Dependency Analysis
certificates
Direct and transitive dependency freshness, license, and CVE exposure from the latest SBOM.
100%
Freshness
181
Dependencies
0
Outdated
0
Stale
—
Avg Behind
Dependency List
Latest release v0.30.2
| Dependency | Type | Current | Latest | Behind | CVE | License |
|---|---|---|---|---|---|---|
|
actions/checkout
githubactions
|
Direct | de0fac2e4500dabe0009e67214ff5f5447ce83dd | — | — | — | Unknown |
|
cloud.google.com/go
golang
|
Transitive | v0.123.0 | — | — | — | Apache-2.0 |
|
cloud.google.com/go/auth
golang
|
Transitive | v0.20.0 | — | — | — | Unknown |
|
cloud.google.com/go/auth/oauth2adapt
golang
|
Transitive | v0.2.8 | — | — | — | Apache-2.0 |
|
cloud.google.com/go/compute/metadata
golang
|
Transitive | v0.9.0 | — | — | — | Apache-2.0 |
|
cloud.google.com/go/iam
golang
|
Transitive | v1.7.0 | — | — | — | Unknown |
|
cloud.google.com/go/kms
golang
|
Transitive | v1.28.0 | — | — | — | Unknown |
|
cloud.google.com/go/longrunning
golang
|
Direct | v0.12.0 | — | — | — | Unknown |
|
cloud.google.com/go/security
golang
|
Direct | v1.23.0 | — | — | — | Unknown |
|
dario.cat/mergo
golang
|
Transitive | v1.0.2 | — | — | — | BSD-3-Clause |
|
filippo.io/bigmod
golang
|
Transitive | v0.1.0 | — | — | — | Unknown |
|
filippo.io/edwards25519
golang
|
Transitive | v1.2.0 | — | — | — | BSD-3-Clause |
|
github.com/andreasbriese/bbloom
golang
|
Transitive | v0.0.0-20190825152654-46b345b51c96 | — | — | — | CC0-1.0 AND MIT |
|
github.com/aws/aws-sdk-go
golang
|
Transitive | v1.55.7 | — | — | 2 unknown | Apache-2.0 |
|
github.com/aws/aws-sdk-go-v2
golang
|
Transitive | v1.41.6 | — | — | — | Unknown |
|
github.com/aws/aws-sdk-go-v2/config
golang
|
Transitive | v1.32.16 | — | — | — | Apache-2.0 |
|
github.com/aws/aws-sdk-go-v2/credentials
golang
|
Transitive | v1.19.15 | — | — | — | Apache-2.0 |
|
github.com/aws/aws-sdk-go-v2/feature/ec2/imds
golang
|
Transitive | v1.18.22 | — | — | — | Apache-2.0 |
|
github.com/aws/aws-sdk-go-v2/internal/configsources
golang
|
Transitive | v1.4.22 | — | — | — | Apache-2.0 |
|
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2
golang
|
Transitive | v2.7.22 | — | — | — | Apache-2.0 |
|
github.com/aws/aws-sdk-go-v2/internal/v4a
golang
|
Transitive | v1.4.23 | — | — | — | Apache-2.0 |
|
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding
golang
|
Transitive | v1.13.8 | — | — | — | Apache-2.0 |
|
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url
golang
|
Transitive | v1.13.22 | — | — | — | Apache-2.0 |
|
github.com/aws/aws-sdk-go-v2/service/kms
golang
|
Transitive | v1.51.0 | — | — | — | Unknown |
|
github.com/aws/aws-sdk-go-v2/service/signin
golang
|
Transitive | v1.0.10 | — | — | — | Apache-2.0 |
|
github.com/aws/aws-sdk-go-v2/service/sso
golang
|
Transitive | v1.30.16 | — | — | — | Apache-2.0 |
|
github.com/aws/aws-sdk-go-v2/service/ssooidc
golang
|
Transitive | v1.35.20 | — | — | — | Apache-2.0 |
|
