | flow-webpush/pom.xml |
| Maven | com.interaso:webpush | 1.3.0 | flow-webpush/pom.xml |
| Maven | org.jetbrains.kotlin:kotlin-stdlib | 2.4.20 | flow-webpush/pom.xml |
| Maven | com.vaadin:flow-server | ${project.version} | flow/pom.xml |
| Maven | com.vaadin:flow-push | ${project.version} | flow/pom.xml |
| Maven | com.vaadin:flow-webpush | ${project.version} | flow/pom.xml |
| Maven | com.vaadin:flow-client | ${project.version} | flow/pom.xml |
| Maven | com.vaadin:flow-html-components | ${project.version} | flow/pom.xml |
| Maven | com.vaadin:flow-data | ${project.version} | flow/pom.xml |
| Maven | com.vaadin:flow-dnd | ${project.version} | flow/pom.xml |
| Maven | com.vaadin:flow-lit-template | ${project.version} | flow/pom.xml |
| Maven | com.vaadin:flow-react | ${project.version} | flow/pom.xml |
| Maven | tools.jackson:jackson-bom | ${jackson.version} | pom.xml |
| Maven | jakarta.platform:jakarta.jakartaee-bom | ${jakarta.ee.version} | pom.xml |
| Maven | com.google.gwt:gwt-elemental | ${gwt.version} | pom.xml |
| Maven | commons-io:commons-io | 2.22.0 | pom.xml |
| Maven | org.apache.commons:commons-lang3 | 3.20.0 | pom.xml |
| Maven | org.jspecify:jspecify | 1.0.1 | pom.xml |
| Maven | org.slf4j:slf4j-api | ${slf4j.version} | pom.xml |
| Maven | net.bytebuddy:byte-buddy | 1.18.13 | pom.xml |
| Maven | org.ow2.asm:asm | 9.10.1 | pom.xml |
| Maven | com.vaadin:license-checker | 3.1.2 | pom.xml |
| Maven | org.slf4j:slf4j-simple | ${slf4j.version} | pom.xml |
| Maven | junit:junit | 4.13.2 | pom.xml |
| Maven | org.junit.jupiter:junit-jupiter | ${junit.jupiter.version} | pom.xml |
| Maven | org.junit.jupiter:junit-jupiter-api | ${junit.jupiter.version} | pom.xml |
| Maven | org.junit.vintage:junit-vintage-engine | ${junit.jupiter.version} | pom.xml |
| Maven | org.junit.platform:junit-platform-launcher | ${junit.jupiter.version} | pom.xml |
| Maven | org.mockito:mockito-core | 5.23.0 | pom.xml |
| Maven | org.mockito:mockito-inline | 5.2.0 | pom.xml |
| Maven | org.hamcrest:hamcrest-all | 1.3 | pom.xml |
| Maven | org.awaitility:awaitility | 4.3.0 | pom.xml |
| Maven | org.lucee:jcip-annotations | 1.0.0 | pom.xml |
| Maven | de.skuzzle.enforcer:restrict-imports-enforcer-rule | 3.0.2 | pom.xml |
| Maven | com.sun.xml.bind:jaxb-impl | ${jaxb.version} | pom.xml |
| Maven | javax.activation:javax.activation-api | 1.2.0 | pom.xml |
| Maven | ${project.groupId}:${project.artifactId} | ${api.reference.version} | pom.xml |
| npm | lit | ^3.3.1 | vaadin-dev-server/package.json |
| Maven | com.vaadin:flow-server | ${project.version} | vaadin-dev-server/pom.xml |
| Maven | com.vaadin:flow-build-tools | ${project.version} | vaadin-dev-server/pom.xml |
| Maven | com.vaadin:flow-devloop-daemon | ${project.version} | vaadin-dev-server/pom.xml |
| Maven | com.vaadin:license-checker | — | vaadin-dev-server/pom.xml |
| Maven | com.vaadin:open | 8.5.0.5 | vaadin-dev-server/pom.xml |
| Maven | com.github.javaparser:javaparser-core | 3.28.2 | vaadin-dev-server/pom.xml |
| Maven | io.methvin:directory-watcher | 0.19.1 | vaadin-dev-server/pom.xml |
| Maven | org.springframework.boot:spring-boot-dependencies | ${spring.boot.version} | vaadin-spring/pom.xml |
| Maven | com.vaadin:flow-server | ${project.version} | vaadin-spring/pom.xml |
| Maven | com.vaadin:flow-push | ${project.version} | vaadin-spring/pom.xml |
| Maven | com.vaadin:flow-client | ${project.version} | vaadin-spring/pom.xml |
| Maven | org.springframework:spring-webmvc | — | vaadin-spring/pom.xml |
| Maven | org.springframework:spring-websocket | — | vaadin-spring/pom.xml |
| Maven | org.springframework.security:spring-security-config | — | vaadin-spring/pom.xml |
| Maven | org.springframework.security:spring-security-web | — | vaadin-spring/pom.xml |
| Maven | org.springframework.security:spring-security-oauth2-client | — | vaadin-spring/pom.xml |
| Maven | org.springframework.boot:spring-boot-configuration-processor | — | vaadin-spring/pom.xml |
| Maven | org.springframework.boot:spring-boot-autoconfigure-processor | — | vaadin-spring/pom.xml |
| Maven | org.springframework.data:spring-data-commons | — | vaadin-spring/pom.xml |
| Maven | com.vaadin:flow-data | ${project.version} | vaadin-spring/pom.xml |
| Maven | org.springframework.boot:spring-boot-devtools | — | vaadin-spring/pom.xml |
| Maven | org.hibernate.validator:hibernate-validator | — | vaadin-spring/pom.xml |
| Maven | org.springframework.security:spring-security-oauth2-jose | — | vaadin-spring/pom.xml |
| Maven | org.springframework.security:spring-security-oauth2-resource-server | — | vaadin-spring/pom.xml |
All dependencies 1,539
Full resolved dependency set from the GitHub dependency graph: 157 direct and 1,382 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
| Registry | Package | Version | Relation |
|---|---|---|---|
| Maven | com.github.javaparser:javaparser-core | 3.28.2 | direct |
| Maven | com.google.gwt:gwt | — | direct |
| Maven | com.google.gwt:gwt-elemental | — | direct |
| Maven | com.google.gwt:gwt-elemental | 2.9.0 | direct |
| Maven | com.interaso:webpush | 1.3.0 | direct |
| Maven | com.sun.xml.bind:jaxb-impl | — | direct |
| Maven | com.sun.xml.bind:jaxb-impl | 4.0.9 | direct |
| Maven | com.vaadin.external.atmosphere:atmosphere-runtime | — | direct |
| Maven | com.vaadin.external:gentyref | 1.2.0.vaadin1 | direct |
| Maven | com.vaadin:flow | 25.4-SNAPSHOT | direct |
| Maven | com.vaadin:flow-build-tools | — | direct |
| Maven | com.vaadin:flow-build-tools | 25.3-SNAPSHOT | direct |
| Maven | com.vaadin:flow-build-tools | 25.4-SNAPSHOT | direct |
| Maven | com.vaadin:flow-client | — | direct |
| Maven | com.vaadin:flow-client | 25.3-SNAPSHOT | direct |
| Maven | com.vaadin:flow-client | 25.4-SNAPSHOT | direct |
| Maven | com.vaadin:flow-data | 25.3-SNAPSHOT | direct |
| Maven | com.vaadin:flow-data | 25.4-SNAPSHOT | direct |
| Maven | com.vaadin:flow-devloop-daemon | — | direct |
| Maven | com.vaadin:flow-devloop-daemon | 25.3-SNAPSHOT | direct |
| Maven | com.vaadin:flow-devloop-daemon | 25.4-SNAPSHOT | direct |
| Maven | com.vaadin:flow-dnd | 25.3-SNAPSHOT | direct |
| Maven | com.vaadin:flow-dnd | 25.4-SNAPSHOT | direct |
| Maven | com.vaadin:flow-html-components | 25.3-SNAPSHOT | direct |
| Maven | com.vaadin:flow-html-components | 25.4-SNAPSHOT | direct |
| Maven | com.vaadin:flow-html-components-testbench | — | direct |
| Maven | com.vaadin:flow-html-components-testbench | 25.0-SNAPSHOT | direct |
| Maven | com.vaadin:flow-html-components-testbench | 25.3-SNAPSHOT | direct |
| Maven | com.vaadin:flow-html-components-testbench | 25.4-SNAPSHOT | direct |
| Maven | com.vaadin:flow-jandex | 25.4-SNAPSHOT | direct |
| Maven | com.vaadin:flow-lit-template | — | direct |
| Maven | com.vaadin:flow-lit-template | 25.3-SNAPSHOT | direct |
| Maven | com.vaadin:flow-lit-template | 25.4-SNAPSHOT | direct |
| Maven | com.vaadin:flow-polymer-template | — | direct |
| Maven | com.vaadin:flow-polymer-template | 25.4-SNAPSHOT | direct |
| Maven | com.vaadin:flow-push | 25.3-SNAPSHOT | direct |
| Maven | com.vaadin:flow-push | 25.4-SNAPSHOT | direct |
| Maven | com.vaadin:flow-react | — | direct |
| Maven | com.vaadin:flow-react | 25.3-SNAPSHOT | direct |
| Maven | com.vaadin:flow-react | 25.4-SNAPSHOT | direct |
| Maven | com.vaadin:flow-server | — | direct |
| Maven | com.vaadin:flow-server | 25.0-SNAPSHOT | direct |
| Maven | com.vaadin:flow-server | 25.1-SNAPSHOT | direct |
| Maven | com.vaadin:flow-server | 25.3-SNAPSHOT | direct |
| Maven | com.vaadin:flow-server | 25.4-SNAPSHOT | direct |
| Maven | com.vaadin:flow-server-production-mode | — | direct |
| Maven | com.vaadin:flow-server-production-mode | 25.0-SNAPSHOT | direct |
| Maven | com.vaadin:flow-server-production-mode | 25.4-SNAPSHOT | direct |
| Maven | com.vaadin:flow-test-generic | 25.3-SNAPSHOT | direct |
| Maven | com.vaadin:flow-test-generic | 25.4-SNAPSHOT | direct |
| Maven | com.vaadin:flow-webpush | 25.3-SNAPSHOT | direct |
| Maven | com.vaadin:flow-webpush | 25.4-SNAPSHOT | direct |
| Maven | com.vaadin:license-checker | — | direct |
| Maven | com.vaadin:license-checker | 1.13.5 | direct |
| Maven | com.vaadin:license-checker | 3.1.2 | direct |
| Maven | com.vaadin:open | 8.5.0.5 | direct |
| Maven | com.vaadin:vaadin-dev-server | — | direct |
| Maven | com.vaadin:vaadin-dev-server | 24.3-SNAPSHOT | direct |
| Maven | com.vaadin:vaadin-dev-server | 25.0-SNAPSHOT | direct |
| Maven | com.vaadin:vaadin-dev-server | 25.1-SNAPSHOT | direct |
| Maven | com.vaadin:vaadin-dev-server | 25.3-SNAPSHOT | direct |
| Maven | com.vaadin:vaadin-dev-server | 25.4-SNAPSHOT | direct |
| Maven | com.vaadin:vaadin-spring | — | direct |
| Maven | com.vaadin:vaadin-spring | 25.0-SNAPSHOT | direct |
| Maven | com.vaadin:vaadin-spring | 25.1-SNAPSHOT | direct |
| Maven | com.vaadin:vaadin-spring | 25.2-SNAPSHOT | direct |
| Maven | com.vaadin:vaadin-spring | 25.3-SNAPSHOT | direct |
| Maven | com.vaadin:vaadin-spring | 25.4-SNAPSHOT | direct |
| Maven | com.vaadin:vaadin-testbench-core | — | direct |
| Maven | commons-io:commons-io | — | direct |
| Maven | commons-io:commons-io | 2.22.0 | direct |
| Maven | de.skuzzle.enforcer:restrict-imports-enforcer-rule | 3.0.2 | direct |
| Maven | io.methvin:directory-watcher | 0.19.1 | direct |
| Maven | jakarta.platform:jakarta.jakartaee-bom | 11.0.0 | direct |
| Maven | javax.activation:javax.activation-api | 1.2.0 | direct |
| Maven | junit:junit | — | direct |
| Maven | junit:junit | 4.13.2 | direct |
| Maven | net.bytebuddy:byte-buddy | — | direct |
| Maven | net.bytebuddy:byte-buddy | 1.18.13 | direct |
| Maven | org.apache.commons:commons-compress | 1.28.0 | direct |
| Maven | org.apache.commons:commons-lang3 | — | direct |
| Maven | org.apache.commons:commons-lang3 | 3.11 | direct |
| Maven | org.apache.commons:commons-lang3 | 3.20.0 | direct |
| Maven | org.apache.commons:commons-text | 1.15.0 | direct |
| Maven | org.awaitility:awaitility | — | direct |
| Maven | org.awaitility:awaitility | 4.3.0 | direct |
| Maven | org.hamcrest:hamcrest-all | — | direct |
| Maven | org.hamcrest:hamcrest-all | 1.3 | direct |
| Maven | org.hibernate.validator:hibernate-validator | — | direct |
| Maven | org.jboss.forge.roaster:roaster-api | 2.31.1 | direct |
| Maven | org.jboss.forge.roaster:roaster-jdt | 2.31.1 | direct |
| Maven | org.jetbrains.kotlin:kotlin-stdlib | 2.4.20 | direct |
| Maven | org.jsoup:jsoup | — | direct |
| Maven | org.jspecify:jspecify | — | direct |
| Maven | org.jspecify:jspecify | 1.0.1 | direct |
| Maven | org.junit.jupiter:junit-jupiter | — | direct |
| Maven | org.junit.jupiter:junit-jupiter | 6.1.3 | direct |
| Maven | org.junit.jupiter:junit-jupiter-api | — | direct |
| Maven | org.junit.jupiter:junit-jupiter-api | 6.1.3 | direct |
| Maven | org.junit.platform:junit-platform-launcher | — | direct |
| Maven | org.junit.platform:junit-platform-launcher | 6.1.3 | direct |
