| Name: Node JS |
| Short Name: node |
| URL: https://github.com/nodejs/node |
| Version: 22.11.0 |
| Revision: 4e0f2773ff9465148a654dd0a2c1668104c20fec |
| Update Mechanism: Manual |
| Date: 2024-10-29 |
| License: Unicode-DFS-2016, NAIST-2003, MIT, HPND, BSD-3-Clause, OpenSSL, Zlib, ISC, BSD-2-Clause, Artistic-2.0, ICU, SSLeay |
| License File: LICENSE |
| Security Critical: no |
| Shipped: no |
| |
| Description: |
| Node binaries and NPM modules necessary for buliding Chrome's WebUI. |
| Use update_node_binaries to update Node binaries and update_npm_deps to |
| update NPM dependencies. |
| |
| -------------------- DEPENDENCY DIVIDER -------------------- |
| |
| Name: Mocha |
| Short Name: mocha |
| URL: https://github.com/mochajs/mocha |
| Version: 11.7.5 |
| Revision: 9a6a5db8401dec63ea81093dd862e9e9b13b44d0 |
| Update Mechanism: Manual |
| Date: 2025-11-05 |
| License: MIT |
| License File: node_modules/mocha/LICENSE |
| Security Critical: no |
| Shipped: no |
| |
| Description: |
| Mocha is a simple, flexible JavaScript test framework which can be run in the |
| browser. Small or standalone projects, such as individual web components, can |
| use Mocha to run several lightweight test suites within one browser_test. |
| |
| Local Modifications: |
| (none) |
| |
| -------------------- DEPENDENCY DIVIDER -------------------- |
| |
| Name: Chai Assertion Library |
| Short Name: chai |
| URL: https://github.com/chaijs/chai |
| Version: 6.2.1 |
| Revision: 110a1eab94060fc383b4c46efd0e8ce4f16dc788 |
| Update Mechanism: Manual |
| Date: 2025-11-11 |
| License: MIT |
| License File: node_modules/chai/LICENSE |
| Security Critical: no |
| Shipped: no |
| |
| Description: |
| BDD / TDD assertion framework for node.js and the browser that can be |
| paired with any testing framework. |
| |
| Local Modifications: |
| (none) |
| |
| -------------------- DEPENDENCY DIVIDER -------------------- |
| |
| Name: SVG Optimizer |
| Short Name: svgo |
| URL: https://www.npmjs.com/package/svgo |
| Version: 1.2.0 |
| Date: 2019-02-24 |
| Revision: 0cc1d0a3d6d6ea38eb2f764d17fb097d9ffe6b31 |
| Update Mechanism: Manual |
| License: MIT |
| Security Critical: no |
| Shipped: no |
| License Android Compatible: Yes |
| |
| Description: |
| SVG Optimizer is a Nodejs-based tool for optimizing SVG vector graphics files. |
| |
| Does rewrite .svg files displayed on chrome:// pages. |
| |
| Local Modifications: |
| (none) |
| |
| -------------------- DEPENDENCY DIVIDER -------------------- |
| |
| Name: Typescript Compiler |
| Short Name: typescript |
| URL: https://www.npmjs.com/package/typescript |
| Version: 5.7.2 |
| Update Mechanism: Manual |
| License: Apache-2.0 |
| Security Critical: no |
| Shipped: no |
| |
| Description: |
| TypeScript is a language for application-scale JavaScript. TypeScript adds |
| optional types to JavaScript that support tools for large-scale JavaScript |
| applications for any browser, for any host, on any OS. TypeScript compiles to |
| readable, standards-based JavaScript. |
| |
| The compiler is not shipped with Chrome but code compiled using it is. |
| |
| Local Modifications: |
| See patches/typescript.patch to work-around |
| https://github.com/microsoft/TypeScript/issues/30024 |
| |
| -------------------- DEPENDENCY DIVIDER -------------------- |
| |
| Name: Type Definition for chai.js library |
| Short Name: @types/chai |
| URL: https://www.npmjs.com/package/@types/chai |
| Version: 5.2.3 |
| Update Mechanism: Manual |
| License: MIT |
| Security Critical: no |
| Shipped: no |
| |
| Description: |
| This package contains type definitions for the chai.js library. |
| The types are only used when type checking in Chrome. |
| |
| Local Modifications: |
| Added patch to work around the lack of official TS definitions for v5, see |
| https://github.com/chaijs/chai/issues/1554. |
| |
| -------------------- DEPENDENCY DIVIDER -------------------- |
| |
| Name: Type Definition for D3 library |
| Short Name: @types/d3 |
