Free Engineering Workbench calculator
Dependency health and SBOM
Track how outdated third-party dependencies are, known vulnerabilities, and SBOM coverage.
Cybersecurity & cyber assuranceHow it's worked out
- Libyears per dependency = total libyears ÷ direct dependencies. SBOM coverage = services with SBOM ÷ services
- Counts from software composition analysis
NoteLibyear is the age gap between the version you use and the latest release. Falling behind makes security upgrades bigger and riskier.
Source: Cox et al. (2015), libyear; CISA SBOM guidance; NTIA minimum elements
Need help acting on this number?
VVnT SeQuor's Cybersecurity & Cyber Assurance practice helps teams turn this metric into a plan.