acme-shop-api
16 direct dependencies · checked 19 Oct 2026, 13:30 UTC · no lockfile: lowest matching versions (worst case)
At risk
Health score / 100
12 known vulnerabilities (1 critical), 4 deprecated packages, 7 packages with maintenance risk and 6 packages at least one major version behind. Working through the upgrade plan takes an estimated 4.7–7.7 days.
| Package | In use | Latest | Last release | Maint. | Downloads/wk | Scorecard | Risk |
|---|---|---|---|---|---|---|---|
mongoose 4 known vulnerabilities · 3 major versions behind |
6.12.0 | 9.11.2 | Oct 2026 | 3 | 3.8M | 6.6 | Critical |
|
Known vulnerabilities (4)
|
|||||||
left-pad Deprecated by its authors · No release for 8 years |
1.3.0 | 1.3.0 | Apr 2018 | 2 | 1.1M | 3.9 | High |
|
Deprecation notice from the authors use String.prototype.padStart() |
|||||||
lodash 6 known vulnerabilities · Single maintainer |
4.17.15 | 4.18.1 | Apr 2026 | 1 | 95.8M | 7.5 | High |
|
Known vulnerabilities (6)
|
|||||||
node-uuid Deprecated by its authors · No release for 9 years |
1.4.8 | 1.4.8 | Mar 2017 | 2 | 505k | 2.0 | High |
|
Deprecation notice from the authors Use uuid module instead |
|||||||
request 1 known vulnerability · Deprecated by its authors · No release for 6 years |
2.88.2 | 2.88.2 | Feb 2020 | 4 | 7.2M | 3.4 | High |
|
Deprecation notice from the authors request has been deprecated, see https://github.com/request/request/issues/3142 Known vulnerabilities (1)
|
|||||||
eslint Version 8.57.0 is deprecated · 2 major versions behind |
8.57.0 | 10.13.0 | Oct 2026 | 2 | 95.3M | 6.3 | Medium |
|
Deprecation notice from the authors This version is no longer supported. Please see https://eslint.org/version-support for other options. |
|||||||
moment 1 known vulnerability |
2.29.4 | 2.31.0 | Sep 2026 | 6 | 22.8M | 6.1 | Medium |
|
Known vulnerabilities (1)
|
|||||||
dotenv 2 major versions behind |
16.4.5 | 18.0.8 | Oct 2026 | 3 | 112.1M | 4.6 | Low |
jest 1 major version behind |
29.7.0 | 30.5.2 | Sep 2026 | 5 | 26M | — | Low |
jsonwebtoken Single maintainer |
9.0.2 | 9.0.3 | Dec 2025 | 1 | 34.8M | 5.4 | Low |
nodemon Single maintainer |
3.1.0 | 3.1.14 | Feb 2026 | 1 | 7.5M | 4.1 | Low |
typescript 2 major versions behind |
5.4.5 | 7.0.2 | Oct 2026 | 7 | 184M | 8.2 | Low |
zod Single maintainer · 1 major version behind |
3.23.8 | 4.6.7 | Oct 2026 | 1 | 213.5M | 5.1 | Low |
cors No known issues |
2.8.5 | 2.8.6 | Jan 2026 | 3 | 51.8M | 6.4 | Healthy |
express No known issues |
5.1.0 | 5.3.0 | Oct 2026 | 5 | 86.9M | 8.5 | Healthy |
helmet No known issues |
8.0.0 | 8.3.0 | Jul 2026 | 2 | 9.5M | 7.7 | Healthy |