Dependency Analysis
donetick
Direct and transitive dependency freshness, license, and CVE exposure from the latest SBOM.
100%
Freshness
176
Dependencies
0
Outdated
0
Stale
—
Avg Behind
Dependency List
Latest release v0.1.75
| Dependency | Type | Current | Latest | Behind | CVE | License |
|---|---|---|---|---|---|---|
|
github.com/jackc/pgx/v5
golang
|
Transitive | v5.5.5 | — | — | 3 critical | MIT |
|
go.opentelemetry.io/otel
golang
|
Transitive | v1.39.0 | — | — | 1 high | Apache-2.0 AND BSD-3-Clause |
|
go.opentelemetry.io/otel/sdk
golang
|
Transitive | v1.39.0 | — | — | 2 high | Apache-2.0 AND BSD-3-Clause |
|
actions/checkout
githubactions
|
Direct | 4.*.* | — | — | — | Unknown |
|
actions/setup-go
githubactions
|
Direct | 4.*.* | — | — | — | Unknown |
|
actions/setup-go
githubactions
|
Direct | 5.*.* | — | — | — | Unknown |
|
actions/setup-node
githubactions
|
Direct | 2.*.* | — | — | — | Unknown |
|
cel.dev/expr
golang
|
Transitive | v0.25.1 | — | — | — | Apache-2.0 |
|
cloud.google.com/go
golang
|
Transitive | v0.121.0 | — | — | — | Apache-2.0 |
|
cloud.google.com/go/auth
golang
|
Transitive | v0.16.1 | — | — | — | Apache-2.0 |
|
cloud.google.com/go/auth/oauth2adapt
golang
|
Transitive | v0.2.8 | — | — | — | Apache-2.0 |
|
cloud.google.com/go/compute/metadata
golang
|
Transitive | v0.9.0 | — | — | — | Apache-2.0 |
|
cloud.google.com/go/firestore
golang
|
Transitive | v1.18.0 | — | — | — | Apache-2.0 |
|
cloud.google.com/go/iam
golang
|
Transitive | v1.5.2 | — | — | — | Apache-2.0 |
|
cloud.google.com/go/longrunning
golang
|
Transitive | v0.6.7 | — | — | — | Apache-2.0 |
|
cloud.google.com/go/monitoring
golang
|
Transitive | v1.24.2 | — | — | — | Apache-2.0 |
|
cloud.google.com/go/storage
golang
|
Transitive | v1.53.0 | — | — | — | Apache-2.0 |
|
docker/build-push-action
githubactions
|
Direct | 5.*.* | — | — | — | Unknown |
|
docker/login-action
githubactions
|
Direct | 2.*.* | — | — | — | Unknown |
|
docker/setup-buildx-action
githubactions
|
Direct | 3.*.* | — | — | — | Unknown |
|
docker/setup-qemu-action
githubactions
|
Direct | 3.*.* | — | — | — | Unknown |
|
firebase.google.com/go/v4
golang
|
Direct | v4.18.0 | — | — | — | Apache-2.0 AND LicenseRef-scancode-proprietary-license |
|
github.com/andybalholm/brotli
golang
|
Transitive | v1.1.1 | — | — | — | MIT |
|
github.com/appleboy/gin-jwt/v2
golang
|
Direct | v2.9.2 | — | — | — | Unknown |
|
github.com/aws/aws-sdk-go
golang
|
Direct | v1.55.7 | — | — | 2 unknown | Apache-2.0 |
|
github.com/boombuler/barcode
golang
|
Transitive | v1.0.1-0.20190219062509-6c824513bacc | — | — | — | MIT |
|
github.com/bytedance/gopkg
golang
|
Transitive | v0.1.3 | — | — | — | Apache-2.0 |
|
github.com/bytedance/sonic
golang
|
Transitive | v1.14.2 | — | — | — | Apache-2.0 |
|
github.com/bytedance/sonic/loader
golang
|
Transitive | v0.4.0 | — | — | — | Apache-2.0 |
|
github.com/cespare/xxhash/v2
golang
|
Transitive | v2.3.0 | — | — | — | MIT |
|
github.com/clickhouse/ch-go
golang
|
Transitive | v0.61.5 | — | — | — | Apache-2.0 |
|
github.com/clickhouse/clickhouse-go/v2
golang
|
Transitive | v2.30.0 | — | — | — | Apache-2.0 |
|
github.com/cloudwego/base64x
golang
|
Transitive | v0.1.6 | — | — | — | Apache-2.0 |
|
github.com/cncf/xds/go
golang
|