| Maven | org.junit.vintage:junit-vintage-engine | — | direct |
| Maven | org.junit.vintage:junit-vintage-engine | 6.1.3 | direct |
| Maven | org.lucee:jcip-annotations | — | direct |
| Maven | org.lucee:jcip-annotations | 1.0.0 | direct |
| Maven | org.mockito:mockito-core | 5.23.0 | direct |
| Maven | org.mockito:mockito-inline | — | direct |
| Maven | org.mockito:mockito-inline | 5.2.0 | direct |
| Maven | org.ow2.asm:asm | — | direct |
| Maven | org.ow2.asm:asm | 9.10.1 | direct |
| Maven | org.slf4j:slf4j-api | — | direct |
| Maven | org.slf4j:slf4j-api | 2.0.19 | direct |
| Maven | org.slf4j:slf4j-simple | — | direct |
| Maven | org.slf4j:slf4j-simple | 2.0.16 | direct |
| Maven | org.slf4j:slf4j-simple | 2.0.19 | direct |
| Maven | org.springframework.boot:spring-boot-autoconfigure-processor | — | direct |
| Maven | org.springframework.boot:spring-boot-configuration-processor | — | direct |
| Maven | org.springframework.boot:spring-boot-dependencies | — | direct |
| Maven | org.springframework.boot:spring-boot-devtools | — | direct |
| Maven | org.springframework.data:spring-data-commons | — | direct |
| Maven | org.springframework.data:spring-data-commons | 3.3.4 | direct |
| Maven | org.springframework.security:spring-security-config | — | direct |
| Maven | org.springframework.security:spring-security-oauth2-client | — | direct |
| Maven | org.springframework.security:spring-security-oauth2-jose | — | direct |
| Maven | org.springframework.security:spring-security-oauth2-resource-server | — | direct |
| Maven | org.springframework.security:spring-security-web | — | direct |
| Maven | org.springframework:spring-webmvc | — | direct |
| Maven | org.springframework:spring-websocket | — | direct |
| Maven | tools.jackson.core:jackson-core | — | direct |
| Maven | tools.jackson.core:jackson-databind | — | direct |
| Maven | tools.jackson.dataformat:jackson-dataformat-yaml | — | direct |
| Maven | tools.jackson:jackson-bom | — | direct |
| Maven | tools.jackson:jackson-bom | 3.1.5 | direct |
| npm | @vaadin/common-frontend | 0.0.23 | direct |
| npm | @vaadin/common-frontend | 0.0.24 | direct |
| npm | a-node-html-parser | ^6.0.0-4 | direct |
| npm | acorn | 7.4.1 | direct |
| npm | acorn | 8.17.0 | direct |
| npm | acorn | ^7.1.0 | direct |
| npm | acorn-walk | 7.2.0 | direct |
| npm | acorn-walk | ^8.2.0 | direct |
| npm | esbuild | 0.28.1 | direct |
| npm | esbuild | 0.28.2 | direct |
| npm | lit | 3.3.3 | direct |
| npm | lit | ^3.3.1 | direct |
| npm | magic-string | 0.23.2 | direct |
| npm | magic-string | 0.30.17 | direct |
| npm | magic-string | 0.30.21 | direct |
| npm | magic-string | 1.3.1 | direct |
| npm | magic-string | ^0.26.3 | direct |
| npm | patch-package | ^6.4.7 | direct |
| npm | prettier | 3.8.4 | direct |
| npm | prettier | ^2.1.2 | direct |
| npm | prettier | ^3.6.2 | direct |
| npm | typescript | 6.0.3 | direct |
| npm | typescript | 7.0.2 | direct |
| npm | typescript | ^6.0.2 | direct |
| Maven | biz.aQute.bnd:bnd-maven-plugin | — | indirect |
| Maven | biz.aQute.bnd:bnd-maven-plugin | 7.4.0 | indirect |
| Maven | com.diffplug.spotless:spotless-maven-plugin | — | indirect |
| Maven | com.diffplug.spotless:spotless-maven-plugin | 3.10.2 | indirect |
| Maven | com.github.siom79.japicmp:japicmp-maven-plugin | — | indirect |
| Maven | com.github.siom79.japicmp:japicmp-maven-plugin | 1.2.0 | indirect |
| Maven | com.google.guava:guava | — | indirect |
| Maven | com.google.gwt:gwt-dev | — | indirect |
| Maven | com.google.gwt:gwt-user | — | indirect |
| Maven | com.google.inject:guice | 7.0.0 | indirect |
| Maven | com.lazerycode.selenium:driver-binary-downloader-maven-plugin | — | indirect |
| Maven | com.mycila:license-maven-plugin | 5.1.2 | indirect |
| Maven | com.nimbusds:nimbus-jose-jwt | — | indirect |
| Maven | com.nimbusds:nimbus-jose-jwt | 10.9.1 | indirect |
| Maven | com.sun.activation:javax.activation | 1.2.0 | indirect |
| Maven | com.sun.xml.bind:jaxb-core | — | indirect |
| Maven | com.typesafe.akka:akka-actor_2.13 | 2.8.8 | indirect |
| Maven | com.vaadin.addon:alpha-addon | 1.0.0 | indirect |
| Maven | com.vaadin.addon:beta-addon | 1.0.0 | indirect |
| Maven | com.vaadin.addon:commercial-addon | 1.0.0 | indirect |
| Maven | com.vaadin.test:fake-flow-resources | 1.0.0 | indirect |
| Maven | com.vaadin.test:flow-addon | 1.0.0 | indirect |
| Maven | com.vaadin.test:spring-test-excluded | 1.0 | indirect |
| Maven | com.vaadin:addon-with-templates | 25.4-SNAPSHOT | indirect |
| Maven | com.vaadin:flow-bom | 25.4-SNAPSHOT | indirect |
| Maven | com.vaadin:flow-bom | 8.0-SNAPSHOT | indirect |
| Maven | com.vaadin:flow-dev-bundle-plugin | 25.4-SNAPSHOT | indirect |
| Maven | com.vaadin:flow-embedding-test-assets | — | indirect |
| Maven | com.vaadin:flow-embedding-test-assets | 25.4-SNAPSHOT | indirect |
| Maven | com.vaadin:flow-maven-plugin | — | indirect |
| Maven | com.vaadin:flow-maven-plugin | 25.0-SNAPSHOT | indirect |
| Maven | com.vaadin:flow-maven-plugin | 25.1-SNAPSHOT | indirect |
| Maven | com.vaadin:flow-maven-plugin | 25.2-SNAPSHOT | indirect |
| Maven | com.vaadin:flow-maven-plugin | 25.3-SNAPSHOT | indirect |
| Maven | com.vaadin:flow-maven-plugin | 25.4-SNAPSHOT | indirect |
| Maven | com.vaadin:flow-plugin-base | 25.4-SNAPSHOT | indirect |
| Maven | com.vaadin:flow-polymer2lit | 25.4-SNAPSHOT | indirect |
| Maven | com.vaadin:flow-reusable-embedded-theme | 25.4-SNAPSHOT | indirect |
| Maven | com.vaadin:flow-server-compatibility-mode | — | indirect |
| Maven | com.vaadin:flow-test-commercial-addon | 25.4-SNAPSHOT | indirect |
| Maven | com.vaadin:flow-test-commercial-banner-webapp | 25.4-SNAPSHOT | indirect |
| Maven | com.vaadin:flow-test-common | 25.4-SNAPSHOT | indirect |
| Maven | com.vaadin:flow-test-devloop-shared | 25.4-SNAPSHOT | indirect |
| Maven | com.vaadin:flow-test-live-reload-multimodule-library-hotdeploy | 25.4-SNAPSHOT | indirect |
| Maven | com.vaadin:flow-test-live-reload-multimodule-theme-hotdeploy | 25.4-SNAPSHOT | indirect |
| Maven | com.vaadin:flow-test-lumo | 25.4-SNAPSHOT | indirect |
| Maven | com.vaadin:flow-test-resources | 24.3-SNAPSHOT | indirect |
| Maven | com.vaadin:flow-test-resources | 25.4-SNAPSHOT | indirect |
| Maven | com.vaadin:flow-test-reusable-theme-express-build | 25.4-SNAPSHOT | indirect |
| Maven | com.vaadin:flow-test-reusable-theme-no-assets | 25.4-SNAPSHOT | indirect |
| Maven | com.vaadin:flow-test-root-context | — | indirect |
| Maven | com.vaadin:flow-test-root-context-npm | 25.4-SNAPSHOT | indirect |
| Maven | com.vaadin:flow-test-util | 25.3-SNAPSHOT | indirect |
| Maven | com.vaadin:flow-test-util | 25.4-SNAPSHOT | indirect |
| Maven | com.vaadin:frontend-add-on | 25.4-SNAPSHOT | indirect |
| Maven | com.vaadin:java-add-on | 25.4-SNAPSHOT | indirect |
| Maven | com.vaadin:reusable-theme | 25.4-SNAPSHOT | indirect |
| Maven | com.vaadin:test-aura | 25.3-SNAPSHOT | indirect |
| Maven | com.vaadin:test-aura | 25.4-SNAPSHOT | indirect |
| Maven | com.vaadin:test-dev-bundle | 24.3-SNAPSHOT | indirect |
| Maven | com.vaadin:test-dev-bundle | 25.4-SNAPSHOT | indirect |
| Maven | com.vaadin:test-flow-maven-plugin | 25.4-SNAPSHOT | indirect |
| Maven | com.vaadin:test-lumo-theme | 25.4-SNAPSHOT | indirect |
| Maven | com.vaadin:test-prod-bundle | 25.4-SNAPSHOT | indirect |
| Maven | com.vaadin:test-router-custom-context | 25.4-SNAPSHOT | indirect |
| Maven | com.vaadin:test-spring-security-flow | 25.0-SNAPSHOT | indirect |
| Maven | com.vaadin:vaadin-bom | 21.0.0.alpha7 | indirect |
| Maven | com.vaadin:vaadin-maven-plugin | 21.0.0.alpha7 | indirect |
| Maven | com.vaadin:vaadin-spring-boot-starter | — | indirect |
| Maven | com.vaadin:vaadin-test-spring-common | 25.0-SNAPSHOT | indirect |
| Maven | com.vaadin:vaadin-test-spring-common | 25.1-SNAPSHOT | indirect |
| Maven | com.vaadin:vaadin-test-spring-common | 25.2-SNAPSHOT | indirect |
| Maven | com.vaadin:vaadin-test-spring-common | 25.4-SNAPSHOT | indirect |
| Maven | com.vaadin:vaadin-test-spring-filter-packages-lib-allowed | 25.1-SNAPSHOT | indirect |
| Maven | com.vaadin:vaadin-test-spring-filter-packages-lib-blocked | 25.1-SNAPSHOT | indirect |
| Maven | com.vaadin:vaadin-test-spring-filter-packages-lib-exclude | 25.1-SNAPSHOT | indirect |
| Maven | com.vaadin:vaadin-test-spring-helpers | 25.0-SNAPSHOT | indirect |
| Maven | com.vaadin:vaadin-test-spring-helpers | 25.3-SNAPSHOT | indirect |
| Maven | com.vaadin:vaadin-test-spring-helpers | 25.4-SNAPSHOT | indirect |
| Maven | com.vaadin:vaadin-testbench-bom | — | indirect |
| Maven | com.vaadin:vaadin-testbench-core-junit5 | — | indirect |
| Maven | com.vaadin:vaadin-testbench-shared | — | indirect |
| Maven | com.vaadin:vite-test-assets | 25.4-SNAPSHOT | indirect |
| Maven | commons-codec:commons-codec | 1.22.1 | indirect |
| Maven | io.dropwizard.metrics:metrics-core | 4.2.40 | indirect |
| Maven | io.github.classgraph:classgraph | 4.0.0 | indirect |
| Maven | io.github.classgraph:classgraph | 4.8.195 | indirect |
| Maven | io.smallrye:jandex-maven-plugin | 3.6.0 | indirect |
| Maven | jakarta.annotation:jakarta.annotation-api | — | indirect |
| Maven | jakarta.persistence:jakarta.persistence-api | — | indirect |
| Maven | jakarta.platform:jakarta.jakartaee-web-api | — | indirect |
| Maven | jakarta.servlet:jakarta.servlet-api | — | indirect |
| Maven | jakarta.validation:jakarta.validation-api | — | indirect |
| Maven | jakarta.websocket:jakarta.websocket-api | — | indirect |
| Maven | jakarta.websocket:jakarta.websocket-client-api | — | indirect |
| Maven | javax.activation:activation | 1.1.1 | indirect |
| Maven | javax.enterprise:cdi-api | 1.2 | indirect |
| Maven | javax.servlet:javax.servlet-api | 3.1.0 | indirect |
| Maven | javax.transaction:javax.transaction-api | 1.2 | indirect |
| Maven | javax.xml.bind:jaxb-api | 2.3.1 | indirect |
| Maven | net.alchim31.maven:yuicompressor-maven-plugin | 1.5.1 | indirect |
| Maven | org.apache.aries.spifly:org.apache.aries.spifly.core-internal | 1.0.12 | indirect |
| Maven | org.apache.aries.spifly:org.apache.aries.spifly.dynamic.bundle | 1.0.12 | indirect |
| Maven | org.apache.aries.spifly:org.apache.aries.spifly.static.bundle | 1.0.12 | indirect |
| Maven | org.apache.aries.spifly:org.apache.aries.spifly.static.tool | 1.0.12 | indirect |
| Maven | org.apache.aries.spifly:org.apache.aries.spifly.weaver-internal | 1.0.12 | indirect |
| Maven | org.apache.aries:org.apache.aries.util | 1.1.3 | indirect |
| Maven | org.apache.httpcomponents.client5:httpclient5 | — | indirect |
| Maven | org.apache.httpcomponents:httpclient | 4.5.14 | indirect |
| Maven | org.apache.karaf.tooling:karaf-maven-plugin | — | indirect |
| Maven | org.apache.karaf.tooling:karaf-maven-plugin | 4.3.9 | indirect |
| Maven | org.apache.maven.plugin-tools:maven-plugin-annotations | — | indirect |
