sbomtriageExample
Example workspace. A real scan of a polyglot monorepo with 20 real packages across npm, PyPI, Go, Cargo, NuGet and RubyGems, saved on 2026-09-30. It’s read-only, so nothing here changes a real project.Scan your own software

example-monorepo

grade C · last checked 5 days ago · 1 recent history entry
Example report

0 of 19 upgrades done. Together they clear 0 of the 180 findings this plan can fix.

19 of 19
1
djangopypi
3.2.0→5.2.17major
Fix nowclears 37EPSS 73.6%
2
nokogirigem
1.11.0→1.19.4minor
Fix nowclears 33EPSS 51.7%
3
rackgem
2.2.3→2.2.23patch
Fix soonclears 32EPSS 35.4%
4
Newtonsoft.Jsonnuget
12.0.3→13.0.1major
Fix soonclears 1EPSS 32.9%
5
ejsnpm
3.1.6→3.1.10patch
Fix soonclears 2EPSS 32.8%
6
System.Text.Encodings.Webnuget
4.7.1→4.7.2patch
Fix soonclears 1EPSS 30.1%
7
lodashnpm
4.17.15→4.18.0minor
Fix soonclears 4EPSS 21.3%
8
requestspypi
2.19.0→2.33.0minor
Fix soonclears 5EPSS 7.4%
9
pyyamlpypi
5.3.1→5.4minor
Fix soonclears 1EPSS 6.0%
10
jinja2pypi
2.11.2→3.1.6major
Fix soonclears 5EPSS 3.5%
11
urllib3pypi
1.25.8→2.8.0major
Fix soonclears 11EPSS 3.3%
12
wsnpm
7.4.5→7.5.11minor
Fix soonclears 3EPSS 2.8%
13
smallveccargo
1.6.0→1.6.1patch
Fix soonclears 1EPSS 1.7%
14
golang.org/x/textgolang
v0.3.7→v0.39.0minor
Fix soonclears 2EPSS 1.5%
15
github.com/gin-gonic/gingolang
v1.6.3→v1.9.1minor
Fix soonclears 3EPSS 1.3%
16
@babel/traversenpm
7.20.0→7.23.2minor
Fix soonclears 1EPSS 0.5%
17
timecargo
0.1.44→0.2.23minor
Monitorclears 1EPSS 1.6%
18
axiosnpm
0.21.1→1.20.0major
Fix soonclears 24EPSS 8.5%
19
opensslcargo
0.10.38→0.10.80patch
Fix soonclears 13EPSS 0.7%

Read-only example. Scan your software to record completed upgrades.

Marking an upgrade done records the version you applied. If a later advisory raises the recommendation above it, the row comes back marked reopened instead of disappearing, so you can see the earlier upgrade is no longer enough. How the order is decided ↗.