Name: Node JS Short Name: node URL: https://github.com/nodejs/node Version: 22.11.0 Revision: 4e0f2773ff9465148a654dd0a2c1668104c20fec Update Mechanism: Manual Date: 2024-10-29 License: Artistic-2.0, BSD-2-Clause, BSD-3-Clause, HPND, ICU, ISC, MIT, NAIST-2003, OpenSSL, SSLeay, Unicode-DFS-2016, Zlib License File: LICENSE Security Critical: no Shipped: no Description: Node binaries and NPM modules necessary for buliding Chrome's WebUI. Use update_node_binaries to update Node binaries and update_npm_deps to update NPM dependencies. -------------------- DEPENDENCY DIVIDER -------------------- Name: Mocha Short Name: mocha URL: https://github.com/mochajs/mocha Version: 11.7.5 Revision: 9a6a5db8401dec63ea81093dd862e9e9b13b44d0 Update Mechanism: Manual Date: 2025-11-05 License: MIT License File: node_modules/mocha/LICENSE Security Critical: no Shipped: no Description: Mocha is a simple, flexible JavaScript test framework which can be run in the browser. Small or standalone projects, such as individual web components, can use Mocha to run several lightweight test suites within one browser_test. Local Modifications: (none) -------------------- DEPENDENCY DIVIDER -------------------- Name: Chai Assertion Library Short Name: chai URL: https://github.com/chaijs/chai Version: 6.2.1 Revision: 110a1eab94060fc383b4c46efd0e8ce4f16dc788 Update Mechanism: Manual Date: 2025-11-11 License: MIT License File: node_modules/chai/LICENSE Security Critical: no Shipped: no Description: BDD / TDD assertion framework for node.js and the browser that can be paired with any testing framework. Local Modifications: (none) -------------------- DEPENDENCY DIVIDER -------------------- Name: SVG Optimizer Short Name: svgo URL: https://www.npmjs.com/package/svgo Version: 1.2.0 Date: 2019-02-24 Revision: 0cc1d0a3d6d6ea38eb2f764d17fb097d9ffe6b31 Update Mechanism: Manual License: MIT License File: node_modules/svgo/LICENSE Security Critical: no Shipped: no License Android Compatible: Yes Description: SVG Optimizer is a Nodejs-based tool for optimizing SVG vector graphics files. Does rewrite .svg files displayed on chrome:// pages. Local Modifications: (none) -------------------- DEPENDENCY DIVIDER -------------------- Name: Typescript Compiler Short Name: typescript URL: https://www.npmjs.com/package/typescript Version: 5.7.2 Update Mechanism: Manual License: Apache-2.0 License File: node_modules/typescript/LICENSE.txt Security Critical: no Shipped: no Description: TypeScript is a language for application-scale JavaScript. TypeScript adds optional types to JavaScript that support tools for large-scale JavaScript applications for any browser, for any host, on any OS. TypeScript compiles to readable, standards-based JavaScript. The compiler is not shipped with Chrome but code compiled using it is. Local Modifications: See patches/typescript.patch to work-around https://github.com/microsoft/TypeScript/issues/30024 -------------------- DEPENDENCY DIVIDER -------------------- Name: Type Definition for chai.js library Short Name: @types/chai URL: https://www.npmjs.com/package/@types/chai Version: 5.2.3 Update Mechanism: Manual License: MIT License File: TYPES_LICENSE Security Critical: no Shipped: no Description: This package contains type definitions for the chai.js library. The types are only used when type checking in Chrome. Local Modifications: Added patch to work around the lack of official TS definitions for v5, see https://github.com/chaijs/chai/issues/1554. -------------------- DEPENDENCY DIVIDER -------------------- Name: Type Definition for D3 library Short Name: @types/d3 URL: https://www.npmjs.com/package/@types/d3 Version: 7.4.0 Update Mechanism: Manual License: MIT License File: TYPES_LICENSE Security Critical: no Shipped: no Description: This package contains type definitions for d3 library. The types are only used when type checking in Chrome. Local Modifications: See patches/chromium_d3_types_index.patch, which is used to reduce the types to only the necessary parts of the library. -------------------- DEPENDENCY DIVIDER -------------------- Name: Type Definition for W3C MediaStream Recording Short Name: @types/dom-mediacapture-record URL: https://www.npmjs.com/package/@types/dom-mediacapture-record Version: 1.0.11 Update Mechanism: Manual License: MIT License File: TYPES_LICENSE Security Critical: no Shipped: no Description: This package contains type definitions for w3c MediaStream Recording (https://w3c.github.io/mediacapture-record). The types are only used when type checking in Chrome OS. Local Modifications: (none) -------------------- DEPENDENCY DIVIDER -------------------- Name: Type Definition for