| Maven | org.apache.maven.plugins:maven-antrun-plugin | — | indirect |
| Maven | org.apache.maven.plugins:maven-antrun-plugin | 3.2.0 | indirect |
| Maven | org.apache.maven.plugins:maven-assembly-plugin | 3.8.0 | indirect |
| Maven | org.apache.maven.plugins:maven-clean-plugin | — | indirect |
| Maven | org.apache.maven.plugins:maven-clean-plugin | 3.5.0 | indirect |
| Maven | org.apache.maven.plugins:maven-compiler-plugin | — | indirect |
| Maven | org.apache.maven.plugins:maven-compiler-plugin | 3.13.0 | indirect |
| Maven | org.apache.maven.plugins:maven-compiler-plugin | 3.16.0 | indirect |
| Maven | org.apache.maven.plugins:maven-dependency-plugin | 25.0-SNAPSHOT | indirect |
| Maven | org.apache.maven.plugins:maven-dependency-plugin | 25.2-SNAPSHOT | indirect |
| Maven | org.apache.maven.plugins:maven-dependency-plugin | 25.3-SNAPSHOT | indirect |
| Maven | org.apache.maven.plugins:maven-dependency-plugin | 25.4-SNAPSHOT | indirect |
| Maven | org.apache.maven.plugins:maven-dependency-plugin | 3.1.1 | indirect |
| Maven | org.apache.maven.plugins:maven-dependency-plugin | 3.11.0 | indirect |
| Maven | org.apache.maven.plugins:maven-enforcer-plugin | — | indirect |
| Maven | org.apache.maven.plugins:maven-enforcer-plugin | 3.6.3 | indirect |
| Maven | org.apache.maven.plugins:maven-failsafe-plugin | — | indirect |
| Maven | org.apache.maven.plugins:maven-failsafe-plugin | 3.5.6 | indirect |
| Maven | org.apache.maven.plugins:maven-help-plugin | — | indirect |
| Maven | org.apache.maven.plugins:maven-install-plugin | 3.1.4 | indirect |
| Maven | org.apache.maven.plugins:maven-invoker-plugin | 3.10.1 | indirect |
| Maven | org.apache.maven.plugins:maven-jar-plugin | — | indirect |
| Maven | org.apache.maven.plugins:maven-jar-plugin | 3.5.1 | indirect |
| Maven | org.apache.maven.plugins:maven-javadoc-plugin | — | indirect |
| Maven | org.apache.maven.plugins:maven-javadoc-plugin | 3.12.0 | indirect |
| Maven | org.apache.maven.plugins:maven-plugin-plugin | 3.16.0 | indirect |
| Maven | org.apache.maven.plugins:maven-resources-plugin | — | indirect |
| Maven | org.apache.maven.plugins:maven-resources-plugin | 3.5.0 | indirect |
| Maven | org.apache.maven.plugins:maven-shade-plugin | 3.6.2 | indirect |
| Maven | org.apache.maven.plugins:maven-source-plugin | 3.4.0 | indirect |
| Maven | org.apache.maven.plugins:maven-surefire-plugin | — | indirect |
| Maven | org.apache.maven.plugins:maven-surefire-plugin | 3.6.0 | indirect |
| Maven | org.apache.maven.plugins:maven-war-plugin | — | indirect |
| Maven | org.apache.maven.plugins:maven-war-plugin | 3.5.1 | indirect |
| Maven | org.apache.maven.shared:maven-invoker | 3.3.0 | indirect |
| Maven | org.apache.maven.shared:maven-shared-utils | 3.4.2 | indirect |
| Maven | org.apache.maven.surefire:surefire-junit47 | — | indirect |
| Maven | org.apache.maven:maven-artifact | 3.9.9 | indirect |
| Maven | org.apache.maven:maven-core | — | indirect |
| Maven | org.apache.maven:maven-core | 3.9.9 | indirect |
| Maven | org.apache.maven:maven-plugin-api | — | indirect |
| Maven | org.apache.maven:maven-plugin-api | 3.9.9 | indirect |
| Maven | org.apache.servicemix.bundles:org.apache.servicemix.bundles.javax-inject | 1_2 | indirect |
| Maven | org.atmosphere.client:maven-dependency-plugin | 3.11.0 | indirect |
| Maven | org.brotli:dec | 0.1.2 | indirect |
| Maven | org.codehaus.cargo:cargo-maven3-plugin | 1.10.28 | indirect |
| Maven | org.codehaus.cargo:cargo-maven3-plugin | 10.1.8 | indirect |
| Maven | org.codehaus.mojo:build-helper-maven-plugin | — | indirect |
| Maven | org.codehaus.mojo:build-helper-maven-plugin | 3.6.1 | indirect |
| Maven | org.codehaus.mojo:exec-maven-plugin | 1.6.0 | indirect |
| Maven | org.codehaus.mojo:exec-maven-plugin | 3.6.3 | indirect |
| Maven | org.codehaus.mojo:gwt-maven-plugin | — | indirect |
| Maven | org.codehaus.mojo:license-maven-plugin | 2.7.1 | indirect |
| Maven | org.codehaus.mojo:properties-maven-plugin | — | indirect |
| Maven | org.codehaus.plexus:plexus-build-api | 1.2.0 | indirect |
| Maven | org.codehaus.plexus:plexus-utils | 4.1.0 | indirect |
| Maven | org.commonjava.maven.plugins:directory-maven-plugin | 1.0 | indirect |
| Maven | org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-client | — | indirect |
| Maven | org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server | — | indirect |
| Maven | org.eclipse.jetty.ee10:jetty-ee10-annotations | — | indirect |
| Maven | org.eclipse.jetty.ee10:jetty-ee10-bom | 12.0.3 | indirect |
| Maven | org.eclipse.jetty.ee10:jetty-ee10-maven-plugin | — | indirect |
| Maven | org.eclipse.jetty.ee10:jetty-ee10-plus | — | indirect |
| Maven | org.eclipse.jetty.ee10:jetty-ee10-proxy | — | indirect |
| Maven | org.eclipse.jetty.ee10:jetty-ee10-servlet | — | indirect |
| Maven | org.eclipse.jetty.ee10:jetty-ee10-servlets | — | indirect |
| Maven | org.eclipse.jetty.ee10:jetty-ee10-webapp | — | indirect |
| Maven | org.eclipse.jetty.osgi:jetty-osgi-boot | 9.4.11.v20180605 | indirect |
| Maven | org.eclipse.jetty:jetty-client | 12.0.3 | indirect |
| Maven | org.eclipse.jetty:jetty-http | — | indirect |
| Maven | org.eclipse.jetty:jetty-maven-plugin | — | indirect |
| Maven | org.eclipse.jetty:jetty-plus | 9.4.11.v20180605 | indirect |
| Maven | org.eclipse.jetty:jetty-server | — | indirect |
| Maven | org.eclipse.jetty:jetty-servlet | 9.4.11.v20180605 | indirect |
| Maven | org.eclipse.jetty:jetty-util | — | indirect |
| Maven | org.eclipse.jetty:jetty-util | 9.4.11.v20180605 | indirect |
| Maven | org.eclipse.m2e:lifecycle-mapping | 1.0.0 | indirect |
| Maven | org.eclipse.platform:org.eclipse.core.contenttype | 3.9.900 | indirect |
| Maven | org.eclipse.platform:org.eclipse.core.jobs | 3.15.400 | indirect |
| Maven | org.eclipse.platform:org.eclipse.core.resources | 3.21.0 | indirect |
| Maven | org.eclipse.platform:org.eclipse.core.runtime | 3.31.100 | indirect |
| Maven | org.eclipse.platform:org.eclipse.equinox.common | 3.19.100 | indirect |
| Maven | org.eclipse.platform:org.eclipse.equinox.preferences | 3.12.100 | indirect |
| Maven | org.hsqldb:hsqldb | 2.7.4 | indirect |
| Maven | org.jacoco:jacoco-maven-plugin | 0.8.15 | indirect |
| Maven | org.osgi:org.osgi.compendium | 5.0.0 | indirect |
| Maven | org.osgi:org.osgi.core | 6.0.0 | indirect |
| Maven | org.osgi:org.osgi.service.prefs | 1.1.2 | indirect |
| Maven | org.osgi:org.osgi.service.serviceloader | 1.0.0 | indirect |
| Maven | org.osgi:osgi.annotation | — | indirect |
| Maven | org.osgi:osgi.cmpn | — | indirect |
| Maven | org.osgi:osgi.core | — | indirect |
| Maven | org.scala-lang.modules:scala-java8-compat_2.13 | 1.0.2 | indirect |
| Maven | org.sonarsource.scanner.maven:sonar-maven-plugin | 5.7.0.6970 | indirect |
| Maven | org.sonatype.plexus:plexus-build-api | 0.0.7 | indirect |
| Maven | org.sonatype.plugins:nexus-staging-maven-plugin | — | indirect |
| Maven | org.springdoc:springdoc-openapi-starter-webmvc-ui | 3.1.1 | indirect |
| Maven | org.springframework.boot:spring-boot-autoconfigure | — | indirect |
| Maven | org.springframework.boot:spring-boot-maven-plugin | — | indirect |
| Maven | org.springframework.boot:spring-boot-security | — | indirect |
| Maven | org.springframework.boot:spring-boot-starter-jetty | — | indirect |
| Maven | org.springframework.boot:spring-boot-starter-security | — | indirect |
| Maven | org.springframework.boot:spring-boot-starter-test | — | indirect |
| Maven | org.springframework.boot:spring-boot-starter-thymeleaf | — | indirect |
| Maven | org.springframework.boot:spring-boot-starter-undertow | — | indirect |
| Maven | org.springframework.boot:spring-boot-starter-webmvc | — | indirect |
| Maven | org.springframework.boot:spring-boot-webmvc-test | — | indirect |
| Maven | org.springframework.data:spring-data-jpa | 3.3.4 | indirect |
| Maven | org.springframework.security:spring-security-oauth2-authorization-server | — | indirect |
| Maven | org.springframework.security:spring-security-test | — | indirect |
| Maven | org.springframework:spring-context | — | indirect |
| Maven | org.springframework:spring-test | — | indirect |
| Maven | org.tensorflow:tensorflow | 1.15.0 | indirect |
| Maven | org.webjars.bowergithub.polymer:polymer | — | indirect |
| Maven | org.webjars.bowergithub.vaadin:vaadin-themable-mixin | 1.4.4 | indirect |
| Maven | org.yaml:snakeyaml | 1.23 | indirect |
| Maven | org.yaml:snakeyaml | 2.2 | indirect |
| npm | @babel/code-frame | 7.29.7 | indirect |
| npm | @babel/compat-data | 7.29.7 | indirect |
| npm | @babel/core | 7.29.0 | indirect |
| npm | @babel/core | 7.29.7 | indirect |
| npm | @babel/eslint-parser | 7.28.6 | indirect |
| npm | @babel/generator | 7.29.7 | indirect |
| npm | @babel/helper-annotate-as-pure | 7.29.7 | indirect |
| npm | @babel/helper-builder-binary-assignment-operator-visitor | 7.22.15 | indirect |
| npm | @babel/helper-compilation-targets | 7.29.7 | indirect |
| npm | @babel/helper-create-class-features-plugin | 7.29.7 | indirect |
| npm | @babel/helper-create-regexp-features-plugin | 7.22.15 | indirect |
| npm | @babel/helper-define-polyfill-provider | 0.4.4 | indirect |
| npm | @babel/helper-define-polyfill-provider | 0.5.0 | indirect |
| npm | @babel/helper-define-polyfill-provider | 0.6.8 | indirect |
| npm | @babel/helper-environment-visitor | 7.22.20 | indirect |
| npm | @babel/helper-function-name | 7.23.0 | indirect |
| npm | @babel/helper-globals | 7.29.7 | indirect |
| npm | @babel/helper-hoist-variables | 7.22.5 | indirect |
| npm | @babel/helper-member-expression-to-functions | 7.29.7 | indirect |
| npm | @babel/helper-module-imports | 7.29.7 | indirect |
| npm | @babel/helper-module-transforms | 7.29.7 | indirect |
| npm | @babel/helper-optimise-call-expression | 7.29.7 | indirect |
| npm | @babel/helper-plugin-utils | 7.29.7 | indirect |
| npm | @babel/helper-remap-async-to-generator | 7.22.20 | indirect |
| npm | @babel/helper-replace-supers | 7.29.7 | indirect |
| npm | @babel/helper-skip-transparent-expression-wrappers | 7.29.7 | indirect |
| npm | @babel/helper-split-export-declaration | 7.24.5 | indirect |
| npm | @babel/helper-string-parser | 7.29.7 | indirect |
| npm | @babel/helper-validator-identifier | 7.29.7 | indirect |
| npm | @babel/helper-validator-option | 7.29.7 | indirect |
| npm | @babel/helper-wrap-function | 7.22.20 | indirect |
| npm | @babel/helpers | 7.29.7 | indirect |
| npm | @babel/parser | 7.29.7 | indirect |
| npm | @babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression | 7.23.3 | indirect |
| npm | @babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining | 7.23.3 | indirect |
| npm | @babel/plugin-bugfix-v8-static-class-fields-redefine-readonly | 7.23.7 | indirect |
| npm | @babel/plugin-proposal-decorators | 7.29.7 | indirect |
| npm | @babel/plugin-proposal-private-property-in-object | 7.21.0-placeholder-for-preset-env.2 | indirect |
