Dependency Analysis
git-sync
Direct and transitive dependency freshness, license, and CVE exposure from the latest SBOM.
100%
Freshness
50
Dependencies
0
Outdated
0
Stale
—
Avg Behind
Dependency List
Latest release v0.21.0
| Dependency | Type | Current | Latest | Behind | CVE | License |
|---|---|---|---|---|---|---|
|
golang.org/x/crypto
golang
|
Transitive | v0.37.0 | — | — | 3 medium | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
actions/checkout
githubactions
|
Direct | 6.*.* | — | — | — | Unknown |
|
actions/download-artifact
githubactions
|
Direct | 7.*.* | — | — | — | Unknown |
|
actions/setup-go
githubactions
|
Direct | 6.*.* | — | — | — | Unknown |
|
actions/stale
githubactions
|
Direct | 10.*.* | — | — | — | Unknown |
|
actions/upload-artifact
githubactions
|
Direct | 6.*.* | — | — | — | Unknown |
|
codeberg.org/mvdkleijn/forgejo-sdk/forgejo
golang
|
Direct | v1.2.0 | — | — | — | Unknown |
|
docker/build-push-action
githubactions
|
Direct | 6.*.* | — | — | — | Unknown |
|
docker/login-action
githubactions
|
Direct | 3.*.* | — | — | — | Unknown |
|
docker/metadata-action
githubactions
|
Direct | 5.*.* | — | — | — | Unknown |
|
docker/setup-buildx-action
githubactions
|
Direct | 3.*.* | — | — | — | Unknown |
|
docker/setup-qemu-action
githubactions
|
Direct | 3.*.* | — | — | — | Unknown |
|
github.com/42wim/httpsig
golang
|
Transitive | v1.2.2 | — | — | — | BSD-3-Clause |
|
github.com/davidmz/go-pageant
golang
|
Transitive | v1.0.2 | — | — | — | MIT |
|
github.com/fsnotify/fsnotify
golang
|
Transitive | v1.9.0 | — | — | — | BSD-3-Clause |
|
github.com/go-fed/httpsig
golang
|
Transitive | v1.1.0 | — | — | — | BSD-3-Clause |
|
github.com/go-viper/mapstructure/v2
golang
|
Transitive | v2.4.0 | — | — | — | MIT |
|
github.com/goccy/go-json
golang
|
Transitive | v0.10.5 | — | — | — | MIT |
|
github.com/google/go-github/v82
golang
|
Direct | v82.0.0 | — | — | — | BSD-3-Clause |
|
github.com/google/go-querystring
golang
|
Transitive | v1.2.0 | — | — | — | BSD-3-Clause |
|
github.com/google/uuid
golang
|
Direct | v1.6.0 | — | — | — | BSD-3-Clause |
|
github.com/hashicorp/go-cleanhttp
golang
|
Transitive | v0.5.2 | — | — | — | MPL-2.0 |
|
github.com/hashicorp/go-retryablehttp
golang
|
Transitive | v0.7.7 | — | — | — | MPL-2.0 |
|
github.com/hashicorp/go-version
golang
|
Transitive | v1.7.0 | — | — | — | MPL-2.0 |
|
github.com/hashicorp/golang-lru/v2
golang
|
Transitive | v2.0.7 | — | — | — | MPL-2.0 |
|
github.com/inconshreveable/mousetrap
golang
|
Transitive | v1.1.0 | — | — | — | Apache-2.0 |
|
github.com/ktrysmt/go-bitbucket
golang
|
Direct | v0.9.86 | — | — | — | Apache-2.0 |
|
github.com/mitchellh/mapstructure
golang
|
Transitive | v1.5.0 | — | — | — | MIT |
|
github.com/pelletier/go-toml/v2
golang
|
Transitive | v2.2.4 | — | — | — | MIT |
|
github.com/posthog/posthog-go
golang
|
Direct | v1.10.0 | — | — | — | Unknown |
|
github.com/robfig/cron/v3
golang
|
Direct | v3.0.1 | — | — | — | MIT |
|
github.com/sagikazarmark/locafero
golang
|
Transitive | v0.11.0 | — | — | — | MIT |
|
github.com/sourcegraph/conc
golang
|
Transitive | v0.3.1-0.20240121214520-5f936abd7ae8 | — | — | — | MIT |
|
github.com/spf13/afero
golang
|
Transitive | v1.15.0 | — | — | — | Apache-2.0 |
|
github.com/spf13/cast
golang
|
Transitive | v1.10.0 | — | — | — | MIT |
|
github.com/spf13/cobra
golang
|
Direct | v1.10.2 | — | — | — | Apache-2.0 |
|
github.com/spf13/pflag
golang
|
Transitive | v1.0.10 | — | — | — | BSD-3-Clause |
|
github.com/spf13/viper
golang
|
Direct | v1.21.0 | — | — | — | MIT |
|
github.com/subosito/gotenv
golang
|
Transitive | v1.6.0 | — | — | — | MIT |
|
github.com/xanzy/go-gitlab
golang
|
Direct | v0.115.0 | — | — | — | Apache-2.0 |
|
go.uber.org/multierr
golang
|
Transitive | v1.10.0 | — | — | — | MIT |
|
go.uber.org/zap
golang
|
Direct | v1.27.1 | — | — | — | MIT |
|
go.yaml.in/yaml/v3
golang
|
Transitive | v3.0.4 | — | — | — | Apache-2.0 AND MIT |
|
golang.org/x/net
golang
|
Transitive | v0.39.0 | — | — | 3 unknown | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/oauth2
golang
|
Direct | v0.35.0 | — | — | — | BSD-3-Clause |
|
golang.org/x/sys
golang
|
Transitive | v0.32.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/text
golang
|
Transitive | v0.28.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/time
golang
|
Transitive | v0.8.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
goreleaser/goreleaser-action
githubactions
|
Direct | 6.*.* | — | — | — | Unknown |
License Breakdown
MIT
13
Unknown
13
BSD-3-Clause
8
Apache-2.0
5
BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang
5
MPL-2.0
4
Apache-2.0 AND MIT
1
CVE Severity
critical
0
high
0
medium
1
low
0
unknown
1