| URL: https://www.npmjs.com/package/@types/d3 |
| Version: 7.4.0 |
| Update Mechanism: Manual |
| License: MIT |
| Security Critical: no |
| Shipped: no |
| |
| Description: |
| This package contains type definitions for d3 library. |
| |
| The types are only used when type checking in Chrome. |
| |
| Local Modifications: |
| See patches/chromium_d3_types_index.patch, which is used to reduce the types to |
| only the necessary parts of the library. |
| |
| -------------------- DEPENDENCY DIVIDER -------------------- |
| |
| Name: Type Definition for W3C MediaStream Recording |
| Short Name: @types/dom-mediacapture-record |
| URL: https://www.npmjs.com/package/@types/dom-mediacapture-record |
| Version: 1.0.11 |
| Update Mechanism: Manual |
| License: MIT |
| Security Critical: no |
| Shipped: no |
| |
| Description: |
| This package contains type definitions for w3c MediaStream Recording |
| (https://w3c.github.io/mediacapture-record). |
| |
| The types are only used when type checking in Chrome OS. |
| |
| Local Modifications: |
| (none) |
| |
| -------------------- DEPENDENCY DIVIDER -------------------- |
| |
| Name: Type Definition for W3C Image Capture |
| Short Name: @types/w3c-image-capture |
| URL: https://www.npmjs.com/package/@types/w3c-image-capture |
| Version: 1.0.10 |
| Update Mechanism: Manual |
| License: MIT |
| Security Critical: no |
| Shipped: no |
| |
| Description: |
| This package contains type definitions for W3C Image Capture |
| (https://www.w3.org/TR/image-capture/). |
| |
| The types are only used when type checking in Chrome OS. |
| |
| Local Modifications: |
| (none) |
| |
| -------------------- DEPENDENCY DIVIDER -------------------- |
| |
| Name: Type Definition for webrtc |
| Short Name: @types/webrtc |
| URL: https://www.npmjs.com/package/@types/webrtc |
| Version: 0.0.44 |
| Update Mechanism: Manual |
| License: MIT |
| Security Critical: no |
| Shipped: no |
| |
| Description: |
| This package contains type definitions for webrtc (https://webrtc.org/). |
| |
| The types are only used when type checking in Chrome OS. |
| |
| Local Modifications: |
| (none) |
| |
| -------------------- DEPENDENCY DIVIDER -------------------- |
| |
| Name: Type Definition for Google Analytics |
| Short Name: @types/google.analytics |
| URL: https://www.npmjs.com/package/@types/google.analytics |
| Version: 0.0.42 |
| Update Mechanism: Manual |
| License: MIT |
| Security Critical: no |
| Shipped: no |
| |
| Description: |
| This package contains type definitions for Google Analytics (Classic and |
| Universal) |
| (https://developers.google.com/analytics/devguides/collection/gajs/). |
| |
| The types are only used when type checking in Chrome OS. |
| |
| Local Modifications: |
| (none) |
| |
| -------------------- DEPENDENCY DIVIDER -------------------- |
| |
| Name: Type Definition for OffscreenCanvas |
| Short Name: @types/offscreencanvas |
| URL: https://www.npmjs.com/package/@types/offscreencanvas |
| Version: 2019.6.4 |
| Update Mechanism: Manual |
| License: MIT |
| Security Critical: no |
| Shipped: no |
| |
| Description: |
| This package contains type definitions for offscreencanvas-browser |
| (https://html.spec.whatwg.org/multipage/canvas.html#the-offscreencanvas-interface). |
| |
| The types are only used when type checking in Chrome OS. |
| |
| Local Modifications: |
| (none) |
| |
| -------------------- DEPENDENCY DIVIDER -------------------- |
| |
| Name: ESLint JSDoc Plugin |
| Short Name: eslint-plugin-jsdoc |
| URL: https://www.npmjs.com/package/eslint-plugin-jsdoc |
| Version: 50.2.2 |
| Update Mechanism: Manual |
| License: BSD-3-Clause |
| Security Critical: no |
| Shipped: no |
| |
| Description: |
| JSDoc linting rules for ESLint. |
| |
| The ESLint checks are not shipped with Chrome and code are only linted with it. |
| |
| Local Modifications: |
| (none) |
| |
| -------------------- DEPENDENCY DIVIDER -------------------- |
| |
| Name: ESLint Plugin TypeScript |