| npm | @babel/plugin-syntax-async-generators | 7.8.4 | indirect |
| npm | @babel/plugin-syntax-class-properties | 7.12.13 | indirect |
| npm | @babel/plugin-syntax-class-static-block | 7.14.5 | indirect |
| npm | @babel/plugin-syntax-decorators | 7.29.7 | indirect |
| npm | @babel/plugin-syntax-dynamic-import | 7.8.3 | indirect |
| npm | @babel/plugin-syntax-export-namespace-from | 7.8.3 | indirect |
| npm | @babel/plugin-syntax-import-assertions | 7.23.3 | indirect |
| npm | @babel/plugin-syntax-import-attributes | 7.23.3 | indirect |
| npm | @babel/plugin-syntax-import-meta | 7.10.4 | indirect |
| npm | @babel/plugin-syntax-json-strings | 7.8.3 | indirect |
| npm | @babel/plugin-syntax-jsx | 7.29.7 | indirect |
| npm | @babel/plugin-syntax-logical-assignment-operators | 7.10.4 | indirect |
| npm | @babel/plugin-syntax-nullish-coalescing-operator | 7.8.3 | indirect |
| npm | @babel/plugin-syntax-numeric-separator | 7.10.4 | indirect |
| npm | @babel/plugin-syntax-object-rest-spread | 7.8.3 | indirect |
| npm | @babel/plugin-syntax-optional-catch-binding | 7.8.3 | indirect |
| npm | @babel/plugin-syntax-optional-chaining | 7.8.3 | indirect |
| npm | @babel/plugin-syntax-private-property-in-object | 7.14.5 | indirect |
| npm | @babel/plugin-syntax-top-level-await | 7.14.5 | indirect |
| npm | @babel/plugin-syntax-typescript | 7.29.7 | indirect |
| npm | @babel/plugin-syntax-unicode-sets-regex | 7.18.6 | indirect |
| npm | @babel/plugin-transform-arrow-functions | 7.23.3 | indirect |
| npm | @babel/plugin-transform-async-generator-functions | 7.23.7 | indirect |
| npm | @babel/plugin-transform-async-to-generator | 7.23.3 | indirect |
| npm | @babel/plugin-transform-block-scoped-functions | 7.23.3 | indirect |
| npm | @babel/plugin-transform-block-scoping | 7.23.4 | indirect |
| npm | @babel/plugin-transform-class-properties | 7.23.3 | indirect |
| npm | @babel/plugin-transform-class-static-block | 7.23.4 | indirect |
| npm | @babel/plugin-transform-classes | 7.23.8 | indirect |
| npm | @babel/plugin-transform-computed-properties | 7.23.3 | indirect |
| npm | @babel/plugin-transform-destructuring | 7.23.3 | indirect |
| npm | @babel/plugin-transform-dotall-regex | 7.23.3 | indirect |
| npm | @babel/plugin-transform-duplicate-keys | 7.23.3 | indirect |
| npm | @babel/plugin-transform-dynamic-import | 7.23.4 | indirect |
| npm | @babel/plugin-transform-exponentiation-operator | 7.23.3 | indirect |
| npm | @babel/plugin-transform-export-namespace-from | 7.23.4 | indirect |
| npm | @babel/plugin-transform-for-of | 7.23.6 | indirect |
| npm | @babel/plugin-transform-function-name | 7.23.3 | indirect |
| npm | @babel/plugin-transform-json-strings | 7.23.4 | indirect |
| npm | @babel/plugin-transform-literals | 7.23.3 | indirect |
| npm | @babel/plugin-transform-logical-assignment-operators | 7.23.4 | indirect |
| npm | @babel/plugin-transform-member-expression-literals | 7.23.3 | indirect |
| npm | @babel/plugin-transform-modules-amd | 7.23.3 | indirect |
| npm | @babel/plugin-transform-modules-commonjs | 7.29.7 | indirect |
| npm | @babel/plugin-transform-modules-systemjs | 7.23.3 | indirect |
| npm | @babel/plugin-transform-modules-umd | 7.23.3 | indirect |
| npm | @babel/plugin-transform-named-capturing-groups-regex | 7.22.5 | indirect |
| npm | @babel/plugin-transform-new-target | 7.23.3 | indirect |
| npm | @babel/plugin-transform-nullish-coalescing-operator | 7.23.4 | indirect |
| npm | @babel/plugin-transform-numeric-separator | 7.23.4 | indirect |
| npm | @babel/plugin-transform-object-rest-spread | 7.23.4 | indirect |
| npm | @babel/plugin-transform-object-super | 7.23.3 | indirect |
| npm | @babel/plugin-transform-optional-catch-binding | 7.23.4 | indirect |
| npm | @babel/plugin-transform-optional-chaining | 7.23.4 | indirect |
| npm | @babel/plugin-transform-parameters | 7.23.3 | indirect |
| npm | @babel/plugin-transform-private-methods | 7.23.3 | indirect |
| npm | @babel/plugin-transform-private-property-in-object | 7.23.4 | indirect |
| npm | @babel/plugin-transform-property-literals | 7.23.3 | indirect |
| npm | @babel/plugin-transform-react-display-name | 7.29.7 | indirect |
| npm | @babel/plugin-transform-react-jsx | 7.29.7 | indirect |
| npm | @babel/plugin-transform-react-jsx-development | 7.29.7 | indirect |
| npm | @babel/plugin-transform-react-pure-annotations | 7.29.7 | indirect |
| npm | @babel/plugin-transform-regenerator | 7.23.3 | indirect |
| npm | @babel/plugin-transform-reserved-words | 7.23.3 | indirect |
| npm | @babel/plugin-transform-runtime | 7.29.7 | indirect |
| npm | @babel/plugin-transform-shorthand-properties | 7.23.3 | indirect |
| npm | @babel/plugin-transform-spread | 7.23.3 | indirect |
| npm | @babel/plugin-transform-sticky-regex | 7.23.3 | indirect |
| npm | @babel/plugin-transform-template-literals | 7.23.3 | indirect |
| npm | @babel/plugin-transform-typeof-symbol | 7.23.3 | indirect |
| npm | @babel/plugin-transform-typescript | 7.29.7 | indirect |
| npm | @babel/plugin-transform-unicode-escapes | 7.23.3 | indirect |
| npm | @babel/plugin-transform-unicode-property-regex | 7.23.3 | indirect |
| npm | @babel/plugin-transform-unicode-regex | 7.23.3 | indirect |
| npm | @babel/plugin-transform-unicode-sets-regex | 7.23.3 | indirect |
| npm | @babel/preset-env | 7.23.8 | indirect |
| npm | @babel/preset-modules | 0.1.6-no-external-plugins | indirect |
| npm | @babel/preset-react | 7.29.7 | indirect |
| npm | @babel/preset-typescript | 7.29.7 | indirect |
| npm | @babel/regjsgen | 0.8.0 | indirect |
| npm | @babel/runtime | 7.29.2 | indirect |
| npm | @babel/template | 7.29.7 | indirect |
| npm | @babel/traverse | 7.29.7 | indirect |
| npm | @babel/types | 7.29.7 | indirect |
| npm | @babel/types | 7.29.8 | indirect |
| npm | @emnapi/core | 1.10.0 | indirect |
| npm | @emnapi/core | 1.4.5 | indirect |
| npm | @emnapi/core | 1.9.1 | indirect |
| npm | @emnapi/runtime | 1.10.0 | indirect |
| npm | @emnapi/runtime | 1.4.5 | indirect |
| npm | @emnapi/runtime | 1.9.1 | indirect |
| npm | @emnapi/wasi-threads | 1.0.4 | indirect |
| npm | @emnapi/wasi-threads | 1.2.0 | indirect |
| npm | @emnapi/wasi-threads | 1.2.1 | indirect |
| npm | @esbuild/aix-ppc64 | 0.28.1 | indirect |
| npm | @esbuild/aix-ppc64 | 0.28.2 | indirect |
| npm | @esbuild/android-arm | 0.28.1 | indirect |
| npm | @esbuild/android-arm | 0.28.2 | indirect |
| npm | @esbuild/android-arm64 | 0.28.1 | indirect |
| npm | @esbuild/android-arm64 | 0.28.2 | indirect |
| npm | @esbuild/android-x64 | 0.28.1 | indirect |
| npm | @esbuild/android-x64 | 0.28.2 | indirect |
| npm | @esbuild/darwin-arm64 | 0.28.1 | indirect |
| npm | @esbuild/darwin-arm64 | 0.28.2 | indirect |
| npm | @esbuild/darwin-x64 | 0.28.1 | indirect |
| npm | @esbuild/darwin-x64 | 0.28.2 | indirect |
| npm | @esbuild/freebsd-arm64 | 0.28.1 | indirect |
| npm | @esbuild/freebsd-arm64 | 0.28.2 | indirect |
| npm | @esbuild/freebsd-x64 | 0.28.1 | indirect |
| npm | @esbuild/freebsd-x64 | 0.28.2 | indirect |
| npm | @esbuild/linux-arm | 0.28.1 | indirect |
| npm | @esbuild/linux-arm | 0.28.2 | indirect |
| npm | @esbuild/linux-arm64 | 0.28.1 | indirect |
| npm | @esbuild/linux-arm64 | 0.28.2 | indirect |
| npm | @esbuild/linux-ia32 | 0.28.1 | indirect |
| npm | @esbuild/linux-ia32 | 0.28.2 | indirect |
| npm | @esbuild/linux-loong64 | 0.28.1 | indirect |
| npm | @esbuild/linux-loong64 | 0.28.2 | indirect |
| npm | @esbuild/linux-mips64el | 0.28.1 | indirect |
| npm | @esbuild/linux-mips64el | 0.28.2 | indirect |
| npm | @esbuild/linux-ppc64 | 0.28.1 | indirect |
| npm | @esbuild/linux-ppc64 | 0.28.2 | indirect |
| npm | @esbuild/linux-riscv64 | 0.28.1 | indirect |
| npm | @esbuild/linux-riscv64 | 0.28.2 | indirect |
| npm | @esbuild/linux-s390x | 0.28.1 | indirect |
| npm | @esbuild/linux-s390x | 0.28.2 | indirect |
| npm | @esbuild/linux-x64 | 0.28.1 | indirect |
| npm | @esbuild/linux-x64 | 0.28.2 | indirect |
| npm | @esbuild/netbsd-arm64 | 0.28.1 | indirect |
| npm | @esbuild/netbsd-arm64 | 0.28.2 | indirect |
| npm | @esbuild/netbsd-x64 | 0.28.1 | indirect |
| npm | @esbuild/netbsd-x64 | 0.28.2 | indirect |
| npm | @esbuild/openbsd-arm64 | 0.28.1 | indirect |
| npm | @esbuild/openbsd-arm64 | 0.28.2 | indirect |
| npm | @esbuild/openbsd-x64 | 0.28.1 | indirect |
| npm | @esbuild/openbsd-x64 | 0.28.2 | indirect |
| npm | @esbuild/openharmony-arm64 | 0.28.1 | indirect |
| npm | @esbuild/openharmony-arm64 | 0.28.2 | indirect |
| npm | @esbuild/sunos-x64 | 0.28.1 | indirect |
| npm | @esbuild/sunos-x64 | 0.28.2 | indirect |
| npm | @esbuild/win32-arm64 | 0.28.1 | indirect |
| npm | @esbuild/win32-arm64 | 0.28.2 | indirect |
| npm | @esbuild/win32-ia32 | 0.28.1 | indirect |
| npm | @esbuild/win32-ia32 | 0.28.2 | indirect |
| npm | @esbuild/win32-x64 | 0.28.1 | indirect |
| npm | @esbuild/win32-x64 | 0.28.2 | indirect |
| npm | @eslint-community/eslint-utils | 4.9.1 | indirect |
| npm | @eslint-community/regexpp | 4.12.2 | indirect |
| npm | @eslint/config-array | 0.21.2 | indirect |
| npm | @eslint/config-helpers | 0.4.2 | indirect |
| npm | @eslint/core | 0.17.0 | indirect |
| npm | @eslint/eslintrc | 3.3.5 | indirect |
| npm | @eslint/js | 9.39.4 | indirect |
| npm | @eslint/object-schema | 2.1.7 | indirect |
| npm | @eslint/plugin-kit | 0.4.1 | indirect |
| npm | @esm-bundle/chai | 4.3.4-fix.0 | indirect |
| npm | @hapi/bourne | 3.0.0 | indirect |
| npm | @humanfs/core | 0.19.2 | indirect |
| npm | @humanfs/node | 0.16.8 | indirect |
| npm | @humanfs/types | 0.15.0 | indirect |
| npm | @humanwhocodes/module-importer | 1.0.1 | indirect |
| npm | @humanwhocodes/retry | 0.4.3 | indirect |
| npm | @jest/diff-sequences | 30.0.1 | indirect |
| npm | @jridgewell/gen-mapping | 0.3.13 | indirect |
| npm | @jridgewell/remapping | 2.3.5 | indirect |
| npm | @jridgewell/resolve-uri | 3.1.1 | indirect |
| npm | @jridgewell/resolve-uri | 3.1.2 | indirect |
| npm | @jridgewell/sourcemap-codec | 1.5.5 | indirect |
| npm | @jridgewell/trace-mapping | 0.3.31 | indirect |
| npm | @koa/cors | ^5.0.0 | indirect |
| npm | @lit-labs/ssr-dom-shim | 1.6.0 | indirect |
| npm | @lit/reactive-element | 2.1.2 | indirect |
| npm | @mdn/browser-compat-data | 4.2.1 | indirect |
| npm | @microsoft/tsdoc | 0.15.1 | indirect |
| npm | @microsoft/tsdoc-config | 0.17.1 | indirect |
| npm | @napi-rs/wasm-runtime | 0.2.4 | indirect |
| npm | @napi-rs/wasm-runtime | 1.1.1 | indirect |
| npm | @napi-rs/wasm-runtime | 1.1.5 | indirect |
| npm | @napi-rs/wasm-runtime | 1.1.6 | indirect |
| npm | @nicolo-ribaudo/eslint-scope-5-internals | 5.1.1-v1 | indirect |
| npm | @nodelib/fs.scandir | 2.1.5 | indirect |
| npm | @nodelib/fs.stat | 2.0.5 | indirect |
| npm | @nodelib/fs.walk | 1.2.8 | indirect |
| npm | @nx/devkit | 22.7.6 | indirect |
| npm | @nx/js | 22.7.6 | indirect |
| npm | @nx/nx-darwin-arm64 | 22.7.6 | indirect |
| npm | @nx/nx-darwin-x64 | 22.7.6 | indirect |
