NPM Audit Report
Generation Date: 6.10.2026 - 19:42:23
Vulnerabilities
Vulnerabilities are known security weaknesses of dependencies and are categorized by severity:
- Critical: Exploitable with severe impact, requiring immediate action.
- High: Significant risk, should be addressed promptly.
- Moderate: Requires specific conditions to exploit, but should still be remediated.
- Low: Minor risk with limited impact.
| Package | Severity | URL | Range | Effects | Fix Available |
|---|---|---|---|---|---|
| maplibre-gl | critical | https://github.com/advisories/GHSA-jrc7-96c5-q579 | <=6.4.0 | - | maplibre-gl@6.12.0 |
| @vue/server-renderer | high | https://github.com/advisories/GHSA-g2v6-rqmx-r4w6 | <=3.5.41 | vue | true |
| @xmldom/xmldom | high | https://github.com/advisories/GHSA-6gmq-8vp8-gcm6 | 0.9.0-beta.1 - 0.9.11 | speech-rule-engine | true |
| nanoid | high | https://github.com/advisories/GHSA-28wg-ghj8-5hjv | <=3.3.17 | - | true |
| postcss | high | https://github.com/advisories/GHSA-qx2v-qp2m-jg93 | <=8.5.22 | - | true |
| preact | high | https://github.com/advisories/GHSA-36hm-qxxp-pg3m | 10.28.0 - 10.28.1 | - | true |
| rollup | high | https://github.com/advisories/GHSA-mw96-cpmx-2vgc | 4.0.0 - 4.58.0 | - | true |
| source-map-js | high | https://github.com/advisories/GHSA-68fv-2mgg-jv7q | 1.0.0 - 1.2.1 | - | true |
| vite | high | https://github.com/advisories/GHSA-4w7w-66w2-5vf9 | <=6.4.2 | vitepress | No |
| vue | high | - | 3.2.13 - 3.5.41 | @vue/server-renderer | true |
| ws | high | https://github.com/advisories/GHSA-58qx-3vcg-4xpx | 8.0.0 - 8.20.1 | - | true |
| echarts | moderate | https://github.com/advisories/GHSA-fgmj-fm8m-jvvx | <6.1.0 | - | echarts@6.1.0 |
| esbuild | moderate | https://github.com/advisories/GHSA-67mh-4wv8-2f99 | <=0.24.2 | vite | No |
| protocol-buffers-schema | moderate | https://github.com/advisories/GHSA-j452-xhg8-qg39 | ❤️.6.1 | - | true |
| speech-rule-engine | moderate | - | 4.1.0-beta.0 - 5.0.0-beta.7 | - | true |
| vitepress | moderate | - | <=1.6.4 | vitepress-plugin-mermaid | No |
| vitepress-plugin-mermaid | moderate | - | * | - | No |
| katex | low | https://github.com/advisories/GHSA-238p-pmpm-9mq7 | 0.11.0 - 0.18.1 | mermaid | mermaid@10.8.0 |
| mermaid | low | - | >=10.9.0-rc.1 | - | mermaid@10.8.0 |
Outdated Dependencies
Regular updates are a core requirement of the EU Cyber Resilience Act (CRA), which mandates timely delivery of security patches. Keeping dependencies current reduces the attack surface and ensures the project benefits from the latest improvements.
| Update Type | Count | Risk |
|---|---|---|
| Major (breaking changes possible) | 7 | Test thoroughly |
| Minor (new features) | 3 | Low risk |
| Patch (bug fixes) | 1 | Safe to update |
| Total outdated | 11 |
Major Updates
Major version changes may include breaking API changes. Review changelogs before updating.
| Package | Current | Wanted | Latest |
|---|---|---|---|
| @journeyapps/wa-sqlite | 1.5.0 | 1.7.2 | 2.0.7 |
| @powersync/web | 1.35.0 | 1.39.1 | 2.4.2 |
| echarts | 5.6.0 | 5.6.0 | 6.1.0 |
| maplibre-gl | 5.15.0 | 5.24.0 | 6.12.0 |
| markdown-it-mathjax3 | 4.3.2 | 4.3.2 | 5.2.0 |
| vue-i18n | 9.14.5 | 9.14.5 | 11.4.2 |
| vuetify | 3.11.4 | 3.13.6 | 4.2.4 |
Minor Updates
Minor updates add new features in a backward-compatible manner.
| Package | Current | Wanted | Latest |
|---|---|---|---|
| @supabase/supabase-js | 2.89.0 | 2.109.0 | 2.109.0 |
| @turf/turf | 7.3.1 | 7.4.0 | 7.4.0 |
| esbuild | 0.27.2 | 0.27.7 | 0.28.2 |
Patch Updates
Patch updates contain bug fixes and are generally safe to apply.
| Package | Current | Wanted | Latest |
|---|---|---|---|
| vite-plugin-vuetify | 2.1.2 | 2.1.3 | 2.1.3 |