| Short Name: @typescript-eslint/eslint-plugin |
| URL: https://www.npmjs.com/package/@typescript-eslint/eslint-plugin |
| Version: 8.4.0 |
| Update Mechanism: Manual |
| License: BSD-2-Clause |
| Security Critical: no |
| Shipped: no |
| |
| Description: |
| An ESLint plugin which provides lint rules for TypeScript codebases. |
| |
| The ESLint checks are not shipped with Chrome and code are only linted with it. |
| |
| Local Modifications: |
| (none) |
| |
| -------------------- DEPENDENCY DIVIDER -------------------- |
| |
| Name: TypeScript ESLint Parser |
| Short Name: @typescript-eslint/parser |
| URL: https://www.npmjs.com/package/@typescript-eslint/parser |
| Version: 8.4.0 |
| Update Mechanism: Manual |
| License: BSD-2-Clause |
| Security Critical: no |
| Shipped: no |
| |
| Description: |
| An ESLint parser which leverages TypeScript ESTree to allow for ESLint to lint |
| TypeScript source code. |
| |
| The ESLint checks are not shipped with Chrome and code are only linted with it. |
| |
| Local Modifications: |
| (none) |
| |
| -------------------- DEPENDENCY DIVIDER -------------------- |
| |
| Name: Types for the TypeScript-ESTree AST spec |
| Short Name: @typescript-eslint/parser |
| URL: https://www.npmjs.com/package/@typescript-eslint/types |
| Version: 8.4.0 |
| Update Mechanism: Manual |
| License: MIT |
| Security Critical: no |
| Shipped: no |
| |
| Description: |
| Types for the TypeScript-ESTree AST spec |
| This package exists to help us reduce cycles and provide lighter-weight |
| packages at runtime. |
| |
| The ESLint checks are not shipped with Chrome and code are only linted with it. |
| |
| Local Modifications: |
| (none) |
| |
| -------------------- DEPENDENCY DIVIDER -------------------- |
| |
| Name: TypeScript ESLint Utilities |
| Short Name: @typescript-eslint/utils |
| URL: https://npmjs.com/package/@typescript-eslint/utils |
| Version: 8.4.0 |
| Update Mechanism: Manual |
| License: MIT |
| Security Critical: no |
| Shipped: no |
| |
| Description: |
| Utilities for working with TypeScript + ESLint together. |
| |
| The ESLint checks are not shipped with Chrome and code are only linted with it. |
| |
| Local Modifications: |
| (none) |
| |
| -------------------- DEPENDENCY DIVIDER -------------------- |
| |
| Name: Type Definition for Trusted Types |
| Short Name: @types/trusted-types |
| URL: https://www.npmjs.com/package/@types/trusted-types |
| Version: 2.0.7 |
| Update Mechanism: Manual |
| License: MIT |
| Security Critical: no |
| Shipped: no |
| |
| Description: |
| This package contains type definitions for Web Trusted Types. |
| https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/trusted-types |
| |
| The types are only used when type checking the Web TrustedTypes. |
| |
| Local Modifications: |
| (none) |
| |
| -------------------- DEPENDENCY DIVIDER -------------------- |
| |
| Name: Type Definition for FileSystem API |
| Short Name: @types/filesystem |
| URL: https://www.npmjs.com/package/@types/filesystem |
| Version: 0.0.32 |
| Update Mechanism: Manual |
| License: MIT |
| Security Critical: no |
| Shipped: no |
| |
| Description: |
| This package contains type definitions for Web FileSystem API. |
| https://developer.mozilla.org/en-US/docs/Web/API/FileSystem |
| |
| The types are only used when type checking the Web FileSystem API. |
| |
| Local Modifications: |
| (none) |
| |
| -------------------- DEPENDENCY DIVIDER -------------------- |
| |
| Name: Type Definition for FileWriter API |
| Short Name: @types/filewriter |
| URL: https://www.npmjs.com/package/@types/filewriter |
| Version: 0.0.29 |
| Update Mechanism: Manual |
| License: MIT |
| Security Critical: no |
| Shipped: no |
| |
| Description: |
| This package contains type definitions for Web FileWriter API. This is a |
| dependency for the @types/filesystem. |
| https://developer.mozilla.org/en-US/docs/Web/API/FileSystemFileEntry/createWriter |
| |
| The types are only used when type checking the Web FileWriter API. |
| |