Transitive | v0.0.0-20251210132809-ee656c7534f5 | — | — | — | Apache-2.0 |
|
github.com/davecgh/go-spew
golang
|
Transitive | v1.1.2-0.20180830191138-d8f796af33cc | — | — | — | ISC |
|
github.com/dustin/go-humanize
golang
|
Transitive | v1.0.1 | — | — | — | MIT |
|
github.com/envoyproxy/go-control-plane/envoy
golang
|
Transitive | v1.36.0 | — | — | — | Apache-2.0 |
|
github.com/envoyproxy/protoc-gen-validate
golang
|
Transitive | v1.3.0 | — | — | — | Apache-2.0 |
|
github.com/felixge/httpsnoop
golang
|
Transitive | v1.0.4 | — | — | — | MIT |
|
github.com/fsnotify/fsnotify
golang
|
Transitive | v1.9.0 | — | — | — | BSD-3-Clause |
|
github.com/gabriel-vasile/mimetype
golang
|
Transitive | v1.4.12 | — | — | — | MIT |
|
github.com/gin-contrib/cors
golang
|
Direct | v1.7.2 | — | — | — | MIT |
|
github.com/gin-contrib/sse
golang
|
Transitive | v1.1.0 | — | — | — | MIT |
|
github.com/gin-gonic/gin
golang
|
Direct | v1.11.0 | — | — | — | MIT |
|
github.com/glebarez/go-sqlite
golang
|
Transitive | v1.21.2 | — | — | — | BSD-3-Clause |
|
github.com/glebarez/sqlite
golang
|
Direct | v1.11.0 | — | — | — | MIT |
|
github.com/go-faster/city
golang
|
Transitive | v1.0.1 | — | — | — | MIT |
|
github.com/go-faster/errors
golang
|
Transitive | v0.7.1 | — | — | — | BSD-3-Clause |
|
github.com/go-gorp/gorp/v3
golang
|
Transitive | v3.1.0 | — | — | — | MIT |
|
github.com/go-jose/go-jose/v4
golang
|
Transitive | v4.1.4 | — | — | — | Apache-2.0 |
|
github.com/go-logr/logr
golang
|
Transitive | v1.4.3 | — | — | — | Apache-2.0 |
|
github.com/go-logr/stdr
golang
|
Transitive | v1.2.2 | — | — | — | Apache-2.0 |
|
github.com/go-openapi/jsonpointer
golang
|
Transitive | v0.22.4 | — | — | — | Apache-2.0 |
|
github.com/go-openapi/jsonreference
golang
|
Transitive | v0.21.4 | — | — | — | Apache-2.0 |
|
github.com/go-openapi/spec
golang
|
Transitive | v0.22.3 | — | — | — | Apache-2.0 |
|
github.com/go-openapi/swag/conv
golang
|
Transitive | v0.25.4 | — | — | — | Apache-2.0 |
|
github.com/go-openapi/swag/jsonname
golang
|
Transitive | v0.25.4 | — | — | — | Apache-2.0 |
|
github.com/go-openapi/swag/jsonutils
golang
|
Transitive | v0.25.4 | — | — | — | Apache-2.0 |
|
github.com/go-openapi/swag/loading
golang
|
Transitive | v0.25.4 | — | — | — | Apache-2.0 |
|
github.com/go-openapi/swag/stringutils
golang
|
Transitive | v0.25.4 | — | — | — | Apache-2.0 |
|
github.com/go-openapi/swag/typeutils
golang
|
Transitive | v0.25.4 | — | — | — | Apache-2.0 |
|
github.com/go-openapi/swag/yamlutils
golang
|
Transitive | v0.25.4 | — | — | — | Apache-2.0 |
|
github.com/go-playground/locales
golang
|
Transitive | v0.14.1 | — | — | — | MIT |
|
github.com/go-playground/universal-translator
golang
|
Transitive | v0.18.1 | — | — | — | MIT |
|
github.com/go-playground/validator/v10
golang
|
Transitive | v10.30.1 | — | — | — | MIT |
|
github.com/go-sql-driver/mysql
golang
|
Transitive | v1.7.0 | — | — | — | MPL-2.0 |
|
github.com/go-telegram-bot-api/telegram-bot-api/v5
golang
|
Direct | v5.5.1 | — | — | — | MIT |
|
github.com/go-viper/mapstructure/v2
golang
|
Transitive | v2.4.0 | — | — | — | MIT |
|
github.com/goccy/go-json
golang
|
Transitive | v0.10.5 | — | — | — | MIT |
|
github.com/goccy/go-yaml
golang
|
Transitive | v1.19.2 | — | — | — | MIT |
