Skip to content
Tools / diun / Dependencies

Dependency Analysis

diun

Direct and transitive dependency freshness, license, and CVE exposure from the latest SBOM.

100% Freshness
188 Dependencies
0 Outdated
0 Stale
Avg Behind

Dependency List

Latest release v4.31.0

Dependency Type Current Latest Behind CVE License
github.com/docker/docker
golang
Direct v28.5.2+incompatible 2 high Apache-2.0
go.opentelemetry.io/otel
golang
Transitive v1.40.0 1 high Apache-2.0 AND BSD-3-Clause
actions/checkout
githubactions
Direct de0fac2e4500dabe0009e67214ff5f5447ce83dd Unknown
actions/download-artifact
githubactions
Direct 3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c Unknown
actions/upload-artifact
githubactions
Direct bbbca2ddaa5d8feaa63e36b76fdaad77386f024f Unknown
codecov/codecov-action
githubactions
Direct 57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 Unknown
crazy-max/.github/.github/actions/container-logs-check
githubactions
Direct bbd31df64ee0f097a02f12495f541f9236f18c46 Unknown
crazy-max/.github/.github/actions/docker-scout
githubactions
Direct ccae1c98f1237b5c19e4ef77ace44fa68b3bc7e4 Unknown
crazy-max/.github/.github/workflows/zizmor.yml
githubactions
Direct d89fe92d808a15e2b2ed5cdb62db7c172c31410d Unknown
crazy-max/ghaction-github-labeler
githubactions
Direct 548a7c3603594ec17c819e1239f281a3b801ab4d Unknown
crazy-max/ghaction-github-pages
githubactions
Direct 1d6ee9b181a81033a16bd707a1401afa978daab4 Unknown
crazy-max/ghaction-github-status
githubactions
Direct f0ef9e1cf727f9f76f8485f8c525fa03afc4ec02 Unknown
dario.cat/mergo
golang
Direct v1.0.2 BSD-3-Clause
docker/bake-action
githubactions
Direct 82490499d2e5613fcead7e128237ef0b0ea210f7 Unknown
docker/bake-action/subaction/matrix
githubactions
Direct 82490499d2e5613fcead7e128237ef0b0ea210f7 Unknown
docker/login-action
githubactions
Direct 4907a6ddec9925e35a0a9e82d7399ccc52663121 Unknown
docker/metadata-action
githubactions
Direct 030e881283bb7a6894de51c315a6bfe6a94e05cf Unknown
docker/setup-buildx-action
githubactions
Direct 4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd Unknown
docker/setup-qemu-action
githubactions
Direct ce360397dd3f832beb865e1373c09c0e9f86d70a Unknown
filippo.io/edwards25519
golang
Transitive v1.2.0 BSD-3-Clause
github.com/agext/levenshtein
golang
Transitive v1.2.3 Apache-2.0
github.com/alecaivazis/survey/v2
golang
Direct v2.3.7 MIT
github.com/alecthomas/kong
golang
Direct v1.15.0 MIT
github.com/andybalholm/cascadia
golang
Transitive v1.3.2 BSD-2-Clause
github.com/aokoli/goutils
golang
Transitive v1.0.1 Apache-2.0
github.com/aymerick/douceur
golang
Transitive v0.2.0 MIT
github.com/azure/go-ansiterm
golang
Direct v0.0.0-20230124172434-306776ec8161 MIT
github.com/bmatcuk/doublestar/v3
golang
Direct v3.0.0 MIT
github.com/burntsushi/toml
golang
Transitive v1.6.0 MIT
github.com/cespare/xxhash/v2
golang
Transitive v2.3.0 MIT
github.com/containerd/errdefs
golang
Transitive v1.0.0 Apache-2.0
github.com/containerd/errdefs/pkg
golang
