Name: Node JS
Short Name: node
URL: https://github.com/nodejs/node
Version: 22.11.0
Revision: 4e0f2773ff9465148a654dd0a2c1668104c20fec
Update Mechanism: Manual
Date: 2024-10-29
License: Unicode-DFS-2016, NAIST-2003, MIT, HPND, BSD-3-Clause, OpenSSL, Zlib, ISC, BSD-2-Clause, Artistic-2.0, ICU, SSLeay
License File: LICENSE
Security Critical: no
Shipped: no

Description:
Node binaries and NPM modules necessary for buliding Chrome's WebUI.
Use update_node_binaries to update Node binaries and update_npm_deps to
update NPM dependencies.

-------------------- DEPENDENCY DIVIDER --------------------

Name: Mocha
Short Name: mocha
URL: https://github.com/mochajs/mocha
Version: 11.7.5
Revision: 9a6a5db8401dec63ea81093dd862e9e9b13b44d0
Update Mechanism: Manual
Date: 2025-11-05
License: MIT
License File: node_modules/mocha/LICENSE
Security Critical: no
Shipped: no

Description:
Mocha is a simple, flexible JavaScript test framework which can be run in the
browser. Small or standalone projects, such as individual web components, can
use Mocha to run several lightweight test suites within one browser_test.

Local Modifications:
(none)

-------------------- DEPENDENCY DIVIDER --------------------

Name: Chai Assertion Library
Short Name: chai
URL: https://github.com/chaijs/chai
Version: 6.2.1
Revision: 110a1eab94060fc383b4c46efd0e8ce4f16dc788
Update Mechanism: Manual
Date: 2025-11-11
License: MIT
License File: node_modules/chai/LICENSE
Security Critical: no
Shipped: no

Description:
BDD / TDD assertion framework for node.js and the browser that can be
paired with any testing framework.

Local Modifications:
(none)

-------------------- DEPENDENCY DIVIDER --------------------

Name: SVG Optimizer
Short Name: svgo
URL: https://www.npmjs.com/package/svgo
Version: 1.2.0
Date: 2019-02-24
Revision: 0cc1d0a3d6d6ea38eb2f764d17fb097d9ffe6b31
Update Mechanism: Manual
License: MIT
Security Critical: no
Shipped: no
License Android Compatible: Yes

Description:
SVG Optimizer is a Nodejs-based tool for optimizing SVG vector graphics files.

Does rewrite .svg files displayed on chrome:// pages.

Local Modifications:
(none)

-------------------- DEPENDENCY DIVIDER --------------------

Name: Typescript Compiler
Short Name: typescript
URL: https://www.npmjs.com/package/typescript
Version: 5.7.2
Update Mechanism: Manual
License: Apache-2.0
Security Critical: no
Shipped: no

Description:
TypeScript is a language for application-scale JavaScript. TypeScript adds
optional types to JavaScript that support tools for large-scale JavaScript
applications for any browser, for any host, on any OS. TypeScript compiles to
readable, standards-based JavaScript.

The compiler is not shipped with Chrome but code compiled using it is.

Local Modifications:
See patches/typescript.patch to work-around
https://github.com/microsoft/TypeScript/issues/30024

-------------------- DEPENDENCY DIVIDER --------------------

Name: Type Definition for chai.js library
Short Name: @types/chai
URL: https://www.npmjs.com/package/@types/chai
Version: 5.2.3
Update Mechanism: Manual
License: MIT
Security Critical: no
Shipped: no

Description:
This package contains type definitions for the chai.js library.
The types are only used when type checking in Chrome.

Local Modifications:
Added patch to work around the lack of official TS definitions for v5, see
https://github.com/chaijs/chai/issues/1554.

-------------------- DEPENDENCY DIVIDER --------------------

Name: Type Definition for D3 library
Short Name: @types/d3
URL: https://www.npmjs.com/package/@types/d3
Version: 7.4.0
Update Mechanism: Manual
License: MIT
Security Critical: no
Shipped: no

Description:
This package contains type definitions for d3 library.

The types are only used when type checking in Chrome.

Local Modifications:
See patches/chromium_d3_types_index.patch, which is used to reduce the types to
only the necessary parts of the library.

-------------------- DEPENDENCY DIVIDER --------------------

Name: Type Definition for W3C MediaStream Recording
Short Name: @types/dom-mediacapture-record
URL: https://www.npmjs.com/package/@types/dom-mediacapture-record
Version: 1.0.11
Update Mechanism: Manual
License: MIT
Security Critical: no
Shipped: no

Description:
This package contains type definitions for w3c MediaStream Recording
(https://w3c.github.io/mediacapture-record).