github.com/aws/aws-sdk-go-v2/service/sts
golang
|
Transitive | v1.42.0 | — | — | — | Apache-2.0 |
|
github.com/aws/smithy-go
golang
|
Transitive | v1.25.0 | — | — | — | Apache-2.0 |
|
github.com/azure/azure-sdk-for-go/sdk/azcore
golang
|
Transitive | v1.21.1 | — | — | — | LicenseRef-scancode-generic-cla AND MIT |
|
github.com/azure/azure-sdk-for-go/sdk/azidentity
golang
|
Transitive | v1.13.1 | — | — | — | LicenseRef-scancode-generic-cla AND MIT |
|
github.com/azure/azure-sdk-for-go/sdk/internal
golang
|
Transitive | v1.12.0 | — | — | — | LicenseRef-scancode-generic-cla AND MIT |
|
github.com/azure/azure-sdk-for-go/sdk/security/keyvault/azkeys
golang
|
Transitive | v1.4.0 | — | — | — | LicenseRef-scancode-generic-cla AND MIT |
|
github.com/azure/azure-sdk-for-go/sdk/security/keyvault/internal
golang
|
Transitive | v1.2.0 | — | — | — | LicenseRef-scancode-generic-cla AND MIT |
|
github.com/azuread/microsoft-authentication-library-for-go
golang
|
Transitive | v1.6.0 | — | — | — | LicenseRef-scancode-generic-cla AND MIT |
|
github.com/beorn7/perks
golang
|
Transitive | v1.0.1 | — | — | — | MIT |
|
github.com/ccoveille/go-safecast/v2
golang
|
Direct | v2.0.0 | — | — | — | MIT |
|
github.com/cenkalti/backoff/v4
golang
|
Transitive | v4.3.0 | — | — | — | MIT |
|
github.com/cespare/xxhash
golang
|
Transitive | v1.1.0 | — | — | — | MIT |
|
github.com/cespare/xxhash/v2
golang
|
Transitive | v2.3.0 | — | — | — | MIT |
|
github.com/chzyer/readline
golang
|
Transitive | v1.5.1 | — | — | — | MIT |
|
github.com/coreos/go-oidc/v3
golang
|
Direct | v3.18.0 | — | — | — | Unknown |
|
github.com/coreos/go-systemd/v22
golang
|
Direct | v22.7.0 | — | — | — | Apache-2.0 |
|
github.com/cpuguy83/go-md2man/v2
golang
|
Transitive | v2.0.7 | — | — | — | MIT |
|
github.com/davecgh/go-spew
golang
|
Transitive | v1.1.1 | — | — | — | ISC |
|
github.com/dgraph-io/badger
golang
|
Direct | v1.6.2 | — | — | — | Apache-2.0 |
|
github.com/dgraph-io/badger/v2
golang
|
Direct | v2.2007.4 | — | — | — | Apache-2.0 |
|
github.com/dgraph-io/ristretto
golang
|
Transitive | v0.1.0 | — | — | — | Apache-2.0 |
|
github.com/dgryski/go-farm
golang
|
Transitive | v0.0.0-20200201041132-a6ae2369ad13 | — | — | — | MIT |
|
github.com/dustin/go-humanize
golang
|
Transitive | v1.0.1 | — | — | — | MIT |
|
github.com/fatih/color
golang
|
Transitive | v1.18.0 | — | — | — | MIT |
|
github.com/felixge/httpsnoop
golang
|
Transitive | v1.0.4 | — | — | — | MIT |
|
github.com/fxamacker/cbor/v2
golang
|
Direct | v2.9.2 | — | — | — | Unknown |
|
github.com/go-chi/chi/v5
golang
|
Direct | v5.2.5 | — | — | — | MIT |
|
github.com/go-jose/go-jose/v3
golang
|
Direct | v3.0.5 | — | — | — | Unknown |
|
github.com/go-jose/go-jose/v4
golang
|
Transitive | v4.1.4 | — | — | — | Apache-2.0 |
|
github.com/go-logr/logr
golang
|
Transitive | v1.4.3 | — | — | — | Apache-2.0 |
|
github.com/go-logr/stdr
golang
|
Transitive | v1.2.2 | — | — | — | Apache-2.0 |