Transitive v0.3.0 Apache-2.0
github.com/containerd/log
golang
Transitive v0.1.0 Apache-2.0
github.com/containerd/platforms
golang
Direct v1.0.0-rc.2 Apache-2.0
github.com/containerd/typeurl/v2
golang
Transitive v2.2.3 Apache-2.0
github.com/containers/libtrust
golang
Transitive v0.0.0-20230121012942-c1716e8a8d01 Apache-2.0
github.com/containers/ocicrypt
golang
Transitive v1.2.1 Apache-2.0
github.com/crazy-max/cron/v3
golang
Direct v3.1.1 MIT
github.com/crazy-max/gohealthchecks
golang
Direct v0.6.0 MIT
github.com/crazy-max/gonfig
golang
Direct v0.8.0 Unknown
github.com/davecgh/go-spew
golang
Transitive v1.1.2-0.20180830191138-d8f796af33cc ISC
github.com/distribution/reference
golang
Direct v0.6.0 Apache-2.0
github.com/docker/distribution
golang
Transitive v2.8.3+incompatible Apache-2.0
github.com/docker/docker-credential-helpers
golang
Transitive v0.9.5 MIT
github.com/docker/go-connections
golang
Direct v0.6.0 Apache-2.0
github.com/docker/go-units
golang
Direct v0.5.0 Apache-2.0
github.com/dromara/carbon/v2
golang
Direct v2.6.16 Unknown
github.com/eclipse/paho.mqtt.golang
golang
Direct v1.5.1 BSD-2-Clause AND BSD-3-Clause AND EPL-2.0 AND LicenseRef-scancode-generic-export-compliance AND LicenseRef-scancode-unknown
github.com/emicklei/go-restful/v3
golang
Transitive v3.12.2 MIT
github.com/felixge/fgprof
golang
Transitive v0.9.5 MIT
github.com/felixge/httpsnoop
golang
Transitive v1.0.4 MIT
github.com/fxamacker/cbor/v2
golang
Transitive v2.9.0 MIT
github.com/gabriel-vasile/mimetype
golang
Transitive v1.4.13 MIT
github.com/go-gomail/gomail
golang
Direct v0.0.0-20160411212932-81ebce5c23df MIT
github.com/go-logr/logr
golang
Transitive v1.4.3 Apache-2.0
github.com/go-logr/stdr
golang
Transitive v1.2.2 Apache-2.0
github.com/go-openapi/jsonpointer
golang
Transitive v0.22.5 Apache-2.0
github.com/go-openapi/jsonreference
golang
Transitive v0.21.5 Unknown
github.com/go-openapi/swag
golang
Transitive v0.25.4 Apache-2.0
github.com/go-openapi/swag/cmdutils
golang
Transitive v0.25.4 Apache-2.0
github.com/go-openapi/swag/conv
golang
Transitive v0.25.5 Unknown
github.com/go-openapi/swag/fileutils
golang
Transitive v0.25.5 Unknown
github.com/go-openapi/swag/jsonname
golang
Transitive v0.25.5 Apache-2.0
github.com/go-openapi/swag/jsonutils
golang
Transitive v0.25.5 Unknown
github.com/go-openapi/swag/loading
golang
Transitive v0.25.5 Unknown
github.com/go-openapi/swag/mangling
golang
Transitive v0.25.5 Unknown
github.com/go-openapi/swag/netutils
golang
Transitive v0.25.4 Apache-2.0
github.com/go-openapi/swag/stringutils
golang
Transitive v0.25.5 Unknown
github.com/go-openapi/swag/typeutils
golang
Transitive v0.25.5 Unknown
github.com/go-openapi/swag/yamlutils
golang
Transitive v0.25.5 Unknown
github.com/go-playground/locales
golang
Transitive v0.14.1 MIT
github.com/go-playground/universal-translator
golang
Transitive v0.18.1 MIT
github.com/go-playground/validator/v10
golang
Direct v10.30.2 Unknown
github.com/gogo/protobuf
golang
Transitive v1.3.2 BSD-3-Clause