The types are only used when type checking in Chrome OS.

Local Modifications:
(none)

-------------------- DEPENDENCY DIVIDER --------------------

Name: Type Definition for W3C Image Capture
Short Name: @types/w3c-image-capture
URL: https://www.npmjs.com/package/@types/w3c-image-capture
Version: 1.0.10
Update Mechanism: Manual
License: MIT
Security Critical: no
Shipped: no

Description:
This package contains type definitions for W3C Image Capture
(https://www.w3.org/TR/image-capture/).

The types are only used when type checking in Chrome OS.

Local Modifications:
(none)

-------------------- DEPENDENCY DIVIDER --------------------

Name: Type Definition for webrtc
Short Name: @types/webrtc
URL: https://www.npmjs.com/package/@types/webrtc
Version: 0.0.44
Update Mechanism: Manual
License: MIT
Security Critical: no
Shipped: no

Description:
This package contains type definitions for webrtc (https://webrtc.org/).

The types are only used when type checking in Chrome OS.

Local Modifications:
(none)

-------------------- DEPENDENCY DIVIDER --------------------

Name: Type Definition for Google Analytics
Short Name: @types/google.analytics
URL: https://www.npmjs.com/package/@types/google.analytics
Version: 0.0.42
Update Mechanism: Manual
License: MIT
Security Critical: no
Shipped: no

Description:
This package contains type definitions for Google Analytics (Classic and
Universal)
(https://developers.google.com/analytics/devguides/collection/gajs/).

The types are only used when type checking in Chrome OS.

Local Modifications:
(none)

-------------------- DEPENDENCY DIVIDER --------------------

Name: Type Definition for OffscreenCanvas
Short Name: @types/offscreencanvas
URL: https://www.npmjs.com/package/@types/offscreencanvas
Version: 2019.6.4
Update Mechanism: Manual
License: MIT
Security Critical: no
Shipped: no

Description:
This package contains type definitions for offscreencanvas-browser
(https://html.spec.whatwg.org/multipage/canvas.html#the-offscreencanvas-interface).

The types are only used when type checking in Chrome OS.

Local Modifications:
(none)

-------------------- DEPENDENCY DIVIDER --------------------

Name: ESLint JSDoc Plugin
Short Name: eslint-plugin-jsdoc
URL: https://www.npmjs.com/package/eslint-plugin-jsdoc
Version: 50.2.2
Update Mechanism: Manual
License: BSD-3-Clause
Security Critical: no
Shipped: no

Description:
JSDoc linting rules for ESLint.

The ESLint checks are not shipped with Chrome and code are only linted with it.

Local Modifications:
(none)

-------------------- DEPENDENCY DIVIDER --------------------

Name: ESLint Plugin TypeScript
Short Name: @typescript-eslint/eslint-plugin
URL: https://www.npmjs.com/package/@typescript-eslint/eslint-plugin
Version: 8.4.0
Update Mechanism: Manual
License: BSD-2-Clause
Security Critical: no
Shipped: no

Description:
An ESLint plugin which provides lint rules for TypeScript codebases.

The ESLint checks are not shipped with Chrome and code are only linted with it.

Local Modifications:
(none)

-------------------- DEPENDENCY DIVIDER --------------------

Name: TypeScript ESLint Parser
Short Name: @typescript-eslint/parser
URL: https://www.npmjs.com/package/@typescript-eslint/parser
Version: 8.4.0
Update Mechanism: Manual
License: BSD-2-Clause
Security Critical: no
Shipped: no

Description:
An ESLint parser which leverages TypeScript ESTree to allow for ESLint to lint
TypeScript source code.

The ESLint checks are not shipped with Chrome and code are only linted with it.

Local Modifications:
(none)

-------------------- DEPENDENCY DIVIDER --------------------

Name: Types for the TypeScript-ESTree AST spec
Short Name: @typescript-eslint/parser
URL: https://www.npmjs.com/package/@typescript-eslint/types
Version: 8.4.0
Update Mechanism: Manual
License: MIT
Security Critical: no
Shipped: no

Description:
Types for the TypeScript-ESTree AST spec
This package exists to help us reduce cycles and provide lighter-weight
packages at runtime.

The ESLint checks are not shipped with Chrome and code are only linted with it.

Local Modifications:
(none)

-------------------- DEPENDENCY DIVIDER --------------------

Name: TypeScript ESLint Utilities
Short Name: @typescript-eslint/utils
URL: https://npmjs.com/package/@typescript-eslint/utils
Version: 8.4.0
Update Mechanism: Manual
License: MIT
Security Critical: no
Shipped: no

Description:
Utilities for working with TypeScript + ESLint together.