|
github.com/golang-jwt/jwt/v4
golang
|
Direct | v4.5.2 | — | — | — | MIT |
|
github.com/golang-jwt/jwt/v5
golang
|
Direct | v5.2.3 | — | — | — | MIT |
|
github.com/golang/protobuf
golang
|
Transitive | v1.5.4 | — | — | — | BSD-3-Clause |
|
github.com/google/s2a-go
golang
|
Transitive | v0.1.9 | — | — | — | Apache-2.0 |
|
github.com/google/uuid
golang
|
Direct | v1.6.0 | — | — | — | BSD-3-Clause |
|
github.com/googleapis/enterprise-certificate-proxy
golang
|
Transitive | v0.3.6 | — | — | — | Apache-2.0 |
|
github.com/googleapis/gax-go/v2
golang
|
Transitive | v2.14.1 | — | — | — | BSD-3-Clause |
|
github.com/googlecloudplatform/opentelemetry-operations-go/detectors/gcp
golang
|
Transitive | v1.30.0 | — | — | — | Apache-2.0 |
|
github.com/googlecloudplatform/opentelemetry-operations-go/exporter/metric
golang
|
Transitive | v0.51.0 | — | — | — | Apache-2.0 |
|
github.com/googlecloudplatform/opentelemetry-operations-go/internal/resourcemapping
golang
|
Transitive | v0.51.0 | — | — | — | Apache-2.0 |
|
github.com/gorilla/websocket
golang
|
Direct | v1.5.3 | — | — | — | BSD-2-Clause |
|
github.com/gregdel/pushover
golang
|
Direct | v1.3.1 | — | — | — | MIT |
|
github.com/hashicorp/go-version
golang
|
Transitive | v1.6.0 | — | — | — | MPL-2.0 |
|
github.com/jackc/pgpassfile
golang
|
Transitive | v1.0.0 | — | — | — | MIT |
|
github.com/jackc/pgservicefile
golang
|
Transitive | v0.0.0-20221227161230-091c0ba34f0a | — | — | — | MIT |
|
github.com/jackc/puddle/v2
golang
|
Transitive | v2.2.1 | — | — | — | MIT |
|
github.com/jinzhu/inflection
golang
|
Transitive | v1.0.0 | — | — | — | MIT |
|
github.com/jinzhu/now
golang
|
Transitive | v1.1.5 | — | — | — | MIT |
|
github.com/jmespath/go-jmespath
golang
|
Transitive | v0.4.0 | — | — | — | Apache-2.0 |
|
github.com/json-iterator/go
golang
|
Transitive | v1.1.12 | — | — | — | MIT |
|
github.com/klauspost/compress
golang
|
Transitive | v1.18.0 | — | — | — | Apache-2.0 AND BSD-3-Clause AND MIT |
|
github.com/klauspost/cpuid/v2
golang
|
Transitive | v2.3.0 | — | — | — | MIT |
|
github.com/kylebanks/depth
golang
|
Transitive | v1.2.1 | — | — | — | MIT |
|
github.com/leodido/go-urn
golang
|
Transitive | v1.4.0 | — | — | — | MIT |
|
github.com/lib/pq
golang
|
Transitive | v1.10.9 | — | — | — | MIT |
|
github.com/mattn/go-isatty
golang
|
Transitive | v0.0.20 | — | — | — | MIT |
|
github.com/mattn/go-sqlite3
golang
|
Transitive | v1.14.22 | — | — | — | MIT |
|
github.com/mcuadros/go-defaults
golang
|
Direct | v1.2.0 | — | — | — | MIT |
|
github.com/micahparks/keyfunc
golang
|
Transitive | v1.9.0 | — | — | — | Apache-2.0 |
|
github.com/modern-go/concurrent
golang
|
Transitive | v0.0.0-20180306012644-bacd9c7ef1dd | — | — | — | Apache-2.0 |
|
github.com/modern-go/reflect2
golang
|
Transitive | v1.0.2 | — | — | — | Apache-2.0 |
|
github.com/paulmach/orb
golang
|
Transitive | v0.11.1 | — | — | — | MIT |
|
github.com/pelletier/go-toml/v2
golang
|
Transitive | v2.2.4 | — | — | — | MIT |
|
github.com/pierrec/lz4/v4
golang
|
Transitive | v4.1.21 | — | — | — | BSD-3-Clause |
|
github.com/pkg/errors
golang
|
Transitive | v0.9.1 | — | — | — | BSD-2-Clause |
|
github.com/planetscale/vtprotobuf
golang
|
Transitive | v0.6.1-0.20240319094008-0393e58bdf10 | — | — | — | BSD-3-Clause |