github.com/google/gnostic-models
golang
Transitive v0.7.0 Apache-2.0
github.com/google/pprof
golang
Transitive v0.0.0-20250820193118-f64d9cf942d6 Apache-2.0
github.com/google/uuid
golang
Transitive v1.6.0 BSD-3-Clause
github.com/gorilla/css
golang
Transitive v1.0.1 BSD-3-Clause
github.com/gorilla/mux
golang
Transitive v1.8.1 BSD-3-Clause
github.com/gorilla/websocket
golang
Transitive v1.5.4-0.20250319132907-e064f32e3674 BSD-2-Clause
github.com/hashicorp/cronexpr
golang
Transitive v1.1.3 Apache-2.0 AND GPL-1.0-or-later AND GPL-3.0-only
github.com/hashicorp/errwrap
golang
Transitive v1.1.0 MPL-2.0
github.com/hashicorp/go-cleanhttp
golang
Transitive v0.5.2 MPL-2.0
github.com/hashicorp/go-multierror
golang
Transitive v1.1.1 MPL-2.0
github.com/hashicorp/go-rootcerts
golang
Transitive v1.0.2 MPL-2.0
github.com/hashicorp/nomad/api
golang
Direct v0.0.0-20251209201056-5b76eb053561 MPL-2.0
github.com/huandu/xstrings
golang
Transitive v1.2.0 MIT
github.com/imdario/mergo
golang
Transitive v0.3.6 BSD-3-Clause
github.com/jaytaylor/html2text
golang
Transitive v0.0.0-20180606194806-57d518f124b0 MIT
github.com/jedib0t/go-pretty/v6
golang
Direct v6.7.9 Unknown
github.com/json-iterator/go
golang
Transitive v1.1.12 MIT
github.com/kballard/go-shellquote
golang
Transitive v0.0.0-20180428030007-95032a82bc51 MIT
github.com/leodido/go-urn
golang
Transitive v1.4.0 MIT
github.com/masterminds/semver
golang
Transitive v1.5.0 MIT
github.com/masterminds/sprig
golang
Transitive v2.16.0+incompatible MIT
github.com/matcornic/hermes/v2
golang
Direct v2.1.0 Apache-2.0
github.com/mattn/go-colorable
golang
Transitive v0.1.14 MIT
github.com/mattn/go-isatty
golang
Transitive v0.0.20 MIT
github.com/mattn/go-runewidth
golang
Transitive v0.0.16 MIT
github.com/mgutz/ansi
golang
Transitive v0.0.0-20170206155736-9520e82c474b MIT
github.com/microcosm-cc/bluemonday
golang
Direct v1.0.27 BSD-3-Clause
github.com/microsoft/go-winio
golang
Transitive v0.6.2 MIT
github.com/mitchellh/go-homedir
golang
Transitive v1.1.0 MIT
github.com/mitchellh/mapstructure
golang
Transitive v1.5.0 MIT
github.com/moby/buildkit
golang
Direct v0.29.0 Unknown
github.com/moby/docker-image-spec
golang
Transitive v1.3.1 Apache-2.0
github.com/moby/sys/atomicwriter
golang
Direct v0.1.0 Apache-2.0
github.com/moby/sys/capability
golang
Transitive v0.4.0 BSD-2-Clause
github.com/moby/sys/mountinfo
golang
Transitive v0.7.2 Apache-2.0
github.com/moby/sys/user
golang
Transitive v0.4.0 Apache-2.0
github.com/modern-go/concurrent
golang
Transitive v0.0.0-20180306012644-bacd9c7ef1dd Apache-2.0
github.com/modern-go/reflect2
golang
Transitive v1.0.3-0.20250322232337-35a7c28c31ee Apache-2.0
github.com/munnerz/goautoneg
golang
Transitive v0.0.0-20191010083416-a7dc8b61c822 BSD-3-Clause
github.com/nlopes/slack
golang
Direct v0.6.0 BSD-2-Clause
github.com/olekukonko/tablewriter
golang
Transitive v0.0.1 MIT
github.com/opencontainers/go-digest
golang
Direct v1.0.0 Apache-2.0 AND CC-BY-SA-4.0
github.com/opencontainers/image-spec
golang