The ESLint checks are not shipped with Chrome and code are only linted with it.

Local Modifications:
(none)

-------------------- DEPENDENCY DIVIDER --------------------

Name: Type Definition for Trusted Types
Short Name: @types/trusted-types
URL: https://www.npmjs.com/package/@types/trusted-types
Version: 2.0.7
Update Mechanism: Manual
License: MIT
Security Critical: no
Shipped: no

Description:
This package contains type definitions for Web Trusted Types.
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/trusted-types

The types are only used when type checking the Web TrustedTypes.

Local Modifications:
(none)

-------------------- DEPENDENCY DIVIDER --------------------

Name: Type Definition for FileSystem API
Short Name: @types/filesystem
URL: https://www.npmjs.com/package/@types/filesystem
Version: 0.0.32
Update Mechanism: Manual
License: MIT
Security Critical: no
Shipped: no

Description:
This package contains type definitions for Web FileSystem API.
https://developer.mozilla.org/en-US/docs/Web/API/FileSystem

The types are only used when type checking the Web FileSystem API.

Local Modifications:
(none)

-------------------- DEPENDENCY DIVIDER --------------------

Name: Type Definition for FileWriter API
Short Name: @types/filewriter
URL: https://www.npmjs.com/package/@types/filewriter
Version: 0.0.29
Update Mechanism: Manual
License: MIT
Security Critical: no
Shipped: no

Description:
This package contains type definitions for Web FileWriter API. This is a
dependency for the @types/filesystem.
https://developer.mozilla.org/en-US/docs/Web/API/FileSystemFileEntry/createWriter

The types are only used when type checking the Web FileWriter API.

Local Modifications:
(none)

-------------------- DEPENDENCY DIVIDER --------------------

Name: Type Definition for WebCodecs
Short Name: @types/dom-webcodecs
URL: https://www.npmjs.com/package/@types/dom-webcodecs
Version: 0.1.13
Update Mechanism: Manual
License: MIT
Security Critical: no
Shipped: no

Description:
This package contains type definitions for WebCodecs
(https://w3c.github.io/webcodecs/).

The types are only used when type checking in ChromeOS.

Local Modifications:
(none)

-------------------- DEPENDENCY DIVIDER --------------------

Name: Type Definition for MediaStreamTrack Processing
Short Name: @types/dom-mediacapture-transform
URL: https://www.npmjs.com/package/@types/dom-mediacapture-transform
Version: 0.1.10
Update Mechanism: Manual
License: MIT
Security Critical: no
Shipped: no

Description:
This package contains type definitions for MediaStreamTrack Insertable Media
Processing using Streams (https://w3c.github.io/mediacapture-transform/).

The types are only used when type checking in ChromeOS.

Local Modifications:
(none)

-------------------- DEPENDENCY DIVIDER --------------------

Name: Type Definition for Emscripten
Short Name: @types/emscripten
URL: https://www.npmjs.com/package/@types/emscripten
Version: 1.39.6
Update Mechanism: Manual
License: MIT
Security Critical: no
Shipped: no

Description:
This package contains type definitions for Emscripten (https://emscripten.org).

The types are only used when type checking in ChromeOS.

Local Modifications:
(none)

-------------------- DEPENDENCY DIVIDER --------------------

Name: Lit
Short Name: lit
URL: https://lit.dev
Version: 3.2.1
Update Mechanism: Manual
License: BSD-3-Clause
License File: node_modules/lit/LICENSE
Security Critical: no
Shipped: yes
License Android Compatible: yes

Description:
A thin library around native web component APIs, to be used in WebUI development
as an alternative to Polymer.

Local Modifications:
- See patches/lit_html.patch, which renames 'lit-html' trusted type policy to
  'lit-html-desktop' to workaround the fact that some CrOS-only UIs already use
  Lit via a different Lit bundle in third_party/material_web_components, which in
  turn results in an error as follows

Uncaught TypeError: Failed to execute 'createPolicy' on
'TrustedTypePolicyFactory': Policy with name "lit-html" already exists."

- See patches/lit_reactive_element.patch which restricts the allowed values for
  PropertyDeclaration 'type' field to be one of
  [String, Number, Boolean, Array, Object].