W3C Image Capture Short Name: @types/w3c-image-capture URL: https://www.npmjs.com/package/@types/w3c-image-capture Version: 1.0.10 Update Mechanism: Manual License: MIT License File: TYPES_LICENSE Security Critical: no Shipped: no Description: This package contains type definitions for W3C Image Capture (https://www.w3.org/TR/image-capture/). The types are only used when type checking in Chrome OS. Local Modifications: (none) -------------------- DEPENDENCY DIVIDER -------------------- Name: Type Definition for webrtc Short Name: @types/webrtc URL: https://www.npmjs.com/package/@types/webrtc Version: 0.0.44 Update Mechanism: Manual License: MIT License File: TYPES_LICENSE Security Critical: no Shipped: no Description: This package contains type definitions for webrtc (https://webrtc.org/). The types are only used when type checking in Chrome OS. Local Modifications: (none) -------------------- DEPENDENCY DIVIDER -------------------- Name: Type Definition for Google Analytics Short Name: @types/google.analytics URL: https://www.npmjs.com/package/@types/google.analytics Version: 0.0.42 Update Mechanism: Manual License: MIT License File: TYPES_LICENSE Security Critical: no Shipped: no Description: This package contains type definitions for Google Analytics (Classic and Universal) (https://developers.google.com/analytics/devguides/collection/gajs/). The types are only used when type checking in Chrome OS. Local Modifications: (none) -------------------- DEPENDENCY DIVIDER -------------------- Name: Type Definition for OffscreenCanvas Short Name: @types/offscreencanvas URL: https://www.npmjs.com/package/@types/offscreencanvas Version: 2019.6.4 Update Mechanism: Manual License: MIT License File: TYPES_LICENSE Security Critical: no Shipped: no Description: This package contains type definitions for offscreencanvas-browser (https://html.spec.whatwg.org/multipage/canvas.html#the-offscreencanvas-interface). The types are only used when type checking in Chrome OS. Local Modifications: (none) -------------------- DEPENDENCY DIVIDER -------------------- Name: ESLint Plugin TypeScript Short Name: @typescript-eslint/eslint-plugin URL: https://www.npmjs.com/package/@typescript-eslint/eslint-plugin Version: 8.4.0 Update Mechanism: Manual License: BSD-2-Clause License File: node_modules/@typescript-eslint/eslint-plugin/LICENSE Security Critical: no Shipped: no Description: An ESLint plugin which provides lint rules for TypeScript codebases. The ESLint checks are not shipped with Chrome and code are only linted with it. Local Modifications: (none) -------------------- DEPENDENCY DIVIDER -------------------- Name: TypeScript ESLint Parser Short Name: @typescript-eslint/parser URL: https://www.npmjs.com/package/@typescript-eslint/parser Version: 8.4.0 Update Mechanism: Manual License: BSD-2-Clause License File: node_modules/@typescript-eslint/parser/LICENSE Security Critical: no Shipped: no Description: An ESLint parser which leverages TypeScript ESTree to allow for ESLint to lint TypeScript source code. The ESLint checks are not shipped with Chrome and code are only linted with it. Local Modifications: (none) -------------------- DEPENDENCY DIVIDER -------------------- Name: Types for the TypeScript-ESTree AST spec Short Name: @typescript-eslint/parser URL: https://www.npmjs.com/package/@typescript-eslint/types Version: 8.4.0 Update Mechanism: Manual License: MIT License File: node_modules/@typescript-eslint/types/LICENSE Security Critical: no Shipped: no Description: Types for the TypeScript-ESTree AST spec This package exists to help us reduce cycles and provide lighter-weight packages at runtime. The ESLint checks are not shipped with Chrome and code are only linted with it. Local Modifications: (none) -------------------- DEPENDENCY DIVIDER -------------------- Name: TypeScript ESLint Utilities Short Name: @typescript-eslint/utils URL: https://npmjs.com/package/@typescript-eslint/utils Version: 8.4.0 Update Mechanism: Manual License: MIT License File: node_modules/@typescript-eslint/utils/LICENSE Security Critical: no Shipped: no Description: Utilities for working with TypeScript + ESLint together. The ESLint checks are not shipped with Chrome and code are only linted with it. Local Modifications: (none) -------------------- DEPENDENCY DIVIDER -------------------- Name: Type Definition for Trusted Types Short Name: @types/trusted-types URL: https://www.npmjs.com/package/@types/trusted-types Version: 2.0.7 Update Mechanism: Manual License: MIT License File: TYPES_LICENSE Security Critical: no Shipped: no Description: This package contains type definitions for Web Trusted