Direct v1.1.1 Apache-2.0 AND LicenseRef-scancode-dco-1.1 AND MIT
github.com/opencontainers/runtime-spec
golang
Transitive v1.3.0 Apache-2.0 AND LicenseRef-scancode-dco-1.1
github.com/panjf2000/ants/v2
golang
Direct v2.12.0 Unknown
github.com/paulsonoflars/gotgbot/v2
golang
Direct v2.0.0-rc.34 Unknown
github.com/pkg/errors
golang
Direct v0.9.1 BSD-2-Clause
github.com/pkg/profile
golang
Direct v1.7.0 BSD-2-Clause
github.com/planetscale/vtprotobuf
golang
Transitive v0.6.1-0.20240319094008-0393e58bdf10 BSD-3-Clause
github.com/pmezard/go-difflib
golang
Transitive v1.0.1-0.20181226105442-5d4384ee4fb2 BSD-3-Clause
github.com/puerkitobio/goquery
golang
Transitive v1.8.1 BSD-3-Clause
github.com/rabbitmq/amqp091-go
golang
Direct v1.10.0 BSD-2-Clause
github.com/rivo/uniseg
golang
Transitive v0.4.7 MIT
github.com/rs/zerolog
golang
Direct v1.35.0 MIT
github.com/russross/blackfriday/v2
golang
Direct v2.1.0 BSD-2-Clause
github.com/sirupsen/logrus
golang
Direct v1.9.4 MIT
github.com/spf13/pflag
golang
Transitive v1.0.9 BSD-3-Clause
github.com/ssor/bom
golang
Transitive v0.0.0-20170718123548-6386211fdfcf MIT
github.com/stretchr/testify
golang
Direct v1.11.1 MIT
github.com/tidwall/gjson
golang
Transitive v1.18.0 MIT
github.com/tidwall/match
golang
Transitive v1.2.0 MIT
github.com/tidwall/pretty
golang
Direct v1.2.1 MIT
github.com/tidwall/sjson
golang
Transitive v1.2.5 MIT
github.com/tonistiigi/go-csvvalue
golang
Transitive v0.0.0-20240814133006-030d3b2625d0 MIT
github.com/vanng822/css
golang
Transitive v0.0.0-20190504095207-a21e860bcd04 MIT
github.com/vanng822/go-premailer
golang
Transitive v0.0.0-20191214114701-be27abe028fe MIT
github.com/x448/float16
golang
Transitive v0.8.4 MIT
github/codeql-action/analyze
githubactions
Direct c10b8064de6f491fea524254123dbe5e09572f13 Unknown
github/codeql-action/autobuild
githubactions
Direct c10b8064de6f491fea524254123dbe5e09572f13 Unknown
github/codeql-action/init
githubactions
Direct c10b8064de6f491fea524254123dbe5e09572f13 Unknown
github/codeql-action/upload-sarif
githubactions
Direct c10b8064de6f491fea524254123dbe5e09572f13 Unknown
go.etcd.io/bbolt
golang
Direct v1.4.3 MIT
go.mau.fi/util
golang
Transitive v0.9.7 Unknown
go.opentelemetry.io/auto/sdk
golang
Transitive v1.2.1 Apache-2.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
golang
Transitive v0.63.0 Apache-2.0 AND BSD-3-Clause
go.opentelemetry.io/otel/metric
golang
Transitive v1.40.0 Apache-2.0 AND BSD-3-Clause
go.opentelemetry.io/otel/trace
golang
Transitive v1.40.0 Apache-2.0 AND BSD-3-Clause
go.podman.io/image/v5
golang
Direct v5.39.2 Unknown
go.podman.io/storage
golang
Transitive v1.62.0 Unknown
go.yaml.in/yaml/v2
golang
Transitive v2.4.3 Apache-2.0 AND MIT
go.yaml.in/yaml/v3
golang
Transitive v3.0.4 Apache-2.0 AND MIT
golang.org/x/crypto
golang
Transitive v0.49.0 BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang
golang.org/x/exp
golang
Transitive v0.0.0-20260312153236-7ab1446f8b90 BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang
golang.org/x/mod
golang
Direct v0.35.0 BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang
golang.org/x/net
golang
Transitive v0.52.0 1 unknown BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang
golang.org/x/oauth2
golang
Transitive v0.34.0 BSD-3-Clause
golang.org/x/sync
golang
Transitive v0.20.0 BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang
golang.org/x/sys
golang
Direct v0.43.0 BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang
golang.org/x/term
golang
Transitive v0.41.0 BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang
golang.org/x/text
golang
Transitive v0.35.0 BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang
golang.org/x/time
golang
Transitive v0.14.0 BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang
google.golang.org/genproto/googleapis/rpc
golang
Transitive v0.0.0-20260128011058-8636f8732409 Apache-2.0
google.golang.org/grpc
golang
Direct v1.80.0 Apache-2.0
google.golang.org/grpc/cmd/protoc-gen-go-grpc
golang
Transitive v1.6.0 Apache-2.0
google.golang.org/protobuf
golang
Direct v1.36.11 BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang
gopkg.in/alexcesaro/quotedprintable.v3
golang
Direct v3.0.0-20150716171945-2caba252f4dc MIT
gopkg.in/evanphx/json-patch.v4
golang
Transitive v4.13.0 BSD-3-Clause
gopkg.in/gomail.v2
golang
Direct v2.0.0-20160411212932-81ebce5c23df MIT
gopkg.in/inf.v0
golang
Transitive v0.9.1 BSD-3-Clause
gopkg.in/yaml.v2
golang
Direct v2.4.0 Apache-2.0
gopkg.in/yaml.v3
golang
Transitive v3.0.1 Apache-2.0
k8s.io/api
golang
Direct v0.35.3 Apache-2.0
k8s.io/apimachinery
golang
Direct v0.35.3 Apache-2.0
k8s.io/client-go
golang
Direct v0.35.3 Apache-2.0
k8s.io/klog/v2
golang
Transitive v2.130.1 Apache-2.0
k8s.io/kube-openapi
golang
Transitive v0.0.0-20250910181357-589584f1c912 Apache-2.0
k8s.io/utils
golang
Transitive v0.0.0-20251002143259-bc988d571ff4 Apache-2.0
maunium.net/go/mautrix
golang
Direct v0.26.4 Unknown
sigs.k8s.io/json
golang
Transitive v0.0.0-20250730193827-2d320260d730 Apache-2.0 AND BSD-3-Clause
sigs.k8s.io/randfill
golang
Transitive v1.0.0 Apache-2.0
sigs.k8s.io/structured-merge-diff/v6
golang
Transitive v6.3.0 Apache-2.0
sigs.k8s.io/yaml
golang
Transitive v1.6.0 Apache-2.0 AND BSD-3-Clause AND MIT
softprops/action-gh-release
githubactions
Direct 153bb8e04406b158c6c84fc1615b65b24149a1fe Unknown

License Breakdown

MIT 49
Apache-2.0 44
Unknown 41
BSD-3-Clause 16
BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang 10
BSD-2-Clause 8
Apache-2.0 AND BSD-3-Clause 5
MPL-2.0 5
Apache-2.0 AND MIT 2
Apache-2.0 AND BSD-3-Clause AND MIT 1
Apache-2.0 AND CC-BY-SA-4.0 1
Apache-2.0 AND GPL-1.0-or-later AND GPL-3.0-only 1
Apache-2.0 AND LicenseRef-scancode-dco-1.1 1
Apache-2.0 AND LicenseRef-scancode-dco-1.1 AND MIT 1
BSD-2-Clause AND BSD-3-Clause AND EPL-2.0 AND LicenseRef-scancode-generic-export-compliance AND LicenseRef-scancode-unknown 1
ISC 1

CVE Severity

critical 0
high 2
medium 0
low 0
unknown 1

Beta — feedback welcome: [email protected]