| Local Modifications: |
| (none) |
| |
| -------------------- DEPENDENCY DIVIDER -------------------- |
| |
| Name: Type Definition for WebCodecs |
| Short Name: @types/dom-webcodecs |
| URL: https://www.npmjs.com/package/@types/dom-webcodecs |
| Version: 0.1.13 |
| Update Mechanism: Manual |
| License: MIT |
| Security Critical: no |
| Shipped: no |
| |
| Description: |
| This package contains type definitions for WebCodecs |
| (https://w3c.github.io/webcodecs/). |
| |
| The types are only used when type checking in ChromeOS. |
| |
| Local Modifications: |
| (none) |
| |
| -------------------- DEPENDENCY DIVIDER -------------------- |
| |
| Name: Type Definition for MediaStreamTrack Processing |
| Short Name: @types/dom-mediacapture-transform |
| URL: https://www.npmjs.com/package/@types/dom-mediacapture-transform |
| Version: 0.1.10 |
| Update Mechanism: Manual |
| License: MIT |
| Security Critical: no |
| Shipped: no |
| |
| Description: |
| This package contains type definitions for MediaStreamTrack Insertable Media |
| Processing using Streams (https://w3c.github.io/mediacapture-transform/). |
| |
| The types are only used when type checking in ChromeOS. |
| |
| Local Modifications: |
| (none) |
| |
| -------------------- DEPENDENCY DIVIDER -------------------- |
| |
| Name: Type Definition for Emscripten |
| Short Name: @types/emscripten |
| URL: https://www.npmjs.com/package/@types/emscripten |
| Version: 1.39.6 |
| Update Mechanism: Manual |
| License: MIT |
| Security Critical: no |
| Shipped: no |
| |
| Description: |
| This package contains type definitions for Emscripten (https://emscripten.org). |
| |
| The types are only used when type checking in ChromeOS. |
| |
| Local Modifications: |
| (none) |
| |
| -------------------- DEPENDENCY DIVIDER -------------------- |
| |
| Name: Lit |
| Short Name: lit |
| URL: https://lit.dev |
| Version: 3.2.1 |
| Update Mechanism: Manual |
| License: BSD-3-Clause |
| License File: node_modules/lit/LICENSE |
| Security Critical: no |
| Shipped: yes |
| License Android Compatible: yes |
| |
| Description: |
| A thin library around native web component APIs, to be used in WebUI development |
| as an alternative to Polymer. |
| |
| Local Modifications: |
| - See patches/lit_html.patch, which renames 'lit-html' trusted type policy to |
| 'lit-html-desktop' to workaround the fact that some CrOS-only UIs already use |
| Lit via a different Lit bundle in third_party/material_web_components, which in |
| turn results in an error as follows |
| |
| Uncaught TypeError: Failed to execute 'createPolicy' on |
| 'TrustedTypePolicyFactory': Policy with name "lit-html" already exists." |
| |
| - See patches/lit_reactive_element.patch which restricts the allowed values for |
| PropertyDeclaration 'type' field to be one of |
| [String, Number, Boolean, Array, Object]. |
| |
| -------------------- DEPENDENCY DIVIDER -------------------- |
| |
| Name: Mediapipe Tasks Vision |
| Short Name: @mediapipe/tasks-vision |
| URL: https://www.npmjs.com/package/@mediapipe/tasks-vision |
| Version: 0.10.9 |
| Update Mechanism: Manual |
| License: Apache-2.0 |
| License File: Apache-LICENSE-2.0.txt |
| Security Critical: no |
| Shipped: yes |
| License Android Compatible: Yes |
| |
| Description: |
| This package contains the vision tasks files for Mediapipe on the web. We pull |
| in the following files to run the Face Landmarker API within an accessibility |
| component extension, which is only run on ChromeOS: |
| |
| - vision_wasm_internal.js, used to wrap vision_wasm_internal.wasm (downloaded |
| separately via DLC) |
| - vision_bundle.mjs, used to run the Face Landmarker API and supporting code |
| - vision.d.ts, used during TypeScript compilation |
| |
| -------------------- DEPENDENCY DIVIDER -------------------- |
| |
| Name: Stylistic rules for ESLint, works for both JavaScript and TypeScript. |
| Short Name: @stylistic/eslint-plugin |
| URL: https://www.npmjs.com/package/@stylistic/eslint-plugin |