|
github.com/go-piv/piv-go/v2
golang
|
Transitive | v2.6.0 | — | — | — | Unknown |
|
github.com/go-sql-driver/mysql
golang
|
Transitive | v1.9.3 | — | — | — | MPL-2.0 |
|
github.com/golang-jwt/jwt/v5
golang
|
Transitive | v5.3.0 | — | — | — | MIT |
|
github.com/golang/glog
golang
|
Transitive | v1.2.5 | — | — | — | Apache-2.0 |
|
github.com/golang/protobuf
golang
|
Transitive | v1.5.4 | — | — | — | BSD-3-Clause |
|
github.com/golang/snappy
golang
|
Transitive | v0.0.4 | — | — | — | BSD-3-Clause |
|
github.com/google/btree
golang
|
Transitive | v1.1.2 | — | — | — | Apache-2.0 |
|
github.com/google/certificate-transparency-go
golang
|
Transitive | v1.1.7 | — | — | — | Apache-2.0 |
|
github.com/google/go-cmp
golang
|
Direct | v0.7.0 | — | — | — | BSD-3-Clause |
|
github.com/google/go-tpm
golang
|
Direct | v0.9.8 | — | — | — | Apache-2.0 |
|
github.com/google/go-tpm-tools
golang
|
Transitive | v0.4.8 | — | — | — | Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND LicenseRef-scancode-proprietary-license |
|
github.com/google/go-tspi
golang
|
Transitive | v0.3.0 | — | — | — | Apache-2.0 |
|
github.com/google/s2a-go
golang
|
Transitive | v0.1.9 | — | — | — | Apache-2.0 |
|
github.com/google/uuid
golang
|
Direct | v1.6.0 | — | — | — | BSD-3-Clause |
|
github.com/googleapis/enterprise-certificate-proxy
golang
|
Transitive | v0.3.14 | — | — | — | Apache-2.0 |
|
github.com/googleapis/gax-go/v2
golang
|
Direct | v2.22.0 | — | — | — | Unknown |
|
github.com/hashicorp/errwrap
golang
|
Transitive | v1.1.0 | — | — | — | MPL-2.0 |
|
github.com/hashicorp/go-cleanhttp
golang
|
Transitive | v0.5.2 | — | — | — | MPL-2.0 |
|
github.com/hashicorp/go-hclog
golang
|
Transitive | v1.6.3 | — | — | — | MIT |
|
github.com/hashicorp/go-multierror
golang
|
Transitive | v1.1.1 | — | — | — | MPL-2.0 |
|
github.com/hashicorp/go-retryablehttp
golang
|
Transitive | v0.7.8 | — | — | — | MPL-2.0 |
|
github.com/hashicorp/go-rootcerts
golang
|
Transitive | v1.0.2 | — | — | — | MPL-2.0 |
|
github.com/hashicorp/go-secure-stdlib/awsutil
golang
|
Transitive | v0.3.0 | — | — | — | MPL-2.0 |
|
github.com/hashicorp/go-secure-stdlib/parseutil
golang
|
Transitive | v0.2.0 | — | — | — | MPL-2.0 |
|
github.com/hashicorp/go-secure-stdlib/strutil
golang
|
Transitive | v0.1.2 | — | — | — | MPL-2.0 |
|
github.com/hashicorp/go-sockaddr
golang
|
Transitive | v1.0.7 | — | — | — | MPL-2.0 |
|
github.com/hashicorp/go-uuid
golang
|
Transitive | v1.0.2 | — | — | — | MPL-2.0 |
|
github.com/hashicorp/hcl
golang
|
Transitive | v1.0.1-vault-7 | — | — | — | MPL-2.0 |
|
github.com/hashicorp/vault/api
golang
|
Direct | v1.23.0 | — | — | — | Unknown |
|
github.com/hashicorp/vault/api/auth/approle
golang
|
Direct | v0.12.0 | — | — | — | Unknown |
|
github.com/hashicorp/vault/api/auth/aws
golang
|
Direct | v0.12.0 | — | — | — | Unknown |
|
github.com/hashicorp/vault/api/auth/kubernetes
golang
|
Direct | v0.12.0 | — | — | — | Unknown |