-------------------- DEPENDENCY DIVIDER --------------------

Name: Mediapipe Tasks Vision
Short Name: @mediapipe/tasks-vision
URL: https://www.npmjs.com/package/@mediapipe/tasks-vision
Version: 0.10.9
Update Mechanism: Manual
License: Apache-2.0
License File: Apache-LICENSE-2.0.txt
Security Critical: no
Shipped: yes
License Android Compatible: Yes

Description:
This package contains the vision tasks files for Mediapipe on the web. We pull
in the following files to run the Face Landmarker API within an accessibility
component extension, which is only run on ChromeOS:

- vision_wasm_internal.js, used to wrap vision_wasm_internal.wasm (downloaded
separately via DLC)
- vision_bundle.mjs, used to run the Face Landmarker API and supporting code
- vision.d.ts, used during TypeScript compilation

-------------------- DEPENDENCY DIVIDER --------------------

Name: Stylistic rules for ESLint, works for both JavaScript and TypeScript.
Short Name: @stylistic/eslint-plugin
URL: https://www.npmjs.com/package/@stylistic/eslint-plugin
Version: 2.8.0
Update Mechanism: Manual
License: MIT
Security Critical: no
Shipped: no

Description:
Styling rules were deprecated from eslint and typescript-eslint and moved to
stylistic. We use styling rules.

https://eslint.style/guide/why

Local Modifications:
(none)

-------------------- DEPENDENCY DIVIDER --------------------

Name: An AST-based pattern checker for JavaScript.
Short Name: eslint
URL: https://www.npmjs.com/package/eslint
Version: 9.10.0
Update Mechanism: Manual
License: MIT
Security Critical: no
Shipped: no

Description:
Linting for JS and TS.

Local Modifications:
(none)

-------------------- DEPENDENCY DIVIDER --------------------

Name: Microsoft Authentication Library for JavaScript (MSAL.js) for Browser-Based Single-Page Applications
Short Name: msal-browser
URL: https://www.npmjs.com/package/@azure/msal-browser
Version: 4.2.1
Update Mechanism: Manual
License: MIT
License File: node_modules/@azure/msal-browser/LICENSE
Security Critical: yes
Shipped: yes
License Android Compatible: yes

Description:
Authentication for Microsoft integrations within client-side JS.

Local Modifications:
(none)

-------------------- DEPENDENCY DIVIDER --------------------

Name: ts-proto
Short Name: ts-proto
URL: https://www.npmjs.com/package/ts-proto
Version: 2.7.0
Update Mechanism: Manual
License: Apache-2.0
License File: node_modules/ts-proto/LICENSE
Security Critical: no
Shipped: no
License Android Compatible: yes

Description:
ts-proto generates TypeScript types from protobuf schemas.

Local Modifications:
Remove unused transitive import of dprint by ts-poet to reduce checkout size.

-------------------- DEPENDENCY DIVIDER --------------------

Name: @bufbuild/protobuf
Short Name: bufbuild
URL: https://www.npmjs.com/package/@bufbuild/protobuf
Version: 2.2.5
Update Mechanism: Manual
License: Apache-2.0
License File: Apache-LICENSE-2.0.txt
Security Critical: no
Shipped: yes
License Android Compatible: yes

Description:
This package provides the runtime library used by proto bindings that are generated by ts-proto plugin.

Local Modifications:
(none)

-------------------- DEPENDENCY DIVIDER --------------------

Name: messageformat
Short Name: messageformat
URL: https://www.npmjs.com/package/messageformat
Version: 4.0.0-11
Update Mechanism: Manual
License: Apache-2.0
License File: Apache-LICENSE-2.0.txt
License Android Compatible: Yes
Security Critical: no
Shipped: yes

Description:
Provides a formatter and other tools for Unicode MessageFormat 2.0 (MF2), the
new standard for localization developed by the MessageFormat Working Group.

Local Modifications:
(none)

-------------------- DEPENDENCY DIVIDER --------------------

Name: postcss
Short Name: postcss
URL: https://www.npmjs.com/package/postcss
Version: 8.5.3
Update Mechanism: Manual
License: MIT
License Android Compatible: Yes
Security Critical: no
Shipped: no

Description:
PostCSS is a tool for transforming styles with JS plugins, leveraged in the
WebUI toolchain to minify CSS.

Local Modifications:
(none)

-------------------- DEPENDENCY DIVIDER --------------------

Name: postcss-minify
Short Name: postcss-minify
URL: https://www.npmjs.com/package/postcss-minify
Version: 1.1.0
Update Mechanism: Manual
License: MIT
License Android Compatible: Yes
Security Critical: no
Shipped: no

Description:
postcss-minify is a plugin for postcss, that removes comments and unnecessary
whitespace in CSS files.

Local Modifications:
(none)