|
github.com/pmezard/go-difflib
golang
|
Transitive | v1.0.1-0.20181226105442-5d4384ee4fb2 | — | — | — | BSD-3-Clause |
|
github.com/pquerna/otp
golang
|
Direct | v1.5.0 | — | — | — | Apache-2.0 |
|
github.com/quasilyte/go-ruleguard/dsl
golang
|
Direct | v0.3.23 | — | — | — | BSD-3-Clause |
|
github.com/quic-go/qpack
golang
|
Transitive | v0.6.0 | — | — | — | MIT |
|
github.com/quic-go/quic-go
golang
|
Transitive | v0.59.0 | — | — | — | MIT |
|
github.com/remyoudompheng/bigfft
golang
|
Transitive | v0.0.0-20230129092748-24d4a6f8daec | — | — | — | BSD-3-Clause |
|
github.com/rubenv/sql-migrate
golang
|
Direct | v1.7.0 | — | — | — | MIT |
|
github.com/sagikazarmark/locafero
golang
|
Transitive | v0.11.0 | — | — | — | MIT |
|
github.com/segmentio/asm
golang
|
Transitive | v1.2.0 | — | — | — | MIT |
|
github.com/shopspring/decimal
golang
|
Transitive | v1.4.0 | — | — | — | MIT |
|
github.com/sourcegraph/conc
golang
|
Transitive | v0.3.1-0.20240121214520-5f936abd7ae8 | — | — | — | MIT |
|
github.com/spf13/afero
golang
|
Transitive | v1.15.0 | — | — | — | Apache-2.0 |
|
github.com/spf13/cast
golang
|
Transitive | v1.10.0 | — | — | — | MIT |
|
github.com/spf13/pflag
golang
|
Transitive | v1.0.10 | — | — | — | BSD-3-Clause |
|
github.com/spf13/viper
golang
|
Direct | v1.21.0 | — | — | — | MIT |
|
github.com/spiffe/go-spiffe/v2
golang
|
Transitive | v2.6.0 | — | — | — | Apache-2.0 |
|
github.com/stretchr/testify
golang
|
Direct | v1.11.1 | — | — | — | MIT |
|
github.com/stripe/stripe-go/v76
golang
|
Direct | v76.25.0 | — | — | — | MIT |
|
github.com/subosito/gotenv
golang
|
Transitive | v1.6.0 | — | — | — | MIT |
|
github.com/swaggo/files
golang
|
Direct | v1.0.1 | — | — | — | MIT |
|
github.com/swaggo/gin-swagger
golang
|
Direct | v1.6.1 | — | — | — | MIT |
|
github.com/swaggo/swag
golang
|
Direct | v1.16.6 | — | — | — | Apache-2.0 AND CC-BY-3.0 AND MIT |
|
github.com/twitchyliquid64/golang-asm
golang
|
Transitive | v0.15.1 | — | — | — | BSD-3-Clause |
|
github.com/ugorji/go/codec
golang
|
Transitive | v1.3.1 | — | — | — | MIT |
|
github.com/ulule/limiter/v3
golang
|
Direct | v3.11.2 | — | — | — | MIT |
|
go.opentelemetry.io/auto/sdk
golang
|
Transitive | v1.2.1 | — | — | — | Apache-2.0 |
|
go.opentelemetry.io/contrib/detectors/gcp
golang
|
Transitive | v1.39.0 | — | — | — | Apache-2.0 AND BSD-3-Clause |
|
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
golang
|
Transitive | v0.60.0 | — | — | — | Apache-2.0 |
|
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
golang
|
Transitive | v0.60.0 | — | — | — | Apache-2.0 |
|
go.opentelemetry.io/otel/metric
golang
|
Transitive | v1.39.0 | — | — | — | Apache-2.0 AND BSD-3-Clause |
|
go.opentelemetry.io/otel/sdk/metric
golang
|
Transitive | v1.39.0 | — | — | — | Apache-2.0 AND BSD-3-Clause |
|
go.opentelemetry.io/otel/trace
golang
|
Transitive | v1.39.0 | — | — | — | Apache-2.0 AND BSD-3-Clause |
|
go.uber.org/dig
golang
|
Transitive | v1.17.1 | — | — | — | MIT |
|
go.uber.org/fx
golang
|
Direct | v1.22.0 | — | — | — | MIT |
|
go.uber.org/mock
golang
|
Transitive | v0.6.0 | — | — | — | Apache-2.0 |
|
go.uber.org/multierr
golang
|
Transitive | v1.11.0 | — | — | — | MIT |
|
go.uber.org/zap
golang
|
Direct | v1.27.0 | — | — | — | MIT |