| npm | @nx/nx-freebsd-x64 | 22.7.6 | indirect |
| npm | @nx/nx-linux-arm-gnueabihf | 22.7.6 | indirect |
| npm | @nx/nx-linux-arm64-gnu | 22.7.6 | indirect |
| npm | @nx/nx-linux-arm64-musl | 22.7.6 | indirect |
| npm | @nx/nx-linux-x64-gnu | 22.7.6 | indirect |
| npm | @nx/nx-linux-x64-musl | 22.7.6 | indirect |
| npm | @nx/nx-win32-arm64-msvc | 22.7.6 | indirect |
| npm | @nx/nx-win32-x64-msvc | 22.7.6 | indirect |
| npm | @nx/workspace | 22.7.6 | indirect |
| npm | @open-wc/dedupe-mixin | 1.4.0 | indirect |
| npm | @open-wc/dedupe-mixin | 2.0.1 | indirect |
| npm | @open-wc/dev-server-hmr | ^0.2.0 | indirect |
| npm | @open-wc/scoped-elements | 3.0.10 | indirect |
| npm | @open-wc/semantic-dom-diff | 0.20.1 | indirect |
| npm | @open-wc/testing | 4.0.0 | indirect |
| npm | @open-wc/testing-helpers | 3.0.1 | indirect |
| npm | @oxc-project/types | 0.122.0 | indirect |
| npm | @oxc-project/types | 0.133.0 | indirect |
| npm | @package-json/types | 0.0.12 | indirect |
| npm | @pkgr/core | 0.3.6 | indirect |
| npm | @polymer/iron-list | 3.0.2 | indirect |
| npm | @polymer/polymer | 3.5.2 | indirect |
| npm | @preact/signals-core | 1.14.0 | indirect |
| npm | @preact/signals-react | 3.10.0 | indirect |
| npm | @preact/signals-react | 3.12.0 | indirect |
| npm | @preact/signals-react-transform | 0.8.1 | indirect |
| npm | @preact/signals-react-transform | 0.8.2 | indirect |
| npm | @puppeteer/browsers | 2.13.2 | indirect |
| npm | @rolldown/binding-android-arm64 | 1.0.0-rc.12 | indirect |
| npm | @rolldown/binding-android-arm64 | 1.0.3 | indirect |
| npm | @rolldown/binding-darwin-arm64 | 1.0.0-rc.12 | indirect |
| npm | @rolldown/binding-darwin-arm64 | 1.0.3 | indirect |
| npm | @rolldown/binding-darwin-x64 | 1.0.0-rc.12 | indirect |
| npm | @rolldown/binding-darwin-x64 | 1.0.3 | indirect |
| npm | @rolldown/binding-freebsd-x64 | 1.0.0-rc.12 | indirect |
| npm | @rolldown/binding-freebsd-x64 | 1.0.3 | indirect |
| npm | @rolldown/binding-linux-arm-gnueabihf | 1.0.0-rc.12 | indirect |
| npm | @rolldown/binding-linux-arm-gnueabihf | 1.0.3 | indirect |
| npm | @rolldown/binding-linux-arm64-gnu | 1.0.0-rc.12 | indirect |
| npm | @rolldown/binding-linux-arm64-gnu | 1.0.3 | indirect |
| npm | @rolldown/binding-linux-arm64-musl | 1.0.0-rc.12 | indirect |
| npm | @rolldown/binding-linux-arm64-musl | 1.0.3 | indirect |
| npm | @rolldown/binding-linux-ppc64-gnu | 1.0.0-rc.12 | indirect |
| npm | @rolldown/binding-linux-ppc64-gnu | 1.0.3 | indirect |
| npm | @rolldown/binding-linux-s390x-gnu | 1.0.0-rc.12 | indirect |
| npm | @rolldown/binding-linux-s390x-gnu | 1.0.3 | indirect |
| npm | @rolldown/binding-linux-x64-gnu | 1.0.0-rc.12 | indirect |
| npm | @rolldown/binding-linux-x64-gnu | 1.0.3 | indirect |
| npm | @rolldown/binding-linux-x64-musl | 1.0.0-rc.12 | indirect |
| npm | @rolldown/binding-linux-x64-musl | 1.0.3 | indirect |
| npm | @rolldown/binding-openharmony-arm64 | 1.0.0-rc.12 | indirect |
| npm | @rolldown/binding-openharmony-arm64 | 1.0.3 | indirect |
| npm | @rolldown/binding-wasm32-wasi | 1.0.0-rc.12 | indirect |
| npm | @rolldown/binding-wasm32-wasi | 1.0.3 | indirect |
| npm | @rolldown/binding-win32-arm64-msvc | 1.0.0-rc.12 | indirect |
| npm | @rolldown/binding-win32-arm64-msvc | 1.0.3 | indirect |
| npm | @rolldown/binding-win32-x64-msvc | 1.0.0-rc.12 | indirect |
| npm | @rolldown/binding-win32-x64-msvc | 1.0.3 | indirect |
| npm | @rolldown/plugin-babel | 0.2.3 | indirect |
| npm | @rolldown/plugin-babel | 0.2.4 | indirect |
| npm | @rolldown/pluginutils | 1.0.0-rc.12 | indirect |
| npm | @rolldown/pluginutils | 1.0.1 | indirect |
| npm | @rollup/plugin-node-resolve | 15.3.1 | indirect |
| npm | @rollup/plugin-replace | 6.0.3 | indirect |
| npm | @rollup/plugin-typescript | ^12.3.0 | indirect |
| npm | @rollup/pluginutils | 5.1.4 | indirect |
| npm | @rollup/pluginutils | 5.4.0 | indirect |
| npm | @rollup/rollup-android-arm-eabi | 4.62.2 | indirect |
| npm | @rollup/rollup-android-arm64 | 4.62.2 | indirect |
| npm | @rollup/rollup-darwin-arm64 | 4.62.2 | indirect |
| npm | @rollup/rollup-darwin-x64 | 4.62.2 | indirect |
| npm | @rollup/rollup-freebsd-arm64 | 4.62.2 | indirect |
| npm | @rollup/rollup-freebsd-x64 | 4.62.2 | indirect |
| npm | @rollup/rollup-linux-arm-gnueabihf | 4.62.2 | indirect |
| npm | @rollup/rollup-linux-arm-musleabihf | 4.62.2 | indirect |
| npm | @rollup/rollup-linux-arm64-gnu | 4.62.2 | indirect |
| npm | @rollup/rollup-linux-arm64-musl | 4.62.2 | indirect |
| npm | @rollup/rollup-linux-loong64-gnu | 4.62.2 | indirect |
| npm | @rollup/rollup-linux-loong64-musl | 4.62.2 | indirect |
| npm | @rollup/rollup-linux-ppc64-gnu | 4.62.2 | indirect |
| npm | @rollup/rollup-linux-ppc64-musl | 4.62.2 | indirect |
| npm | @rollup/rollup-linux-riscv64-gnu | 4.62.2 | indirect |
| npm | @rollup/rollup-linux-riscv64-musl | 4.62.2 | indirect |
| npm | @rollup/rollup-linux-s390x-gnu | 4.62.2 | indirect |
| npm | @rollup/rollup-linux-x64-gnu | 4.62.2 | indirect |
| npm | @rollup/rollup-linux-x64-musl | 4.62.2 | indirect |
| npm | @rollup/rollup-openbsd-x64 | 4.62.2 | indirect |
| npm | @rollup/rollup-openharmony-arm64 | 4.62.2 | indirect |
| npm | @rollup/rollup-win32-arm64-msvc | 4.62.2 | indirect |
| npm | @rollup/rollup-win32-ia32-msvc | 4.62.2 | indirect |
| npm | @rollup/rollup-win32-x64-gnu | 4.62.2 | indirect |
| npm | @rollup/rollup-win32-x64-msvc | 4.62.2 | indirect |
| npm | @sinonjs/commons | 3.0.1 | indirect |
| npm | @sinonjs/fake-timers | 15.4.0 | indirect |
| npm | @sinonjs/samsam | 10.0.2 | indirect |
| npm | @tailwindcss/vite | 4.3.3 | indirect |
| npm | @tootallnate/quickjs-emscripten | 0.23.0 | indirect |
| npm | @tybys/wasm-util | 0.10.1 | indirect |
| npm | @tybys/wasm-util | 0.10.2 | indirect |
| npm | @tybys/wasm-util | 0.10.3 | indirect |
| npm | @tybys/wasm-util | 0.9.0 | indirect |
| npm | @types/accepts | 1.3.7 | indirect |
| npm | @types/babel__code-frame | 7.27.0 | indirect |
| npm | @types/body-parser | 1.19.6 | indirect |
| npm | @types/chai | 4.3.20 | indirect |
| npm | @types/chai | 5.2.3 | indirect |
| npm | @types/chai-dom | 1.11.3 | indirect |
| npm | @types/co-body | 6.1.3 | indirect |
| npm | @types/command-line-args | 5.2.3 | indirect |
| npm | @types/connect | 3.4.38 | indirect |
| npm | @types/content-disposition | 0.5.9 | indirect |
| npm | @types/convert-source-map | 2.0.3 | indirect |
| npm | @types/cookies | 0.9.2 | indirect |
| npm | @types/debounce | 1.2.4 | indirect |
| npm | @types/deep-eql | 4.0.2 | indirect |
| npm | @types/eslint | 9.6.1 | indirect |
| npm | @types/estree | 1.0.9 | indirect |
| npm | @types/express | 5.0.6 | indirect |
| npm | @types/express-serve-static-core | 5.1.1 | indirect |
| npm | @types/http-assert | 1.5.6 | indirect |
| npm | @types/http-errors | 2.0.5 | indirect |
| npm | @types/istanbul-lib-coverage | 2.0.6 | indirect |
| npm | @types/istanbul-lib-report | 3.0.3 | indirect |
| npm | @types/istanbul-reports | 3.0.4 | indirect |
| npm | @types/json-schema | 7.0.15 | indirect |
| npm | @types/keygrip | 1.0.6 | indirect |
| npm | @types/koa | 2.15.2 | indirect |
| npm | @types/koa-compose | 3.2.9 | indirect |
| npm | @types/mocha | 10.0.10 | indirect |
| npm | @types/node | 22.x | indirect |
| npm | @types/node | 26.0.0 | indirect |
| npm | @types/node | 26.1.0 | indirect |
| npm | @types/node | 26.5.0 | indirect |
| npm | @types/node | ^13.7.4 | indirect |
| npm | @types/parse-json | 4.0.2 | indirect |
| npm | @types/parse5 | 6.0.3 | indirect |
| npm | @types/qs | 6.15.1 | indirect |
| npm | @types/range-parser | 1.2.7 | indirect |
| npm | @types/react | 19.2.17 | indirect |
| npm | @types/react | 19.3.0 | indirect |
| npm | @types/react-dom | 19.2.3 | indirect |
| npm | @types/react-dom | 19.3.0 | indirect |
| npm | @types/resolve | 1.20.2 | indirect |
| npm | @types/send | 1.2.1 | indirect |
| npm | @types/serve-static | 2.2.0 | indirect |
| npm | @types/sinon | 21.0.1 | indirect |
| npm | @types/sinon-chai | 3.2.12 | indirect |
| npm | @types/sinonjs__fake-timers | 15.0.1 | indirect |
| npm | @types/trusted-types | 2.0.7 | indirect |
| npm | @types/ws | 7.4.7 | indirect |
| npm | @types/yauzl | 2.10.3 | indirect |
| npm | @typescript-eslint/eslint-plugin | 8.59.1 | indirect |
| npm | @typescript-eslint/parser | 8.59.1 | indirect |
| npm | @typescript-eslint/project-service | 8.59.1 | indirect |
| npm | @typescript-eslint/project-service | 8.61.1 | indirect |
| npm | @typescript-eslint/scope-manager | 8.59.1 | indirect |
| npm | @typescript-eslint/scope-manager | 8.61.1 | indirect |
| npm | @typescript-eslint/tsconfig-utils | 8.59.1 | indirect |
| npm | @typescript-eslint/tsconfig-utils | 8.61.1 | indirect |
| npm | @typescript-eslint/type-utils | 8.59.1 | indirect |
| npm | @typescript-eslint/types | 8.59.1 | indirect |
| npm | @typescript-eslint/types | 8.61.1 | indirect |
| npm | @typescript-eslint/typescript-estree | 8.59.1 | indirect |
| npm | @typescript-eslint/typescript-estree | 8.61.1 | indirect |
| npm | @typescript-eslint/utils | 8.59.1 | indirect |
| npm | @typescript-eslint/utils | 8.61.1 | indirect |
| npm | @typescript-eslint/visitor-keys | 8.59.1 | indirect |
| npm | @typescript-eslint/visitor-keys | 8.61.1 | indirect |
| npm | @unrs/resolver-binding-android-arm-eabi | 1.12.2 | indirect |
| npm | @unrs/resolver-binding-android-arm64 | 1.12.2 | indirect |
| npm | @unrs/resolver-binding-darwin-arm64 | 1.12.2 | indirect |
| npm | @unrs/resolver-binding-darwin-x64 | 1.12.2 | indirect |
| npm | @unrs/resolver-binding-freebsd-x64 | 1.12.2 | indirect |
| npm | @unrs/resolver-binding-linux-arm-gnueabihf | 1.12.2 | indirect |
| npm | @unrs/resolver-binding-linux-arm-musleabihf | 1.12.2 | indirect |
| npm | @unrs/resolver-binding-linux-arm64-gnu | 1.12.2 | indirect |
| npm | @unrs/resolver-binding-linux-arm64-musl | 1.12.2 | indirect |
| npm | @unrs/resolver-binding-linux-loong64-gnu | 1.12.2 | indirect |
| npm | @unrs/resolver-binding-linux-loong64-musl | 1.12.2 | indirect |
| npm | @unrs/resolver-binding-linux-ppc64-gnu | 1.12.2 | indirect |
| npm | @unrs/resolver-binding-linux-riscv64-gnu | 1.12.2 | indirect |
| npm | @unrs/resolver-binding-linux-riscv64-musl | 1.12.2 | indirect |
| npm | @unrs/resolver-binding-linux-s390x-gnu | 1.12.2 | indirect |
| npm | @unrs/resolver-binding-linux-x64-gnu | 1.12.2 | indirect |
| npm | @unrs/resolver-binding-linux-x64-musl | 1.12.2 | indirect |
| npm | @unrs/resolver-binding-openharmony-arm64 | 1.12.2 | indirect |
| npm | @unrs/resolver-binding-wasm32-wasi | 1.12.2 | indirect |
| npm | @unrs/resolver-binding-win32-arm64-msvc | 1.12.2 | indirect |
| npm | @unrs/resolver-binding-win32-ia32-msvc | 1.12.2 | indirect |
| npm | @unrs/resolver-binding-win32-x64-msvc | 1.12.2 | indirect |
| npm | @vaadin/bundles@../vite-test-assets/packages/ | vaadin/bundles | indirect |
| npm | @vaadin/bundles@../vite-test-assets/packages/ | vaadin/bundles-old | indirect |