|
github.com/huandu/xstrings
golang
|
Transitive | v1.5.0 | — | — | — | MIT |
|
github.com/jackc/pgpassfile
golang
|
Transitive | v1.0.0 | — | — | — | MIT |
|
github.com/jackc/pgservicefile
golang
|
Transitive | v0.0.0-20240606120523-5a60cdf6a761 | — | — | — | MIT |
|
github.com/jackc/pgx/v5
golang
|
Transitive | v5.9.2 | — | — | — | MIT |
|
github.com/jackc/puddle/v2
golang
|
Transitive | v2.2.2 | — | — | — | MIT |
|
github.com/jmespath/go-jmespath
golang
|
Transitive | v0.4.0 | — | — | — | Apache-2.0 |
|
github.com/klauspost/compress
golang
|
Transitive | v1.18.0 | — | — | — | Apache-2.0 AND BSD-3-Clause AND MIT |
|
github.com/kylelemons/godebug
golang
|
Transitive | v1.1.0 | — | — | — | Apache-2.0 |
|
github.com/manifoldco/promptui
golang
|
Transitive | v0.9.0 | — | — | — | BSD-3-Clause |
|
github.com/masterminds/goutils
golang
|
Transitive | v1.1.1 | — | — | — | Apache-2.0 |
|
github.com/masterminds/semver/v3
golang
|
Transitive | v3.3.1 | — | — | — | MIT |
|
github.com/masterminds/sprig/v3
golang
|
Direct | v3.3.0 | — | — | — | MIT |
|
github.com/mattn/go-colorable
golang
|
Transitive | v0.1.14 | — | — | — | MIT |
|
github.com/mattn/go-isatty
golang
|
Transitive | v0.0.20 | — | — | — | MIT |
|
github.com/mgutz/ansi
golang
|
Transitive | v0.0.0-20200706080929-d51e80ef957d | — | — | — | MIT |
|
github.com/miekg/pkcs11
golang
|
Transitive | v1.1.2 | — | — | — | Unknown |
|
github.com/mitchellh/copystructure
golang
|
Transitive | v1.2.0 | — | — | — | MIT |
|
github.com/mitchellh/go-homedir
golang
|
Transitive | v1.1.0 | — | — | — | MIT |
|
github.com/mitchellh/mapstructure
golang
|
Transitive | v1.5.0 | — | — | — | MIT |
|
github.com/mitchellh/reflectwalk
golang
|
Transitive | v1.0.2 | — | — | — | MIT |
|
github.com/munnerz/goautoneg
golang
|
Transitive | v0.0.0-20191010083416-a7dc8b61c822 | — | — | — | BSD-3-Clause |
|
github.com/newrelic/go-agent/v3
golang
|
Direct | v3.43.1 | — | — | — | Unknown |
|
github.com/peterbourgon/diskv/v3
golang
|
Transitive | v3.0.1 | — | — | — | MIT |
|
github.com/pkg/browser
golang
|
Transitive | v0.0.0-20240102092130-5ac0b6a4141c | — | — | — | BSD-2-Clause |
|
github.com/pkg/errors
golang
|
Direct | v0.9.1 | — | — | — | BSD-2-Clause |
|
github.com/pmezard/go-difflib
golang
|
Transitive | v1.0.0 | — | — | — | BSD-3-Clause |
|
github.com/prometheus/client_golang
golang
|
Direct | v1.23.2 | — | — | — | Apache-2.0 |
|
github.com/prometheus/client_model
golang
|
Transitive | v0.6.2 | — | — | — | Apache-2.0 |
|
github.com/prometheus/common
golang
|
Transitive | v0.67.5 | — | — | — | Apache-2.0 |
|
github.com/prometheus/procfs
golang
|
Transitive | v0.19.2 | — | — | — | Apache-2.0 |
|
github.com/rs/xid
golang
|
Direct | v1.6.0 | — | — | — | MIT |
|
github.com/russross/blackfriday/v2
golang
|
Transitive | v2.1.0 | — | — | — | BSD-2-Clause |
|
github.com/ryanuber/go-glob
golang
|
Transitive | v1.0.0 | — | — | — | MIT |
|
