Dependency Analysis
cloudflared
Direct and transitive dependency freshness, license, and CVE exposure from the latest SBOM.
95%
Freshness
101
Dependencies
5
Outdated
0
Stale
16.6
Avg Behind
Dependency List
Latest release 2026.3.0
| Dependency | Type | Current | Latest | Behind | CVE | License |
|---|---|---|---|---|---|---|
|
google.golang.org/grpc
golang
|
Transitive | v1.72.2 | — | — | 1 critical | Apache-2.0 |
|
github.com/go-jose/go-jose/v4
golang
|
Direct | v4.1.3 | — | — | 1 high | Apache-2.0 |
|
go.opentelemetry.io/otel
golang
|
Direct | v1.40.0 | — | — | 1 high | Apache-2.0 AND BSD-3-Clause |
|
go.opentelemetry.io/otel/sdk
golang
|
Direct | v1.40.0 | — | — | 1 high | Apache-2.0 AND BSD-3-Clause |
|
pytest
pypi
|
Direct | 7.3.1 | 9.0.3 | 30 behind | 1 medium | MIT |
|
requests
pypi
|
Direct | 2.28.2 | 2.34.2 | 15 behind | 4 medium | Apache-2.0 |
|
golang.org/x/crypto
golang
|
Direct | v0.38.0 | — | — | 3 medium | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
pytest-asyncio
pypi
|
Direct | 0.21.0 | 1.4.0 | 40 behind | — | Apache-2.0 |
|
pyyaml
pypi
|
Direct | 6.0.1 | 6.0.3 | 3 behind | — | MIT |
|
flaky
pypi
|
Direct | 3.7.0 | 3.8.1 | 2 behind | — | Apache-2.0 |
|
actions/checkout
githubactions
|
Direct | 4.*.* | — | — | — | Unknown |
|
actions/setup-go
githubactions
|
Direct | 5.*.* | — | — | — | Unknown |
|
cloudflare
pypi
|
Direct | 2.14.3 | — | — | — | MIT |
|
github.com/beorn7/perks
golang
|
Transitive | v1.0.1 | — | — | — | MIT |
|
github.com/burntsushi/toml
golang
|
Direct | v1.2.0 | — | — | — | MIT |
|
github.com/bytedance/sonic
golang
|
Transitive | v1.12.0 | — | — | — | Apache-2.0 |
|
github.com/cespare/xxhash/v2
golang
|
Transitive | v2.3.0 | — | — | — | MIT |
|
github.com/cloudflare/backoff
golang
|
Direct | v0.0.0-20240920015135-e46b80a3a7d0 | — | — | — | BSD-2-Clause |
|
github.com/coreos/go-oidc/v3
golang
|
Direct | v3.17.0 | — | — | — | Apache-2.0 |
|
github.com/coreos/go-systemd/v22
golang
|
Direct | v22.5.0 | — | — | — | Apache-2.0 |
|
github.com/cpuguy83/go-md2man/v2
golang
|
Direct | v2.0.0 | — | — | — | MIT |
|
github.com/davecgh/go-spew
golang
|
Transitive | v1.1.2-0.20180830191138-d8f796af33cc | — | — | — | ISC |
|
github.com/ebitengine/purego
golang
|
Transitive | v0.10.0 | — | — | — | Apache-2.0 AND BSD-3-Clause |
|
github.com/facebookgo/ensure
golang
|
Direct | v0.0.0-20160127193407-b4ab57deab51 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-facebook-patent-rights-2 |
|
github.com/facebookgo/freeport
golang
|
Direct | v0.0.0-20150612182905-d4adf43b75b9 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-facebook-patent-rights-2 |
|
github.com/facebookgo/grace
golang
|
Direct | v0.0.0-20180706040059-75cf19382434 | — | — | — | MIT |
|
github.com/facebookgo/stack
golang
|
Direct | v0.0.0-20160209184415-751773369052 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-facebook-patent-rights-2 |
|
github.com/facebookgo/subset
golang
|
Direct | v0.0.0-20150612182917-8dac2c3c4870 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-facebook-patent-rights-2 |
|
github.com/fortytw2/leaktest
golang
|
Direct | v1.3.0 | — | — | — | BSD-3-Clause |
|
github.com/fsnotify/fsnotify
golang
|
Direct | v1.4.9 | — | — | — | BSD-3-Clause |
|
github.com/getsentry/sentry-go