| npm | @vaadin/component-base | 25.2.9 | indirect |
| npm | @vaadin/hilla-file-router | 24.4.0-alpha2 | indirect |
| npm | @vaadin/hilla-lit-form | 24.4.0-alpha2 | indirect |
| npm | @vaadin/hilla-react-auth | 24.4.0-alpha2 | indirect |
| npm | @vaadin/hilla-react-crud | 24.4.0-alpha2 | indirect |
| npm | @vaadin/hilla-react-form | 24.4.0-alpha2 | indirect |
| npm | @vaadin/overlay | 24.9.5 | indirect |
| npm | @vaadin/router | 2.0.1 | indirect |
| npm | @vaadin/test-package2-outside-npm@../vite-test-assets/packages/ | vaadin/test-package2-outside-npm | indirect |
| npm | @vaadin/testscope-all@../vite-test-assets/packages/ | vaadin/testscope-all | indirect |
| npm | @vaadin/testscope-button@../vite-test-assets/packages/ | vaadin/testscope-button | indirect |
| npm | @vaadin/testscope-map@../vite-test-assets/packages/ | vaadin/testscope-map | indirect |
| npm | @vaadin/vaadin-development-mode-detector | 2.0.7 | indirect |
| npm | @vaadin/vaadin-progress-bar | 1.1.2 | indirect |
| npm | @vaadin/vaadin-themable-mixin | 25.2.9 | indirect |
| npm | @vaadin/vaadin-upload | 4.2.2 | indirect |
| npm | @vaadin/vaadin-usage-statistics | 2.1.3 | indirect |
| npm | @vitejs/plugin-react | 6.0.3 | indirect |
| npm | @vitejs/plugin-react | 6.1.1 | indirect |
| npm | @web/browser-logs | 0.4.1 | indirect |
| npm | @web/config-loader | 0.3.3 | indirect |
| npm | @web/dev-server | 0.4.6 | indirect |
| npm | @web/dev-server | ^0.4.6 | indirect |
| npm | @web/dev-server-core | 0.7.5 | indirect |
| npm | @web/dev-server-core | 1.0.1 | indirect |
| npm | @web/dev-server-esbuild | 2.0.0 | indirect |
| npm | @web/dev-server-esbuild | ^1.0.4 | indirect |
| npm | @web/dev-server-rollup | 0.6.4 | indirect |
| npm | @web/parse5-utils | 2.1.1 | indirect |
| npm | @web/parse5-utils | 3.0.0 | indirect |
| npm | @web/test-runner | 0.20.2 | indirect |
| npm | @web/test-runner-chrome | 0.18.1 | indirect |
| npm | @web/test-runner-commands | 0.9.0 | indirect |
| npm | @web/test-runner-core | 0.13.4 | indirect |
| npm | @web/test-runner-coverage-v8 | 0.8.0 | indirect |
| npm | @web/test-runner-junit-reporter | 0.8.0 | indirect |
| npm | @web/test-runner-mocha | 0.9.0 | indirect |
| npm | @web/test-runner-playwright | 0.11.1 | indirect |
| npm | @webcomponents/shadycss | 1.11.2 | indirect |
| npm | @yarnpkg/lockfile | 1.1.0 | indirect |
| npm | @zkochan/js-yaml | 0.0.7 | indirect |
| npm | accepts | 1.3.8 | indirect |
| npm | acorn-jsx | 5.3.2 | indirect |
| npm | acorn-node | 1.8.2 | indirect |
| npm | address | 2.0.3 | indirect |
| npm | agent-base | 7.1.4 | indirect |
| npm | ajv | 6.15.0 | indirect |
| npm | ajv | 8.12.0 | indirect |
| npm | ansi-colors | 4.1.3 | indirect |
| npm | ansi-escapes | 4.3.2 | indirect |
| npm | ansi-regex | 2.1.1 | indirect |
| npm | ansi-regex | 5.0.1 | indirect |
| npm | ansi-regex | 6.2.2 | indirect |
| npm | ansi-styles | 2.2.1 | indirect |
| npm | ansi-styles | 4.3.0 | indirect |
| npm | ansi-styles | 6.2.3 | indirect |
| npm | argparse | 2.0.1 | indirect |
| npm | aria-query | 5.3.2 | indirect |
| npm | array-back | 3.1.0 | indirect |
| npm | array-back | 6.2.3 | indirect |
| npm | array-buffer-byte-length | 1.0.2 | indirect |
| npm | array-flat-polyfill | 1.0.1 | indirect |
| npm | array-includes | 3.1.9 | indirect |
| npm | array-union | 2.1.0 | indirect |
| npm | array.prototype.findlast | 1.2.5 | indirect |
| npm | array.prototype.flat | 1.3.3 | indirect |
| npm | array.prototype.flatmap | 1.3.3 | indirect |
| npm | array.prototype.tosorted | 1.1.4 | indirect |
| npm | arraybuffer.prototype.slice | 1.0.4 | indirect |
| npm | assertion-error | 2.0.1 | indirect |
| npm | ast-types | 0.13.4 | indirect |
| npm | ast-types-flow | 0.0.8 | indirect |
| npm | astral-regex | 2.0.0 | indirect |
| npm | async | 3.2.6 | indirect |
| npm | async-function | 1.0.0 | indirect |
| npm | asynckit | 0.4.0 | indirect |
| npm | available-typed-arrays | 1.0.7 | indirect |
| npm | axe-core | 4.12.1 | indirect |
| npm | axios | 1.16.0 | indirect |
| npm | axobject-query | 4.1.0 | indirect |
| npm | b4a | 1.8.1 | indirect |
| npm | babel-plugin-const-enum | 1.2.0 | indirect |
| npm | babel-plugin-macros | 3.1.0 | indirect |
| npm | babel-plugin-polyfill-corejs2 | 0.4.17 | indirect |
| npm | babel-plugin-polyfill-corejs3 | 0.13.0 | indirect |
| npm | babel-plugin-polyfill-corejs3 | 0.8.7 | indirect |
| npm | babel-plugin-polyfill-regenerator | 0.5.5 | indirect |
| npm | babel-plugin-polyfill-regenerator | 0.6.8 | indirect |
| npm | babel-plugin-transform-typescript-metadata | 0.3.2 | indirect |
| npm | balanced-match | 1.0.2 | indirect |
| npm | balanced-match | 4.0.3 | indirect |
| npm | balanced-match | 4.0.4 | indirect |
| npm | bare-events | 2.9.1 | indirect |
| npm | bare-fs | 4.7.2 | indirect |
| npm | bare-os | 3.9.1 | indirect |
| npm | bare-path | 3.0.1 | indirect |
| npm | bare-stream | 2.13.3 | indirect |
| npm | bare-url | 2.4.5 | indirect |
| npm | base64-js | 1.5.1 | indirect |
| npm | baseline-browser-mapping | 2.11.20 | indirect |
| npm | baseline-browser-mapping | 2.11.3 | indirect |
| npm | basic-ftp | 5.3.1 | indirect |
| npm | bl | 4.1.0 | indirect |
| npm | brace-expansion | 1.1.18 | indirect |
| npm | brace-expansion | 5.0.5 | indirect |
| npm | brace-expansion | 5.0.6 | indirect |
| npm | brace-expansion | 5.0.9 | indirect |
| npm | braces | 3.0.3 | indirect |
| npm | browser-process-hrtime | 0.1.3 | indirect |
| npm | browserslist | 4.28.7 | indirect |
| npm | browserslist | 4.28.8 | indirect |
| npm | buffer | 5.7.1 | indirect |
| npm | buffer-crc32 | 0.2.13 | indirect |
| npm | buffer-from | 1.1.2 | indirect |
| npm | bundle-name | 4.1.0 | indirect |
| npm | bytes | 3.1.2 | indirect |
| npm | cache-content-type | 1.0.1 | indirect |
| npm | call-bind | 1.0.9 | indirect |
| npm | call-bind-apply-helpers | 1.0.2 | indirect |
| npm | call-bound | 1.0.4 | indirect |
| npm | callsites | 3.1.0 | indirect |
| npm | camelcase | 6.3.0 | indirect |
| npm | caniuse-lite | 1.0.30001806 | indirect |
| npm | caniuse-lite | 1.0.30001810 | indirect |
| npm | chai-a11y-axe | 1.5.0 | indirect |
| npm | chalk | 1.1.3 | indirect |
| npm | chalk | 4.1.2 | indirect |
| npm | chalk-template | 0.4.0 | indirect |
| npm | chokidar | 4.0.3 | indirect |
| npm | chokidar | 5.0.0 | indirect |
| npm | chrome-launcher | 0.15.2 | indirect |
| npm | chromium-bidi | 14.0.0 | indirect |
| npm | cli-cursor | 3.1.0 | indirect |
| npm | cli-spinners | 2.6.1 | indirect |
| npm | cliui | 8.0.1 | indirect |
| npm | cliui | 9.0.1 | indirect |
| npm | clone | 1.0.4 | indirect |
| npm | clone | 2.1.2 | indirect |
| npm | co | 4.6.0 | indirect |
| npm | co-body | 6.2.0 | indirect |
| npm | color-convert | 2.0.1 | indirect |
| npm | color-name | 1.1.4 | indirect |
| npm | columnify | 1.6.0 | indirect |
| npm | combined-stream | 1.0.8 | indirect |
| npm | command-line-args | 5.2.1 | indirect |
| npm | command-line-usage | 7.0.4 | indirect |
| npm | comment-parser | 1.4.7 | indirect |
| npm | concat-map | 0.0.1 | indirect |
| npm | concurrently | 9.2.3 | indirect |
| npm | content-disposition | 0.5.4 | indirect |
| npm | content-type | 1.0.5 | indirect |
| npm | convert-source-map | 1.9.0 | indirect |
| npm | convert-source-map | 2.0.0 | indirect |
| npm | cookie-es | 3.1.1 | indirect |
| npm | cookies | 0.9.1 | indirect |
| npm | copy-to-clipboard | ^3.3.1 | indirect |
| npm | core-js-compat | 3.49.0 | indirect |
| npm | cosmiconfig | 7.1.0 | indirect |
| npm | cross-spawn | 7.0.6 | indirect |
| npm | csstype | 3.2.3 | indirect |
| npm | damerau-levenshtein | 1.0.8 | indirect |
| npm | dash-ast | 1.0.0 | indirect |
| npm | data-uri-to-buffer | 6.0.2 | indirect |
| npm | data-view-buffer | 1.0.2 | indirect |
| npm | data-view-byte-length | 1.0.2 | indirect |
| npm | data-view-byte-offset | 1.0.1 | indirect |
| npm | debounce | 1.2.1 | indirect |
| npm | debug | 2.6.9 | indirect |
| npm | debug | 3.2.7 | indirect |
| npm | debug | 4.4.3 | indirect |
| npm | deep-equal | 1.0.1 | indirect |
| npm | deep-is | 0.1.4 | indirect |
| npm | deepmerge | 4.3.1 | indirect |
| npm | default-browser | 5.5.0 | indirect |
| npm | default-browser-id | 5.0.1 | indirect |
| npm | default-gateway | 6.0.3 | indirect |
| npm | defaults | 1.0.4 | indirect |
| npm | define-data-property | 1.1.4 | indirect |
| npm | define-lazy-prop | 2.0.0 | indirect |
| npm | define-lazy-prop | 3.0.0 | indirect |
| npm | define-properties | 1.2.1 | indirect |
| npm | degenerator | 5.0.1 | indirect |
| npm | delayed-stream | 1.0.0 | indirect |
| npm | delegates | 1.0.0 | indirect |
| npm | depd | 1.1.2 | indirect |
| npm | depd | 2.0.0 | indirect |
| npm | dependency-graph | 0.11.0 | indirect |
| npm | destroy | 1.2.0 | indirect |
| npm | detect-libc | 2.1.2 | indirect |
| npm | detect-port | 2.1.0 | indirect |
| npm | devtools-protocol | 0.0.1608973 | indirect |
| npm | diff | 5.2.2 | indirect |
| npm | diff | 9.0.0 | indirect |
| npm | dir-glob | 3.0.1 | indirect |
| npm | doctrine | 2.1.0 | indirect |
| npm | dotenv | 16.4.7 | indirect |
| npm | dotenv-expand | 12.0.3 | indirect |
| npm | dunder-proto | 1.0.1 | indirect |
| npm | ee-first | 1.1.1 | indirect |
| npm | ejs | 5.0.1 | indirect |
| npm | electron-to-chromium | 1.5.396 | indirect |
| npm | electron-to-chromium | 1.5.418 | indirect |
| npm | emoji-regex | 10.6.0 | indirect |
| npm | emoji-regex | 8.0.0 | indirect |
| npm | emoji-regex | 9.2.2 | indirect |
| npm | encodeurl | 1.0.2 | indirect |
| npm | end-of-stream | 1.4.5 | indirect |
| npm | enforced | 1.2.0 | indirect |
| npm | enquirer | 2.3.6 | indirect |
| npm | error-ex | 1.3.4 | indirect |
| npm | errorstacks | 2.4.2 | indirect |
| npm | es-abstract | 1.24.2 | indirect |
| npm | es-abstract-get | 1.0.0 | indirect |
| npm | es-define-property | 1.0.1 | indirect |
| npm | es-errors | 1.3.0 | indirect |
| npm | es-iterator-helpers | 1.3.3 | indirect |
| npm | es-module-lexer | 1.7.0 | indirect |
| npm | es-object-atoms | 1.1.1 | indirect |
| npm | es-object-atoms | 1.1.2 | indirect |
| npm | es-set-tostringtag | 2.1.0 | indirect |
| npm | es-shim-unscopables | 1.1.0 | indirect |
| npm | es-to-primitive | 1.3.1 | indirect |
| npm | escalade | 3.2.0 | indirect |
| npm | escape-html | 1.0.3 | indirect |
| npm | escape-string-regexp | 1.0.5 | indirect |
| npm | escape-string-regexp | 4.0.0 | indirect |
| npm | escodegen | 2.1.0 | indirect |
| npm | eslint | 9.39.4 | indirect |
| npm | eslint-config-prettier | 10.1.8 | indirect |
| npm | eslint-config-vaadin | 1.0.0-beta.6 | indirect |
| npm | eslint-import-context | 0.1.9 | indirect |
| npm | eslint-import-resolver-typescript | 4.4.4 | indirect |
| npm | eslint-plugin-chai-friendly | 1.2.0 | indirect |
| npm | eslint-plugin-import-x | 4.16.2 | indirect |
| npm | eslint-plugin-jsx-a11y | 6.10.2 | indirect |
| npm | eslint-plugin-lit | 2.2.1 | indirect |
| npm | eslint-plugin-perfectionist | 5.9.0 | indirect |
