Dependency health Explore packages

Explore packages

Find the package you depend on.

Search by name and registry. Open a package for maintenance trends, project details, release and licence history, incident reports and alternatives where available.

Maintenance statusAll assessed packages
Maintenance status
i
Search up to 50 package names separated by commas or semicolons, for example express, ast. Each name is matched separately. Pick registries to narrow it, or leave all ecosystems unchecked and every match is listed — django on npm and on PyPI are two rows. A Go module is its import path, like github.com/gorilla/mux. No match? You can ask for the package to be judged.
Ecosystems1 selected
Ecosystems

None selected includes all ecosystems.

Separate package names with commas. Choose ecosystems in the filter menu, or leave them unchecked to include all. Clear filters

Packages assessed · 300

Packages with a current assessment.

All assessed packages →
PackageStatusHealthSecurity
org.springframework.security:spring-security-aspectsmavenactive85 /100—
org.springframework.security:spring-security-casmavenactive85 /100—
org.springframework.security:spring-security-cas-clientmavenactive68 /100—
org.springframework.security:spring-security-catalinamavenunknown38 /100—
org.springframework.security:spring-security-configmavenactive85 /100—
org.springframework.security:spring-security-coremavenactive85 /100—
org.springframework.security:spring-security-core-tigermavenactive68 /100—
org.springframework.security:spring-security-cryptomavenactive85 /100—
org.springframework.security:spring-security-datamavenactive85 /100—
org.springframework.security:spring-security-jbossmavenunknown38 /100—
org.springframework.security:spring-security-jettymavenunknown38 /100—
org.springframework.security:spring-security-jwtmavenabandoned10 /100—
org.springframework.security:spring-security-kerberos-clientmavenactive85 /100—
org.springframework.security:spring-security-kerberos-coremavenactive85 /100—
org.springframework.security:spring-security-kerberos-testmavenactive85 /100—
org.springframework.security:spring-security-kerberos-webmavenactive85 /100—
org.springframework.security:spring-security-ldapmavenactive85 /100—
org.springframework.security:spring-security-messagingmavenactive85 /100—
org.springframework.security:spring-security-ntlmmavenactive68 /100—
org.springframework.security:spring-security-oauth2-authorization-servermavenactive85 /100—
org.springframework.security:spring-security-oauth2-clientmavenactive85 /100—
org.springframework.security:spring-security-oauth2-coremavenactive85 /100—
org.springframework.security:spring-security-oauth2-josemavenactive85 /100—
org.springframework:beandocmavenunknown38 /100—
org.springframework:spring-agentmavenunknown38 /100—
org.springframework:spring-aopmavenactive97 /100—
org.springframework:spring-asmmavenunknown38 /100—
org.springframework:spring-aspectsmavenactive97 /100—
org.springframework:spring-beandocmavenunknown38 /100—
org.springframework:spring-beansmavenactive97 /100
⚠ Caution
Known vulnerability history

Package identity match only. Installed version and deployment have not been assessed.

CVE-2022-22965 · Spring4Shell ↗
Historical affected branches include 5.3.0–5.3.17 and 5.2.19 and earlier. Exploitability depends on runtime and deployment; consult Spring’s advisory.

View package context →
org.springframework:spring-bindingmavenunknown38 /100—
org.springframework:spring-contextmavenactive97 /100—
org.springframework:spring-context-indexermavenactive97 /100—
org.springframework:spring-context-supportmavenactive97 /100—
org.springframework:spring-coremavenactive97 /100—
org.springframework:spring-core-testmavenactive97 /100—
org.springframework:spring-daomavenunknown38 /100—
org.springframework:spring-expressionmavenactive97 /100—
org.springframework:spring-hibernatemavenunknown38 /100—
org.springframework:spring-hibernate2mavenunknown38 /100—
org.springframework:spring-hibernate3mavenunknown38 /100—
org.springframework:spring-ibatismavenunknown38 /100—
org.springframework:spring-instrumentmavenactive97 /100—
org.springframework:spring-instrument-tomcatmavenactive81 /100—
org.springframework:spring-javaconfigmavendead0 /100—
org.springframework:spring-jcamavenunknown38 /100—
org.springframework:spring-jclmavenactive97 /100—
org.springframework:spring-jdbcmavenactive97 /100—
org.springframework:spring-webfluxmavenactive97 /100
⚠ Caution
Known vulnerability history

Package identity match only. Installed version and deployment have not been assessed.

CVE-2022-22965 · Spring4Shell ↗
Historical affected branches include 5.3.0–5.3.17 and 5.2.19 and earlier. Exploitability depends on runtime and deployment; consult Spring’s advisory.

View package context →
org.springframework:spring-webmvcmavenactive97 /100
⚠ Caution
Known vulnerability history

Package identity match only. Installed version and deployment have not been assessed.

CVE-2022-22965 · Spring4Shell ↗
Historical affected branches include 5.3.0–5.3.17 and 5.2.19 and earlier. Exploitability depends on runtime and deployment; consult Spring’s advisory.

View package context →

Repository trendlines

Historical activity for three widely used projects. Open any package to see its own chart.

Checking several dependencies? Check a project →