golang
|
Direct | v0.43.0 | — | — | — | MIT OR (GPL-1.0-or-later AND MIT) |
|
github.com/gin-gonic/gin
golang
|
Transitive | v1.9.1 | — | — | — | MIT |
|
github.com/go-chi/chi/v5
golang
|
Direct | v5.2.2 | — | — | 1 unknown | MIT |
|
github.com/go-chi/cors
golang
|
Direct | v1.2.1 | — | — | — | MIT |
|
github.com/go-logr/logr
golang
|
Transitive | v1.4.3 | — | — | — | Apache-2.0 |
|
github.com/go-logr/stdr
golang
|
Transitive | v1.2.2 | — | — | — | Apache-2.0 |
|
github.com/go-ole/go-ole
golang
|
Transitive | v1.2.6 | — | — | — | MIT |
|
github.com/go-playground/validator/v10
golang
|
Transitive | v10.15.1 | — | — | — | MIT |
|
github.com/go-task/slim-sprig/v3
golang
|
Transitive | v3.0.0 | — | — | — | MIT |
|
github.com/gobwas/httphead
golang
|
Transitive | v0.1.0 | — | — | — | MIT |
|
github.com/gobwas/pool
golang
|
Transitive | v0.2.1 | — | — | — | MIT |
|
github.com/gobwas/ws
golang
|
Direct | v1.2.1 | — | — | — | MIT |
|
github.com/google/gopacket
golang
|
Direct | v1.1.19 | — | — | — | BSD-3-Clause |
|
github.com/google/pprof
golang
|
Transitive | v0.0.0-20250418163039-24c5476c6587 | — | — | — | Apache-2.0 |
|
github.com/google/uuid
golang
|
Direct | v1.6.0 | — | — | — | BSD-3-Clause |
|
github.com/gorilla/websocket
golang
|
Direct | v1.5.0 | — | — | — | BSD-2-Clause |
|
github.com/grpc-ecosystem/grpc-gateway/v2
golang
|
Transitive | v2.26.3 | — | — | — | BSD-3-Clause |
|
github.com/json-iterator/go
golang
|
Direct | v1.1.12 | — | — | — | MIT |
|
github.com/klauspost/compress
golang
|
Transitive | v1.18.0 | — | — | — | Apache-2.0 AND BSD-3-Clause AND MIT |
|
github.com/klauspost/cpuid/v2
golang
|
Transitive | v2.2.5 | — | — | — | MIT |
|
github.com/lufia/plan9stats
golang
|
Transitive | v0.0.0-20211012122336-39d0f177ccd0 | — | — | — | BSD-3-Clause |
|
github.com/mattn/go-colorable
golang
|
Direct | v0.1.13 | — | — | — | MIT |
|
github.com/mattn/go-isatty
golang
|
Transitive | v0.0.20 | — | — | — | MIT |
|
github.com/mitchellh/go-homedir
golang
|
Direct | v1.1.0 | — | — | — | MIT |
|
github.com/modern-go/concurrent
golang
|
Transitive | v0.0.0-20180306012644-bacd9c7ef1dd | — | — | — | Apache-2.0 |
|
github.com/modern-go/reflect2
golang
|
Transitive | v1.0.2 | — | — | — | Apache-2.0 |
|
github.com/munnerz/goautoneg
golang
|
Transitive | v0.0.0-20191010083416-a7dc8b61c822 | — | — | — | BSD-3-Clause |
|
github.com/onsi/ginkgo/v2
golang
|
Direct | v2.23.4 | — | — | — | MIT |
|
github.com/pelletier/go-toml/v2
golang
|
Transitive | v2.0.9 | — | — | — | MIT |
|
github.com/pkg/errors
golang
|
Direct | v0.9.1 | — | — | — | BSD-2-Clause |
|
github.com/pmezard/go-difflib
golang
|
Transitive | v1.0.1-0.20181226105442-5d4384ee4fb2 | — | — | — | BSD-3-Clause |
|
github.com/power-devops/perfstat
golang
|
Transitive | v0.0.0-20240221224432-82ca36839d55 | — | — | — | MIT |
|
github.com/prometheus/client_golang
golang
|
Direct | v1.22.0 | — | — | — | Apache-2.0 |
|
github.com/prometheus/client_model
golang
|
Direct | v0.6.2 | — | — | — | Apache-2.0 |
|
github.com/prometheus/common
golang
|
Transitive | v0.64.0 | — | — | — | Apache-2.0 |
|
github.com/prometheus/procfs
golang
|
Transitive | v0.15.1 | — | — | — | Apache-2.0 |
|
github.com/rs/zerolog
golang
|
Direct | v1.20.0 | — | — | — | MIT |
|