github.com/schollz/jsonstore
golang
|
Transitive | v1.1.0 | — | — | — | MIT |
|
github.com/shopspring/decimal
golang
|
Transitive | v1.4.0 | — | — | — | MIT |
|
github.com/shurcool/sanitized_anchor_name
golang
|
Transitive | v1.0.0 | — | — | — | MIT |
|
github.com/sirupsen/logrus
golang
|
Direct | v1.9.4 | — | — | — | MIT |
|
github.com/slackhq/nebula
golang
|
Direct | v1.10.3 | — | — | — | Unknown |
|
github.com/smallstep/assert
golang
|
Direct | v0.0.0-20200723003110-82e2b9b3b262 | — | — | — | MIT |
|
github.com/smallstep/cli-utils
golang
|
Direct | v0.12.2 | — | — | — | Apache-2.0 |
|
github.com/smallstep/go-attestation
golang
|
Direct | v0.4.4-0.20241119153605-2306d5b464ca | — | — | — | Apache-2.0 |
|
github.com/smallstep/linkedca
golang
|
Direct | v0.25.0 | — | — | — | Apache-2.0 |
|
github.com/smallstep/nosql
golang
|
Direct | v0.8.0 | — | — | — | Unknown |
|
github.com/smallstep/pkcs7
golang
|
Direct | v0.2.1 | — | — | — | MIT |
|
github.com/smallstep/scep
golang
|
Direct | v0.0.0-20250318231241-a25cabb69492 | — | — | — | MIT |
|
github.com/spf13/cast
golang
|
Transitive | v1.7.0 | — | — | — | MIT |
|
github.com/stretchr/testify
golang
|
Direct | v1.11.1 | — | — | — | MIT |
|
github.com/thales-e-security/pool
golang
|
Transitive | v0.0.2 | — | — | — | Apache-2.0 |
|
github.com/thalesignite/crypto11
golang
|
Transitive | v1.2.5 | — | — | — | MIT |
|
github.com/urfave/cli
golang
|
Direct | v1.22.17 | — | — | — | MIT |
|
github.com/x448/float16
golang
|
Transitive | v0.8.4 | — | — | — | MIT |
|
go.etcd.io/bbolt
golang
|
Transitive | v1.4.3 | — | — | — | MIT |
|
go.opentelemetry.io/auto/sdk
golang
|
Transitive | v1.2.1 | — | — | — | Apache-2.0 |
|
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
golang
|
Transitive | v0.67.0 | — | — | — | Unknown |
|
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
golang
|
Transitive | v0.67.0 | — | — | — | Apache-2.0 AND BSD-3-Clause |
|
go.opentelemetry.io/otel
golang
|
Transitive | v1.43.0 | — | — | — | Apache-2.0 AND BSD-3-Clause |
|
go.opentelemetry.io/otel/metric
golang
|
Transitive | v1.43.0 | — | — | — | Apache-2.0 AND BSD-3-Clause |
|
go.opentelemetry.io/otel/trace
golang
|
Transitive | v1.43.0 | — | — | — | Apache-2.0 AND BSD-3-Clause |
|
go.step.sm/crypto
golang
|
Direct | v0.77.9 | — | — | — | Unknown |
|
go.uber.org/mock
golang
|
Direct | v0.6.0 | — | — | — | Apache-2.0 |
|
go.yaml.in/yaml/v2
golang
|
Transitive | v2.4.3 | — | — | — | Apache-2.0 AND MIT |
|
golang.org/x/crypto
golang
|
Direct | v0.50.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/mod
golang
|
Transitive | v0.34.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/net
golang
|
Direct | v0.53.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/oauth2
golang
|
Transitive | v0.36.0 | — | — | — | BSD-3-Clause |
|
golang.org/x/sync
golang
|
Direct | v0.20.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/sys
golang
|