| npm | eslint-plugin-prettier | 5.5.5 | indirect |
| npm | eslint-plugin-prettier | 5.5.6 | indirect |
| npm | eslint-plugin-react | 7.37.5 | indirect |
| npm | eslint-plugin-react-hooks | 7.1.1 | indirect |
| npm | eslint-plugin-react-perf | 3.3.3 | indirect |
| npm | eslint-plugin-tsdoc | 0.4.0 | indirect |
| npm | eslint-scope | 5.1.1 | indirect |
| npm | eslint-scope | 8.4.0 | indirect |
| npm | eslint-visitor-keys | 2.1.0 | indirect |
| npm | eslint-visitor-keys | 3.4.3 | indirect |
| npm | eslint-visitor-keys | 4.2.1 | indirect |
| npm | eslint-visitor-keys | 5.0.1 | indirect |
| npm | espree | 10.4.0 | indirect |
| npm | esprima | 4.0.1 | indirect |
| npm | esquery | 1.7.0 | indirect |
| npm | esrecurse | 4.3.0 | indirect |
| npm | estraverse | 4.3.0 | indirect |
| npm | estraverse | 5.3.0 | indirect |
| npm | estree-walker | 2.0.2 | indirect |
| npm | esutils | 2.0.3 | indirect |
| npm | etag | 1.8.1 | indirect |
| npm | events-universal | 1.0.1 | indirect |
| npm | execa | 5.1.1 | indirect |
| npm | extract-zip | 2.0.1 | indirect |
| npm | fast-deep-equal | 3.1.3 | indirect |
| npm | fast-diff | 1.3.0 | indirect |
| npm | fast-fifo | 1.3.2 | indirect |
| npm | fast-glob | 3.3.3 | indirect |
| npm | fast-json-stable-stringify | 2.1.0 | indirect |
| npm | fast-levenshtein | 2.0.6 | indirect |
| npm | fastq | 1.20.1 | indirect |
| npm | fd-slicer | 1.1.0 | indirect |
| npm | fdir | 6.5.0 | indirect |
| npm | figures | 3.2.0 | indirect |
| npm | file-entry-cache | 8.0.0 | indirect |
| npm | fill-range | 7.1.1 | indirect |
| npm | find-replace | 3.0.0 | indirect |
| npm | find-up | 5.0.0 | indirect |
| npm | flat | 5.0.2 | indirect |
| npm | flat-cache | 4.0.1 | indirect |
| npm | flatted | 3.4.2 | indirect |
| npm | follow-redirects | 1.16.0 | indirect |
| npm | for-each | 0.3.5 | indirect |
| npm | form-data | 4.0.6 | indirect |
| npm | fresh | 0.5.2 | indirect |
| npm | fs-constants | 1.0.0 | indirect |
| npm | fsevents | 2.3.2 | indirect |
| npm | fsevents | 2.3.3 | indirect |
| npm | function-bind | 1.1.2 | indirect |
| npm | function.prototype.name | 1.2.0 | indirect |
| npm | functions-have-names | 1.2.3 | indirect |
| npm | generator-function | 2.0.1 | indirect |
| npm | gensync | 1.0.0-beta.2 | indirect |
| npm | get-caller-file | 2.0.5 | indirect |
| npm | get-east-asian-width | 1.5.0 | indirect |
| npm | get-intrinsic | 1.3.0 | indirect |
| npm | get-proto | 1.0.1 | indirect |
| npm | get-stream | 5.2.0 | indirect |
| npm | get-stream | 6.0.1 | indirect |
| npm | get-symbol-description | 1.1.0 | indirect |
| npm | get-tsconfig | 4.14.0 | indirect |
| npm | get-uri | 6.0.5 | indirect |
| npm | glob-parent | 5.1.2 | indirect |
| npm | glob-parent | 6.0.2 | indirect |
| npm | globals | 11.12.0 | indirect |
| npm | globals | 14.0.0 | indirect |
| npm | globals | 17.6.0 | indirect |
| npm | globalthis | 1.0.4 | indirect |
| npm | globby | 11.1.0 | indirect |
| npm | gopd | 1.2.0 | indirect |
| npm | graceful-fs | 4.2.11 | indirect |
| npm | has-ansi | 2.0.0 | indirect |
| npm | has-bigints | 1.1.0 | indirect |
| npm | has-flag | 4.0.0 | indirect |
| npm | has-property-descriptors | 1.0.2 | indirect |
| npm | has-proto | 1.2.0 | indirect |
| npm | has-symbols | 1.1.0 | indirect |
| npm | has-tostringtag | 1.0.2 | indirect |
| npm | hasown | 2.0.4 | indirect |
| npm | hermes-estree | 0.25.1 | indirect |
| npm | hermes-parser | 0.25.1 | indirect |
| npm | html-escaper | 2.0.2 | indirect |
| npm | http-assert | 1.5.0 | indirect |
| npm | http-errors | 1.6.3 | indirect |
| npm | http-errors | 1.8.1 | indirect |
| npm | http-errors | 2.0.1 | indirect |
| npm | http-proxy-agent | 7.0.2 | indirect |
| npm | https-proxy-agent | 7.0.6 | indirect |
| npm | human-signals | 2.1.0 | indirect |
| npm | iconv-lite | 0.4.24 | indirect |
| npm | ieee754 | 1.2.1 | indirect |
| npm | ignore | 5.3.2 | indirect |
| npm | ignore | 7.0.5 | indirect |
| npm | ignore | 7.0.6 | indirect |
| npm | import-fresh | 3.3.1 | indirect |
| npm | imurmurhash | 0.1.4 | indirect |
| npm | inflation | 2.1.0 | indirect |
| npm | inherits | 2.0.3 | indirect |
| npm | inherits | 2.0.4 | indirect |
| npm | internal-ip | 6.2.0 | indirect |
| npm | internal-slot | 1.1.0 | indirect |
| npm | ip-address | 10.4.0 | indirect |
| npm | ip-regex | 4.3.0 | indirect |
| npm | ipaddr.js | 1.9.1 | indirect |
| npm | is-array-buffer | 3.0.5 | indirect |
| npm | is-arrayish | 0.2.1 | indirect |
| npm | is-async-function | 2.1.1 | indirect |
| npm | is-bigint | 1.1.0 | indirect |
| npm | is-boolean-object | 1.2.2 | indirect |
| npm | is-buffer | 2.0.5 | indirect |
| npm | is-bun-module | 2.0.0 | indirect |
| npm | is-callable | 1.2.7 | indirect |
| npm | is-core-module | 2.16.2 | indirect |
| npm | is-data-view | 1.0.2 | indirect |
| npm | is-date-object | 1.1.0 | indirect |
| npm | is-docker | 2.2.1 | indirect |
| npm | is-docker | 3.0.0 | indirect |
| npm | is-document.all | 1.0.0 | indirect |
| npm | is-extglob | 2.1.1 | indirect |
| npm | is-finalizationregistry | 1.1.1 | indirect |
| npm | is-fullwidth-code-point | 3.0.0 | indirect |
| npm | is-generator-function | 1.1.2 | indirect |
| npm | is-glob | 4.0.3 | indirect |
| npm | is-in-ssh | 1.0.0 | indirect |
| npm | is-inside-container | 1.0.0 | indirect |
| npm | is-interactive | 1.0.0 | indirect |
| npm | is-ip | 3.1.0 | indirect |
| npm | is-map | 2.0.3 | indirect |
| npm | is-module | 1.0.0 | indirect |
| npm | is-negative-zero | 2.0.3 | indirect |
| npm | is-number | 7.0.0 | indirect |
| npm | is-number-object | 1.1.1 | indirect |
| npm | is-regex | 1.2.1 | indirect |
| npm | is-regexp | 3.1.0 | indirect |
| npm | is-set | 2.0.3 | indirect |
| npm | is-shared-array-buffer | 1.0.4 | indirect |
| npm | is-stream | 2.0.1 | indirect |
| npm | is-string | 1.1.1 | indirect |
| npm | is-symbol | 1.1.1 | indirect |
| npm | is-typed-array | 1.1.15 | indirect |
| npm | is-unicode-supported | 0.1.0 | indirect |
| npm | is-weakmap | 2.0.2 | indirect |
| npm | is-weakref | 1.1.1 | indirect |
| npm | is-weakset | 2.0.4 | indirect |
| npm | is-wsl | 2.2.0 | indirect |
| npm | is-wsl | 3.1.1 | indirect |
| npm | isarray | 2.0.5 | indirect |
| npm | isbinaryfile | 5.0.7 | indirect |
| npm | isexe | 2.0.0 | indirect |
| npm | istanbul-lib-coverage | 3.2.2 | indirect |
| npm | istanbul-lib-report | 3.0.1 | indirect |
| npm | istanbul-reports | 3.2.0 | indirect |
| npm | iterator.prototype | 1.1.5 | indirect |
| npm | jju | 1.4.0 | indirect |
| npm | js-tokens | 4.0.0 | indirect |
| npm | js-yaml | 4.3.2 | indirect |
| npm | jsesc | 0.5.0 | indirect |
| npm | jsesc | 3.0.2 | indirect |
| npm | jsesc | 3.1.0 | indirect |
| npm | json-buffer | 3.0.1 | indirect |
| npm | json-parse-even-better-errors | 2.3.1 | indirect |
| npm | json-schema-traverse | 0.4.1 | indirect |
| npm | json-schema-traverse | 1.0.0 | indirect |
| npm | json-stable-stringify-without-jsonify | 1.0.1 | indirect |
| npm | json5 | 2.2.3 | indirect |
| npm | jsonc-parser | 3.2.0 | indirect |
| npm | jsx-ast-utils | 3.3.5 | indirect |
| npm | keygrip | 1.1.0 | indirect |
| npm | keyv | 4.5.4 | indirect |
| npm | koa | 2.16.4 | indirect |
| npm | koa-compose | 4.1.0 | indirect |
| npm | koa-convert | 2.0.0 | indirect |
| npm | koa-etag | 4.0.0 | indirect |
| npm | koa-send | 5.0.1 | indirect |
| npm | koa-static | 5.0.0 | indirect |
| npm | language-subtag-registry | 0.3.23 | indirect |
| npm | language-tags | 1.0.9 | indirect |
| npm | levn | 0.4.1 | indirect |
| npm | lighthouse-logger | 1.4.2 | indirect |
| npm | lightningcss | 1.32.0 | indirect |
| npm | lightningcss-android-arm64 | 1.32.0 | indirect |
| npm | lightningcss-darwin-arm64 | 1.32.0 | indirect |
| npm | lightningcss-darwin-x64 | 1.32.0 | indirect |
| npm | lightningcss-freebsd-x64 | 1.32.0 | indirect |
| npm | lightningcss-linux-arm-gnueabihf | 1.32.0 | indirect |
| npm | lightningcss-linux-arm64-gnu | 1.32.0 | indirect |
| npm | lightningcss-linux-arm64-musl | 1.32.0 | indirect |
| npm | lightningcss-linux-x64-gnu | 1.32.0 | indirect |
| npm | lightningcss-linux-x64-musl | 1.32.0 | indirect |
| npm | lightningcss-win32-arm64-msvc | 1.32.0 | indirect |
| npm | lightningcss-win32-x64-msvc | 1.32.0 | indirect |
| npm | lines-and-columns | 1.2.4 | indirect |
| npm | lines-and-columns | 2.0.3 | indirect |
| npm | lit-dev-dependency | 1.0.0 | indirect |
| npm | lit-element | 4.2.2 | indirect |
| npm | lit-html | 3.3.3 | indirect |
| npm | locate-path | 6.0.0 | indirect |
| npm | lodash.camelcase | 4.3.0 | indirect |
| npm | lodash.debounce | 4.0.8 | indirect |
| npm | lodash.merge | 4.6.2 | indirect |
| npm | log-symbols | 4.1.0 | indirect |
| npm | log-update | 4.0.0 | indirect |
| npm | loose-envify | 1.4.0 | indirect |
| npm | lru-cache | 5.1.1 | indirect |
| npm | lru-cache | 7.18.3 | indirect |
| npm | lru-cache | 8.0.5 | indirect |
| npm | make-dir | 4.0.0 | indirect |
| npm | marky | 1.3.0 | indirect |
| npm | math-intrinsics | 1.1.0 | indirect |
| npm | media-typer | 0.3.0 | indirect |
| npm | merge-source-map | 1.0.4 | indirect |
| npm | merge-stream | 2.0.0 | indirect |
| npm | merge2 | 1.4.1 | indirect |
| npm | micromatch | 4.0.8 | indirect |
| npm | mime-db | 1.52.0 | indirect |
| npm | mime-types | 2.1.35 | indirect |
| npm | mimic-fn | 2.1.0 | indirect |
| npm | minimatch | 10.2.5 | indirect |
| npm | minimatch | 3.1.5 | indirect |
| npm | minimist | 1.2.8 | indirect |
| npm | mitt | 3.0.1 | indirect |
| npm | mkdirp | 0.5.6 | indirect |
| npm | mkdirp | 1.0.4 | indirect |
| npm | mock-xmlhttprequest | 8.4.1 | indirect |
| npm | ms | 2.0.0 | indirect |
| npm | ms | 2.1.3 | indirect |
| npm | mutexify | 1.4.0 | indirect |
| npm | nanobench | 2.1.1 | indirect |
| npm | nanocolors | 0.2.13 | indirect |
| npm | nanoid | 3.3.14 | indirect |
| npm | nanoid | 3.3.16 | indirect |
| npm | napi-postinstall | 0.3.4 | indirect |
| npm | natural-compare | 1.4.0 | indirect |
| npm | natural-orderby | 5.0.0 | indirect |
| npm | negotiator | 0.6.3 | indirect |
| npm | netmask | 2.1.1 | indirect |
| npm | node-exports-info | 1.6.0 | indirect |
| npm | node-releases | 2.0.51 | indirect |
| npm | node-releases | 2.0.54 | indirect |
| npm | npm-run-path | 4.0.1 | indirect |
| npm | npm-run-path | 6.0.0 | indirect |
| npm | nx | 22.7.6 | indirect |
| npm | object-assign | 4.1.1 | indirect |
| npm | object-inspect | 1.13.4 | indirect |
| npm | object-keys | 1.1.1 | indirect |
| npm | object.assign | 4.1.7 | indirect |
| npm | object.entries | 1.1.9 | indirect |
| npm | object.fromentries | 2.0.8 | indirect |
| npm | object.values | 1.2.1 | indirect |
| npm | on-finished | 2.4.1 | indirect |
| npm | once | 1.4.0 | indirect |
| npm | onetime | 5.1.2 | indirect |
| npm | only | 0.0.2 | indirect |
| npm | open | 11.0.0 | indirect |
| npm | open | 8.4.2 | indirect |
| npm | optionator | 0.9.4 | indirect |
| npm | ora | 5.3.0 | indirect |
| npm | own-keys | 1.0.1 | indirect |