| Version: 2.8.0 |
| Update Mechanism: Manual |
| License: MIT |
| Security Critical: no |
| Shipped: no |
| |
| Description: |
| Styling rules were deprecated from eslint and typescript-eslint and moved to |
| stylistic. We use styling rules. |
| |
| https://eslint.style/guide/why |
| |
| Local Modifications: |
| (none) |
| |
| -------------------- DEPENDENCY DIVIDER -------------------- |
| |
| Name: An AST-based pattern checker for JavaScript. |
| Short Name: eslint |
| URL: https://www.npmjs.com/package/eslint |
| Version: 9.10.0 |
| Update Mechanism: Manual |
| License: MIT |
| Security Critical: no |
| Shipped: no |
| |
| Description: |
| Linting for JS and TS. |
| |
| Local Modifications: |
| (none) |
| |
| -------------------- DEPENDENCY DIVIDER -------------------- |
| |
| Name: Microsoft Authentication Library for JavaScript (MSAL.js) for Browser-Based Single-Page Applications |
| Short Name: msal-browser |
| URL: https://www.npmjs.com/package/@azure/msal-browser |
| Version: 4.2.1 |
| Update Mechanism: Manual |
| License: MIT |
| License File: node_modules/@azure/msal-browser/LICENSE |
| Security Critical: yes |
| Shipped: yes |
| License Android Compatible: yes |
| |
| Description: |
| Authentication for Microsoft integrations within client-side JS. |
| |
| Local Modifications: |
| (none) |
| |
| -------------------- DEPENDENCY DIVIDER -------------------- |
| |
| Name: ts-proto |
| Short Name: ts-proto |
| URL: https://www.npmjs.com/package/ts-proto |
| Version: 2.7.0 |
| Update Mechanism: Manual |
| License: Apache-2.0 |
| License File: node_modules/ts-proto/LICENSE |
| Security Critical: no |
| Shipped: no |
| License Android Compatible: yes |
| |
| Description: |
| ts-proto generates TypeScript types from protobuf schemas. |
| |
| Local Modifications: |
| Remove unused transitive import of dprint by ts-poet to reduce checkout size. |
| |
| -------------------- DEPENDENCY DIVIDER -------------------- |
| |
| Name: @bufbuild/protobuf |
| Short Name: bufbuild |
| URL: https://www.npmjs.com/package/@bufbuild/protobuf |
| Version: 2.2.5 |
| Update Mechanism: Manual |
| License: Apache-2.0 |
| License File: Apache-LICENSE-2.0.txt |
| Security Critical: no |
| Shipped: yes |
| License Android Compatible: yes |
| |
| Description: |
| This package provides the runtime library used by proto bindings that are generated by ts-proto plugin. |
| |
| Local Modifications: |
| (none) |
| |
| -------------------- DEPENDENCY DIVIDER -------------------- |
| |
| Name: messageformat |
| Short Name: messageformat |
| URL: https://www.npmjs.com/package/messageformat |
| Version: 4.0.0-11 |
| Update Mechanism: Manual |
| License: Apache-2.0 |
| License File: Apache-LICENSE-2.0.txt |
| License Android Compatible: Yes |
| Security Critical: no |
| Shipped: yes |
| |
| Description: |
| Provides a formatter and other tools for Unicode MessageFormat 2.0 (MF2), the |
| new standard for localization developed by the MessageFormat Working Group. |
| |
| Local Modifications: |
| (none) |
| |
| -------------------- DEPENDENCY DIVIDER -------------------- |
| |
| Name: postcss |
| Short Name: postcss |
| URL: https://www.npmjs.com/package/postcss |
| Version: 8.5.3 |
| Update Mechanism: Manual |
| License: MIT |
| License Android Compatible: Yes |
| Security Critical: no |
| Shipped: no |
| |
| Description: |
| PostCSS is a tool for transforming styles with JS plugins, leveraged in the |
| WebUI toolchain to minify CSS. |
| |
| Local Modifications: |
| (none) |
| |
| -------------------- DEPENDENCY DIVIDER -------------------- |
| |
| Name: postcss-minify |
| Short Name: postcss-minify |
| URL: https://www.npmjs.com/package/postcss-minify |
| Version: 1.1.0 |
| Update Mechanism: Manual |
| License: MIT |
| License Android Compatible: Yes |
| Security Critical: no |
| Shipped: no |
| |
| Description: |
| postcss-minify is a plugin for postcss, that removes comments and unnecessary |
| whitespace in CSS files. |
| |
| Local Modifications: |
| (none) |