Transitive | v0.43.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/term
golang
|
Transitive | v0.42.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/text
golang
|
Transitive | v0.36.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/time
golang
|
Transitive | v0.15.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/tools
golang
|
Transitive | v0.43.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
google-github-actions/auth
githubactions
|
Direct | 7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 | — | — | — | Unknown |
|
google-github-actions/setup-gcloud
githubactions
|
Direct | aa5489c8933f4cc7a4f7d45035b3b1440c9c10db | — | — | — | Unknown |
|
google.golang.org/api
golang
|
Direct | v0.276.0 | — | — | — | Unknown |
|
google.golang.org/genproto
golang
|
Transitive | v0.0.0-20260319201613-d00831a3d3e7 | — | — | — | Unknown |
|
google.golang.org/genproto/googleapis/api
golang
|
Transitive | v0.0.0-20260401024825-9d38bb4040a9 | — | — | — | Apache-2.0 |
|
google.golang.org/genproto/googleapis/rpc
golang
|
Transitive | v0.0.0-20260401024825-9d38bb4040a9 | — | — | — | Apache-2.0 |
|
google.golang.org/grpc
golang
|
Direct | v1.81.0 | — | — | — | Unknown |
|
google.golang.org/grpc/cmd/protoc-gen-go-grpc
golang
|
Transitive | v1.5.1 | — | — | — | Apache-2.0 |
|
google.golang.org/protobuf
golang
|
Direct | v1.36.11 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
gopkg.in/yaml.v3
golang
|
Transitive | v3.0.1 | — | — | — | Apache-2.0 |
|
smallstep/certificates/.github/workflows/ci.yml
githubactions
|
Direct | master | — | — | — | Unknown |
|
smallstep/workflows/.github/workflows/actionci.yml
githubactions
|
Direct | main | — | — | — | Unknown |
|
smallstep/workflows/.github/workflows/code-scan.yml
githubactions
|
Direct | main | — | — | — | Unknown |
|
smallstep/workflows/.github/workflows/dependabot-auto-merge.yml
githubactions
|
Direct | main | — | — | — | Unknown |
|
smallstep/workflows/.github/workflows/docker-buildx-push.yml
githubactions
|
Direct | main | — | — | — | Unknown |
|
smallstep/workflows/.github/workflows/goCI.yml
githubactions
|
Direct | main | — | — | — | Unknown |
|
smallstep/workflows/.github/workflows/goreleaser.yml
githubactions
|
Direct | main | — | — | — | Unknown |
|
smallstep/workflows/.github/workflows/triage.yml
githubactions
|
Direct | main | — | — | — | Unknown |
|
softprops/action-gh-release
githubactions
|
Direct | b4309332981a82ec1c5618f44dd2e27cc8bfbfda | — | — | — | Unknown |
License Breakdown
Apache-2.0
48
MIT
44
Unknown
38
MPL-2.0
12
BSD-3-Clause
10
BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang
10
LicenseRef-scancode-generic-cla AND MIT
6
Apache-2.0 AND BSD-3-Clause
4
BSD-2-Clause
3
Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND LicenseRef-scancode-proprietary-license
1
Apache-2.0 AND BSD-3-Clause AND MIT
1
Apache-2.0 AND MIT
1
CC0-1.0 AND MIT
1
ISC
1
CVE Severity
critical
0
high
0
medium
0
low
0
unknown
1