| npm | p-event | 4.2.0 | indirect |
| npm | p-finally | 1.0.0 | indirect |
| npm | p-limit | 3.1.0 | indirect |
| npm | p-locate | 5.0.0 | indirect |
| npm | p-timeout | 3.2.0 | indirect |
| npm | pac-proxy-agent | 7.2.0 | indirect |
| npm | pac-resolver | 7.0.1 | indirect |
| npm | parent-module | 1.0.1 | indirect |
| npm | parse-json | 5.2.0 | indirect |
| npm | parse5 | 6.0.1 | indirect |
| npm | parse5-htmlparser2-tree-adapter | 6.0.1 | indirect |
| npm | parseurl | 1.3.3 | indirect |
| npm | path-exists | 4.0.0 | indirect |
| npm | path-is-absolute | 1.0.1 | indirect |
| npm | path-key | 3.1.1 | indirect |
| npm | path-key | 4.0.0 | indirect |
| npm | path-parse | 1.0.7 | indirect |
| npm | path-type | 4.0.0 | indirect |
| npm | pend | 1.2.0 | indirect |
| npm | picocolors | 1.1.1 | indirect |
| npm | picomatch | 2.3.2 | indirect |
| npm | picomatch | 4.0.2 | indirect |
| npm | picomatch | 4.0.4 | indirect |
| npm | picomatch | 4.0.5 | indirect |
| npm | playwright | 1.61.0 | indirect |
| npm | playwright-core | 1.61.0 | indirect |
| npm | portfinder | 1.0.38 | indirect |
| npm | possible-typed-array-names | 1.1.0 | indirect |
| npm | postcss | 8.5.16 | indirect |
| npm | powershell-utils | 0.1.0 | indirect |
| npm | prelude-ls | 1.2.1 | indirect |
| npm | prettier-linter-helpers | 1.0.1 | indirect |
| npm | pretty-hrtime | 1.0.3 | indirect |
| npm | progress | 2.0.3 | indirect |
| npm | prop-types | 15.8.1 | indirect |
| npm | proper-lockfile | 4.1.2 | indirect |
| npm | proxy-agent | 6.5.0 | indirect |
| npm | proxy-from-env | 1.1.0 | indirect |
| npm | proxy-from-env | 2.1.0 | indirect |
| npm | pump | 3.0.4 | indirect |
| npm | punycode | 2.3.1 | indirect |
| npm | puppeteer-core | 24.43.1 | indirect |
| npm | qs | 6.15.2 | indirect |
| npm | queue-microtask | 1.2.3 | indirect |
| npm | queue-tick | 1.0.1 | indirect |
| npm | raw-body | 2.5.3 | indirect |
| npm | react | 19.2.7 | indirect |
| npm | react | 19.3.0 | indirect |
| npm | react-dev-dependency | 1.0.0 | indirect |
| npm | react-dom | 19.2.7 | indirect |
| npm | react-dom | 19.3.0 | indirect |
| npm | react-is | 16.13.1 | indirect |
| npm | react-router | 8.3.0 | indirect |
| npm | react-router | 8.3.1 | indirect |
| npm | readable-stream | 3.6.2 | indirect |
| npm | readdirp | 4.1.2 | indirect |
| npm | readdirp | 5.0.0 | indirect |
| npm | reflect.getprototypeof | 1.0.10 | indirect |
| npm | regenerate | 1.4.2 | indirect |
| npm | regenerate-unicode-properties | 10.1.1 | indirect |
| npm | regenerator-transform | 0.15.2 | indirect |
| npm | regexp.prototype.flags | 1.5.4 | indirect |
| npm | regexpu-core | 5.3.2 | indirect |
| npm | regjsparser | 0.9.1 | indirect |
| npm | require-directory | 2.1.1 | indirect |
| npm | require-from-string | 2.0.2 | indirect |
| npm | resolve | 1.22.12 | indirect |
| npm | resolve | 2.0.0-next.7 | indirect |
| npm | resolve-from | 4.0.0 | indirect |
| npm | resolve-path | 1.4.0 | indirect |
| npm | resolve-pkg-maps | 1.0.0 | indirect |
| npm | resolve.exports | 2.0.3 | indirect |
| npm | restore-cursor | 3.1.0 | indirect |
| npm | retry | 0.12.0 | indirect |
| npm | reusify | 1.1.0 | indirect |
| npm | rolldown | 1.0.0-rc.12 | indirect |
| npm | rolldown | 1.0.3 | indirect |
| npm | rollup | 4.62.2 | indirect |
| npm | rollup-plugin-brotli | 3.1.0 | indirect |
| npm | rollup-plugin-visualizer | 7.0.1 | indirect |
| npm | rollup-plugin-visualizer | 7.1.1 | indirect |
| npm | run-applescript | 7.1.0 | indirect |
| npm | run-parallel | 1.2.0 | indirect |
| npm | rxjs | 7.8.2 | indirect |
| npm | safe-array-concat | 1.1.4 | indirect |
| npm | safe-buffer | 5.2.1 | indirect |
| npm | safe-push-apply | 1.0.0 | indirect |
| npm | safe-regex-test | 1.1.0 | indirect |
| npm | safer-buffer | 2.1.2 | indirect |
| npm | scheduler | 0.27.0 | indirect |
| npm | semver | 6.3.1 | indirect |
| npm | semver | 7.7.4 | indirect |
| npm | semver | 7.8.5 | indirect |
| npm | set-function-length | 1.2.2 | indirect |
| npm | set-function-name | 2.0.2 | indirect |
| npm | set-proto | 1.0.0 | indirect |
| npm | setprototypeof | 1.1.0 | indirect |
| npm | setprototypeof | 1.2.0 | indirect |
| npm | shebang-command | 2.0.0 | indirect |
| npm | shebang-regex | 3.0.0 | indirect |
| npm | shell-quote | 1.8.4 | indirect |
| npm | side-channel | 1.1.1 | indirect |
| npm | side-channel-list | 1.0.1 | indirect |
| npm | side-channel-map | 1.0.1 | indirect |
| npm | side-channel-weakmap | 1.0.2 | indirect |
| npm | signal-exit | 3.0.7 | indirect |
| npm | sinon | 22.0.0 | indirect |
| npm | slash | 3.0.0 | indirect |
| npm | slice-ansi | 4.0.0 | indirect |
| npm | smart-buffer | 4.2.0 | indirect |
| npm | smol-toml | 1.6.1 | indirect |
| npm | socks | 2.8.9 | indirect |
| npm | socks-proxy-agent | 8.0.5 | indirect |
| npm | source-map | 0.5.7 | indirect |
| npm | source-map | 0.6.1 | indirect |
| npm | source-map | 0.7.4 | indirect |
| npm | source-map | 0.7.6 | indirect |
| npm | source-map-js | 1.2.1 | indirect |
| npm | source-map-support | 0.5.19 | indirect |
| npm | sourcemap-codec | 1.4.8 | indirect |
| npm | stable-hash-x | 0.2.0 | indirect |
| npm | statuses | 1.5.0 | indirect |
| npm | statuses | 2.0.2 | indirect |
| npm | stop-iteration-iterator | 1.1.0 | indirect |
| npm | streamx | 2.28.0 | indirect |
| npm | string-width | 4.2.3 | indirect |
| npm | string-width | 7.2.0 | indirect |
| npm | string.prototype.includes | 2.0.1 | indirect |
| npm | string.prototype.matchall | 4.0.12 | indirect |
| npm | string.prototype.repeat | 1.0.0 | indirect |
| npm | string.prototype.trim | 1.2.11 | indirect |
| npm | string.prototype.trimend | 1.0.10 | indirect |
| npm | string.prototype.trimstart | 1.0.8 | indirect |
| npm | string_decoder | 1.3.0 | indirect |
| npm | strip-ansi | 3.0.1 | indirect |
| npm | strip-ansi | 6.0.1 | indirect |
| npm | strip-ansi | 7.2.0 | indirect |
| npm | strip-bom | 3.0.0 | indirect |
| npm | strip-css-comments | 5.0.0 | indirect |
| npm | strip-final-newline | 2.0.0 | indirect |
| npm | strip-json-comments | 3.1.1 | indirect |
| npm | supports-color | 2.0.0 | indirect |
| npm | supports-color | 7.2.0 | indirect |
| npm | supports-color | 8.1.1 | indirect |
| npm | supports-preserve-symlinks-flag | 1.0.0 | indirect |
| npm | synckit | 0.11.13 | indirect |
| npm | table-layout | 4.1.1 | indirect |
| npm | tailwindcss | 4.3.3 | indirect |
| npm | tar-fs | 3.1.2 | indirect |
| npm | tar-stream | 2.2.0 | indirect |
| npm | tar-stream | 3.2.0 | indirect |
| npm | teex | 1.0.1 | indirect |
| npm | text-decoder | 1.2.7 | indirect |
| npm | tiny-invariant | 1.3.3 | indirect |
| npm | tinyglobby | 0.2.17 | indirect |
| npm | tmp | 0.2.7 | indirect |
| npm | to-regex-range | 5.0.1 | indirect |
| npm | toidentifier | 1.0.1 | indirect |
| npm | tr46 | 5.1.1 | indirect |
| npm | transform-ast | 2.4.4 | indirect |
| npm | tree-kill | 1.2.2 | indirect |
| npm | ts-api-utils | 2.5.0 | indirect |
| npm | tsconfig-paths | 4.2.0 | indirect |
| npm | tslib | 2.8.1 | indirect |
| npm | tslib | ^2.8.1 | indirect |
| npm | tsscmp | 1.0.6 | indirect |
| npm | type-check | 0.4.0 | indirect |
| npm | type-detect | 4.0.8 | indirect |
| npm | type-detect | 4.1.0 | indirect |
| npm | type-fest | 0.21.3 | indirect |
| npm | type-is | 1.6.18 | indirect |
| npm | typed-array-buffer | 1.0.3 | indirect |
| npm | typed-array-byte-length | 1.0.3 | indirect |
| npm | typed-array-byte-offset | 1.0.4 | indirect |
| npm | typed-array-length | 1.0.8 | indirect |
| npm | typed-query-selector | 2.12.2 | indirect |
| npm | typescript-eslint | 8.59.1 | indirect |
| npm | typical | 4.0.0 | indirect |
| npm | typical | 7.3.0 | indirect |
| npm | ua-parser-js | 1.0.41 | indirect |
| npm | unbox-primitive | 1.1.0 | indirect |
| npm | undici-types | 8.3.0 | indirect |
| npm | unicode-canonical-property-names-ecmascript | 2.0.0 | indirect |
| npm | unicode-match-property-ecmascript | 2.0.0 | indirect |
| npm | unicode-match-property-value-ecmascript | 2.1.0 | indirect |
| npm | unicode-property-aliases-ecmascript | 2.1.0 | indirect |
| npm | unicorn-magic | 0.3.0 | indirect |
| npm | unpipe | 1.0.0 | indirect |
| npm | unrs-resolver | 1.12.2 | indirect |
| npm | update-browserslist-db | 1.2.3 | indirect |
| npm | update-browserslist-db | 1.3.2 | indirect |
| npm | uri-js | 4.4.1 | indirect |
| npm | use-sync-external-store | 1.6.0 | indirect |
| npm | util-deprecate | 1.0.2 | indirect |
| npm | v8-to-istanbul | 9.3.0 | indirect |
| npm | vary | 1.1.2 | indirect |
| npm | vite | 7.3.6 | indirect |
| npm | vite | 8.0.16 | indirect |
| npm | vite | 8.3.0 | indirect |
| npm | vite-plugin-checker | 0.14.4 | indirect |
| npm | vite-plugin-checker | 0.14.5 | indirect |
| npm | wcwidth | 1.0.1 | indirect |
| npm | webdriver-bidi-protocol | 0.4.1 | indirect |
| npm | webidl-conversions | 7.0.0 | indirect |
| npm | whatwg-url | 14.2.0 | indirect |
| npm | which | 2.0.2 | indirect |
| npm | which-boxed-primitive | 1.1.1 | indirect |
| npm | which-builtin-type | 1.2.1 | indirect |
| npm | which-collection | 1.0.2 | indirect |
| npm | which-typed-array | 1.1.22 | indirect |
| npm | word-wrap | 1.2.5 | indirect |
| npm | wordwrapjs | 5.1.1 | indirect |
| npm | workbox-build | 7.4.1 | indirect |
| npm | workbox-core | 7.4.1 | indirect |
| npm | workbox-precaching | 7.4.1 | indirect |
| npm | workbox-routing | 7.4.1 | indirect |
| npm | workbox-strategies | 7.4.1 | indirect |
| npm | wrap-ansi | 6.2.0 | indirect |
| npm | wrap-ansi | 7.0.0 | indirect |
| npm | wrap-ansi | 9.0.2 | indirect |
| npm | wrappy | 1.0.2 | indirect |
| npm | ws | 7.5.11 | indirect |
| npm | ws | 8.21.0 | indirect |
| npm | wsl-utils | 0.3.1 | indirect |
| npm | xml | 1.0.1 | indirect |
| npm | xtend | 4.0.2 | indirect |
| npm | y18n | 5.0.8 | indirect |
| npm | yallist | 3.1.1 | indirect |
| npm | yaml | 1.10.3 | indirect |
| npm | yaml | 2.9.0 | indirect |
| npm | yargs | 17.7.2 | indirect |
| npm | yargs | 17.7.3 | indirect |
| npm | yargs | 18.0.0 | indirect |
| npm | yargs-parser | 21.1.1 | indirect |
| npm | yargs-parser | 22.0.0 | indirect |
| npm | yauzl | 2.10.0 | indirect |
| npm | ylru | 1.4.0 | indirect |
| npm | yocto-queue | 0.1.0 | indirect |
| npm | zod | 3.25.76 | indirect |
| npm | zod | 4.4.3 | indirect |
| npm | zod-validation-error | 4.0.2 | indirect |
Dependency advisories 0
Installing maven:com.vaadin:flow-dnd@25.3.0-beta3 pulls in 13 packages, direct and transitive: 0 carry known advisories, of which 0 are direct dependencies.
No known advisories affect the assessed dependencies.
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
Feedback
Spotted something off in this report, or have thoughts to share? Wrong measurements, missed tooling, ideas, questions — anything is welcome. Every message is read and gets a response.
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v2.10.0, schema v0.34.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — Maven.