Types. https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/trusted-types The types are only used when type checking the Web TrustedTypes. Local Modifications: (none) -------------------- DEPENDENCY DIVIDER -------------------- Name: Type Definition for FileSystem API Short Name: @types/filesystem URL: https://www.npmjs.com/package/@types/filesystem Version: 0.0.32 Update Mechanism: Manual License: MIT License File: TYPES_LICENSE Security Critical: no Shipped: no Description: This package contains type definitions for Web FileSystem API. https://developer.mozilla.org/en-US/docs/Web/API/FileSystem The types are only used when type checking the Web FileSystem API. Local Modifications: (none) -------------------- DEPENDENCY DIVIDER -------------------- Name: Type Definition for FileWriter API Short Name: @types/filewriter URL: https://www.npmjs.com/package/@types/filewriter Version: 0.0.29 Update Mechanism: Manual License: MIT License File: TYPES_LICENSE Security Critical: no Shipped: no Description: This package contains type definitions for Web FileWriter API. This is a dependency for the @types/filesystem. https://developer.mozilla.org/en-US/docs/Web/API/FileSystemFileEntry/createWriter The types are only used when type checking the Web FileWriter API. Local Modifications: (none) -------------------- DEPENDENCY DIVIDER -------------------- Name: Type Definition for WebCodecs Short Name: @types/dom-webcodecs URL: https://www.npmjs.com/package/@types/dom-webcodecs Version: 0.1.13 Update Mechanism: Manual License: MIT License File: TYPES_LICENSE Security Critical: no Shipped: no Description: This package contains type definitions for WebCodecs (https://w3c.github.io/webcodecs/). The types are only used when type checking in ChromeOS. Local Modifications: (none) -------------------- DEPENDENCY DIVIDER -------------------- Name: Type Definition for MediaStreamTrack Processing Short Name: @types/dom-mediacapture-transform URL: https://www.npmjs.com/package/@types/dom-mediacapture-transform Version: 0.1.10 Update Mechanism: Manual License: MIT License File: TYPES_LICENSE Security Critical: no Shipped: no Description: This package contains type definitions for MediaStreamTrack Insertable Media Processing using Streams (https://w3c.github.io/mediacapture-transform/). The types are only used when type checking in ChromeOS. Local Modifications: (none) -------------------- DEPENDENCY DIVIDER -------------------- Name: Type Definition for Emscripten Short Name: @types/emscripten URL: https://www.npmjs.com/package/@types/emscripten Version: 1.39.6 Update Mechanism: Manual License: MIT License File: TYPES_LICENSE Security Critical: no Shipped: no Description: This package contains type definitions for Emscripten (https://emscripten.org). The types are only used when type checking in ChromeOS. Local Modifications: (none) -------------------- DEPENDENCY DIVIDER -------------------- Name: Lit Short Name: lit URL: https://lit.dev Version: 3.2.1 Update Mechanism: Manual License: BSD-3-Clause License File: node_modules/lit/LICENSE Security Critical: no Shipped: yes License Android Compatible: yes Description: A thin library around native web component APIs, to be used in WebUI development as an alternative to Polymer. Local Modifications: - See patches/lit_html.patch, which renames 'lit-html' trusted type policy to 'lit-html-desktop' to workaround the fact that some CrOS-only UIs already use Lit via a different Lit bundle in third_party/material_web_components, which in turn results in an error as follows Uncaught TypeError: Failed to execute 'createPolicy' on 'TrustedTypePolicyFactory': Policy with name "lit-html" already exists." - See patches/lit_reactive_element.patch which restricts the allowed values for PropertyDeclaration 'type' field to be one of [String, Number, Boolean, Array, Object]. -------------------- DEPENDENCY DIVIDER -------------------- Name: Mediapipe Tasks Vision Short Name: @mediapipe/tasks-vision URL: https://www.npmjs.com/package/@mediapipe/tasks-vision Version: 0.10.9 Update Mechanism: Manual License: Apache-2.0 License File: Apache-LICENSE-2.0.txt Security Critical: no Shipped: yes License Android Compatible: Yes Description: This package contains the vision tasks files for Mediapipe on the web. We pull in the following files to run the Face Landmarker API within an accessibility component extension, which is only run on ChromeOS: - vision_wasm_internal.js, used to wrap vision_wasm_internal.wasm (downloaded separately via DLC) - vision_bundle.mjs, used to run the Face Landmarker API and supporting code - vision.d.ts, used during TypeScript compilation -------------------- DEPENDENCY DIVIDER -------------------- Name: Stylistic rules for ESLint, works for both JavaScript and TypeScript. Short Name: @stylistic/eslint-plugin URL: https://www.npmjs.com/package/@stylistic/eslint-plugin Version: 2.8.0 Update Mechanism: Manual License: MIT License File: node_modules/@stylistic/eslint-plugin/LICENSE Security Critical: no Shipped: no Description: Styling rules were deprecated from eslint and typescript-eslint and moved to stylistic. We use styling rules. https://eslint.style/guide/why Local Modifications: (none) -------------------- DEPENDENCY DIVIDER -------------------- Name: An AST-based pattern checker for JavaScript. Short Name: eslint URL: https://www.npmjs.com/package/eslint Version: 9.10.0 Update Mechanism: Manual License: MIT License File: node_modules/eslint/LICENSE Security Critical: no Shipped: no Description: Linting for JS and TS. Local Modifications: (none) -------------------- DEPENDENCY DIVIDER -------------------- Name: Microsoft Authentication Library for JavaScript (MSAL.js) for Browser-Based Single-Page Applications Short Name: msal-browser URL: https://www.npmjs.com/package/@azure/msal-browser Version: 4.2.1 Update Mechanism: Manual License: MIT License File: node_modules/@azure/msal-browser/LICENSE Security Critical: yes Shipped: yes License Android Compatible: yes Description: Authentication for Microsoft integrations within client-side JS. Local Modifications: (none) -------------------- DEPENDENCY DIVIDER -------------------- Name: ts-proto Short Name: ts-proto URL: https://www.npmjs.com/package/ts-proto Version: 2.7.0 Update Mechanism: Manual License: Apache-2.0 License File: node_modules/ts-proto/LICENSE Security Critical: no Shipped: no License Android Compatible: yes Description: ts-proto generates TypeScript types from protobuf schemas. Local Modifications: Remove unused transitive import of dprint by ts-poet to reduce checkout size. -------------------- DEPENDENCY DIVIDER -------------------- Name: @bufbuild/protobuf Short Name: bufbuild URL: https://www.npmjs.com/package/@bufbuild/protobuf Version: 2.2.5 Update Mechanism: Manual License: Apache-2.0 License File: Apache-LICENSE-2.0.txt Security Critical: no Shipped: yes License Android Compatible: yes Description: This package provides the runtime library used by proto bindings that are generated by ts-proto plugin. Local Modifications: (none) -------------------- DEPENDENCY DIVIDER -------------------- Name: messageformat Short Name: messageformat URL: https://www.npmjs.com/package/messageformat Version: 4.0.0-11 Update Mechanism: Manual License: Apache-2.0 License File: Apache-LICENSE-2.0.txt License Android Compatible: Yes Security Critical: no Shipped: yes Description: Provides a formatter and other tools for Unicode MessageFormat 2.0 (MF2), the new standard for localization developed by the MessageFormat Working Group. Local Modifications: (none) -------------------- DEPENDENCY DIVIDER -------------------- Name: postcss Short Name: postcss URL: https://www.npmjs.com/package/postcss Version: 8.5.3 Update Mechanism: Manual License: MIT License File: node_modules/postcss/LICENSE License Android Compatible: Yes Security Critical: no Shipped: no Description: PostCSS is a tool for transforming styles with JS plugins, leveraged in the WebUI toolchain to minify CSS. Local Modifications: (none) -------------------- DEPENDENCY DIVIDER -------------------- Name: postcss-minify Short Name: postcss-minify URL: https://www.npmjs.com/package/postcss-minify Version: 1.1.0 Update Mechanism: Manual License: MIT License File: node_modules/postcss-minify/LICENSE License Android Compatible: Yes Security Critical: no Shipped: no Description: postcss-minify is a plugin for postcss, that removes comments and unnecessary whitespace in CSS files. Local Modifications: (none) -------------------- DEPENDENCY DIVIDER -------------------- Name: Stylelint Short Name: stylelint URL: https://www.npmjs.com/package/stylelint Version: 17.0.0 Update Mechanism: Manual License: MIT License File: node_modules/stylelint/LICENSE License Android Compatible: Yes Security Critical: no Shipped: no Description: A mighty CSS linter that helps you avoid errors and enforce conventions. Local Modifications: (none) -------------------- DEPENDENCY DIVIDER -------------------- Name: @stylistic/stylelint-plugin Short Name: @stylistic/stylelint-plugin URL: https://www.npmjs.com/package/@stylistic/stylelint-plugin Version: 5.0.0 Update Mechanism: Manual License: MIT License Android Compatible: Yes Security Critical: no Shipped: no Description: A collection of stylistic rules for Stylelintin in a form of a plugin. Local Modifications: (none)