|
go.yaml.in/yaml/v3
golang
|
Transitive | v3.0.4 | — | — | — | Apache-2.0 AND MIT |
|
golang.org/x/arch
golang
|
Transitive | v0.23.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/crypto
golang
|
Direct | v0.47.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/mod
golang
|
Transitive | v0.32.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/net
golang
|
Transitive | v0.49.0 | — | — | 1 unknown | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/oauth2
golang
|
Direct | v0.34.0 | — | — | — | BSD-3-Clause |
|
golang.org/x/sync
golang
|
Transitive | v0.19.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/sys
golang
|
Transitive | v0.40.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/text
golang
|
Transitive | v0.33.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/time
golang
|
Transitive | v0.11.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/tools
golang
|
Transitive | v0.41.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golangci/golangci-lint-action
githubactions
|
Direct | 6.*.* | — | — | — | Unknown |
|
google.golang.org/api
golang
|
Direct | v0.231.0 | — | — | — | BSD-3-Clause |
|
google.golang.org/appengine/v2
golang
|
Transitive | v2.0.6 | — | — | — | Apache-2.0 |
|
google.golang.org/genproto
golang
|
Transitive | v0.0.0-20250505200425-f936aa4a68b2 | — | — | — | Apache-2.0 |
|
google.golang.org/genproto/googleapis/api
golang
|
Transitive | v0.0.0-20251202230838-ff82c1b0f217 | — | — | — | Apache-2.0 |
|
google.golang.org/genproto/googleapis/rpc
golang
|
Transitive | v0.0.0-20251202230838-ff82c1b0f217 | — | — | — | Apache-2.0 |
|
google.golang.org/grpc
golang
|
Transitive | v1.79.3 | — | — | — | Apache-2.0 |
|
google.golang.org/protobuf
golang
|
Transitive | v1.36.11 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
gopkg.in/alexcesaro/quotedprintable.v3
golang
|
Direct | v3.0.0-20150716171945-2caba252f4dc | — | — | — | MIT |
|
gopkg.in/gomail.v2
golang
|
Direct | v2.0.0-20160411212932-81ebce5c23df | — | — | — | MIT |
|
gopkg.in/yaml.v3
golang
|
Transitive | v3.0.1 | — | — | — | Apache-2.0 |
|
goreleaser/goreleaser-action
githubactions
|
Direct | 6.*.* | — | — | — | Unknown |
|
gorm.io/driver/clickhouse
golang
|
Transitive | v0.7.0 | — | — | — | MIT |
|
gorm.io/driver/mysql
golang
|
Transitive | v1.5.7 | — | — | — | MIT |
|
gorm.io/driver/postgres
golang
|
Direct | v1.5.11 | — | — | — | MIT |
|
gorm.io/gorm
golang
|
Direct | v1.30.0 | — | — | — | MIT |
|
gorm.io/plugin/opentelemetry
golang
|
Direct | v0.1.16 | — | — | — | MIT |
|
modernc.org/libc
golang
|
Transitive | v1.22.5 | — | — | — | BSD-3-Clause |
|
modernc.org/mathutil
golang
|
Transitive | v1.5.0 | — | — | — | BSD-3-Clause |
|
modernc.org/memory
golang
|
Transitive | v1.5.0 | — | — | — | BSD-3-Clause |
|
modernc.org/sqlite
golang
|
Transitive | v1.23.1 | — | — | — | BSD-3-Clause |
License Breakdown
MIT
65
Apache-2.0
55
BSD-3-Clause
19
Unknown
11
BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang
10
Apache-2.0 AND BSD-3-Clause
6
BSD-2-Clause
2
MPL-2.0
2
Apache-2.0 AND BSD-3-Clause AND MIT
1
Apache-2.0 AND CC-BY-3.0 AND MIT
1
Apache-2.0 AND LicenseRef-scancode-proprietary-license
1
Apache-2.0 AND MIT
1
ISC
1
CVE Severity
critical
1
high
2
medium
0
low
0
unknown
2