github.com/russross/blackfriday/v2
golang
|
Transitive | v2.1.0 | — | — | — | BSD-2-Clause |
|
github.com/shirou/gopsutil/v4
golang
|
Direct | v4.26.3 | — | — | — | Unknown |
|
github.com/stretchr/testify
golang
|
Direct | v1.11.1 | — | — | — | MIT |
|
github.com/tinylib/msgp
golang
|
Direct | v1.6.3 | — | — | — | Unknown |
|
github.com/tklauser/go-sysconf
golang
|
Transitive | v0.3.16 | — | — | — | BSD-3-Clause |
|
github.com/tklauser/numcpus
golang
|
Transitive | v0.11.0 | — | — | — | Apache-2.0 |
|
github.com/yusufpapurcu/wmi
golang
|
Transitive | v1.2.4 | — | — | — | MIT |
|
go.opentelemetry.io/auto/sdk
golang
|
Transitive | v1.2.1 | — | — | — | Apache-2.0 |
|
go.opentelemetry.io/contrib/propagators
golang
|
Direct | v0.22.0 | — | — | — | Apache-2.0 |
|
go.opentelemetry.io/otel/exporters/otlp/otlptrace
golang
|
Direct | v1.26.0 | — | — | — | Apache-2.0 |
|
go.opentelemetry.io/otel/metric
golang
|
Transitive | v1.40.0 | — | — | — | Apache-2.0 AND BSD-3-Clause |
|
go.opentelemetry.io/otel/trace
golang
|
Direct | v1.40.0 | — | — | — | Apache-2.0 AND BSD-3-Clause |
|
go.opentelemetry.io/proto/otlp
golang
|
Direct | v1.2.0 | — | — | — | Apache-2.0 |
|
go.uber.org/automaxprocs
golang
|
Direct | v1.6.0 | — | — | — | MIT |
|
go.uber.org/mock
golang
|
Direct | v0.5.1 | — | — | — | Apache-2.0 |
|
golang.org/x/arch
golang
|
Transitive | v0.4.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/mod
golang
|
Transitive | v0.24.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/net
golang
|
Direct | v0.40.0 | — | — | 3 unknown | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/oauth2
golang
|
Transitive | v0.30.0 | — | — | — | BSD-3-Clause |
|
golang.org/x/sync
golang
|
Direct | v0.14.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/sys
golang
|
Direct | v0.41.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/term
golang
|
Direct | v0.32.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/text
golang
|
Transitive | v0.25.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/tools
golang
|
Transitive | v0.32.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
google.golang.org/genproto/googleapis/api
golang
|
Transitive | v0.0.0-20250505200425-f936aa4a68b2 | — | — | — | Apache-2.0 |
|
google.golang.org/genproto/googleapis/rpc
golang
|
Transitive | v0.0.0-20250512202823-5a2f75b736a9 | — | — | — | Apache-2.0 |
|
google.golang.org/protobuf
golang
|
Direct | v1.36.6 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
gopkg.in/natefinch/lumberjack.v2
golang
|
Direct | v2.0.0 | — | — | — | MIT |
|
gopkg.in/yaml.v2
golang
|
Transitive | v2.4.0 | — | — | — | Apache-2.0 |
|
nhooyr.io/websocket
golang
|
Direct | v1.8.7 | — | — | — | MIT |
|
retrying
pypi
|
Direct | 1.3.4 | — | — | — | Apache-2.0 |
|
websockets
pypi
|
Direct | 11.0.1 | — | — | — | BSD-3-Clause |
|
zombiezen.com/go/capnproto2
golang
|
Direct | v2.18.0+incompatible | — | — | — | MIT |
License Breakdown
MIT
32
Apache-2.0
27
BSD-3-Clause
11
BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang
10
Apache-2.0 AND BSD-3-Clause
5
BSD-2-Clause
4
BSD-3-Clause AND LicenseRef-scancode-facebook-patent-rights-2
4
Unknown
4
Apache-2.0 AND BSD-3-Clause AND MIT
1
ISC
1
MIT OR (GPL-1.0-or-later AND MIT)
1
CVE Severity
critical
1
high
3
medium
3
low
0
unknown
2