Dependency Analysis
Gluetun VPN client
Direct and transitive dependency freshness, license, and CVE exposure from the latest SBOM.
100%
Freshness
120
Dependencies
0
Outdated
0
Stale
—
Avg Behind
Dependency List
Latest release v3.41.1
| Dependency | Type | Current | Latest | Behind | CVE | License |
|---|---|---|---|---|---|---|
|
github.com/docker/docker
golang
|
Direct | 28.5.1+incompatible | — | — | 2 high | Apache-2.0 |
|
go.opentelemetry.io/otel
golang
|
Direct | 1.38.0 | — | — | 1 high | Apache-2.0 AND BSD-3-Clause |
|
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp
golang
|
Direct | 1.38.0 | — | — | 1 medium | Apache-2.0 AND BSD-3-Clause |
|
github.com/cloudflare/circl
golang
|
Transitive | v1.6.1 | — | — | 1 low | BSD-3-Clause |
|
actions/checkout
githubactions
|
Direct | 6.*.* | — | — | — | Unknown |
|
actions/setup-go
githubactions
|
Direct | 6.*.* | — | — | — | Unknown |
|
crazy-max/ghaction-github-labeler
githubactions
|
Direct | 6.*.* | — | — | — | Unknown |
|
DavidAnson/markdownlint-cli2-action
githubactions
|
Direct | 22.*.* | — | — | — | Unknown |
|
docker/build-push-action
githubactions
|
Direct | 7.*.* | — | — | — | Unknown |
|
docker/login-action
githubactions
|
Direct | 4.*.* | — | — | — | Unknown |
|
docker/metadata-action
githubactions
|
Direct | 6.*.* | — | — | — | Unknown |
|
docker/setup-buildx-action
githubactions
|
Direct | 4.*.* | — | — | — | Unknown |
|
docker/setup-qemu-action
githubactions
|
Direct | 4.*.* | — | — | — | Unknown |
|
gaurav-nelson/github-action-markdown-link-check
githubactions
|
Direct | 1.*.* | — | — | — | Unknown |
|
github.com/amnezia-vpn/amneziawg-go
golang
|
Direct | v0.2.16 | — | — | — | MIT |
|
github.com/beorn7/perks
golang
|
Transitive | v1.0.1 | — | — | — | MIT |
|
github.com/breml/rootcerts
golang
|
Direct | v0.3.4 | — | — | — | Unknown |
|
github.com/cespare/xxhash/v2
golang
|
Transitive | v2.3.0 | — | — | — | MIT |
|
github.com/containerd/errdefs
golang
|
Direct | 1.0.0 | — | — | — | Apache-2.0 |
|
github.com/containerd/errdefs/pkg
golang
|
Direct | 0.3.0 | — | — | — | Apache-2.0 |
|
github.com/containerd/log
golang
|
Direct | 0.1.0 | — | — | — | Apache-2.0 |
|
github.com/cronokirby/saferith
golang
|
Transitive | v0.33.0 | — | — | — | BSD-3-Clause AND MIT |
|
github.com/davecgh/go-spew
golang
|
Transitive | v1.1.1 | — | — | — | ISC |
|
github.com/distribution/reference
golang
|
Direct | 0.6.0 | — | — | — | Apache-2.0 |
|
github.com/docker/docker
golang
|
Direct | 28.5.2+incompatible | — | — | — | Apache-2.0 |
|
github.com/docker/go-connections
golang
|
Direct | 0.6.0 | — | — | — | Apache-2.0 |
|
github.com/docker/go-connections
golang
|
Direct | 0.7.0 | — | — | — | Unknown |
|
github.com/docker/go-units
golang
|
Direct | 0.5.0 | — | — | — | Apache-2.0 |
|
github.com/fatih/color
golang
|
Direct | v1.18.0 | — | — | — | MIT |
|
github.com/fatih/color
golang
|
Direct | 1.13.0 | — | — | — | MIT |
|
github.com/felixge/httpsnoop
golang
|
Direct | 1.0.4 | — | — | — | MIT |
|
github.com/go-logr/logr
golang
|
Direct | 1.4.3 | — | — | — | Apache-2.0 |
|
github.com/go-logr/stdr
golang
|
Direct | 1.2.2 | — | — | — | Apache-2.0 |
|
github.com/golang/mock
golang
|
Direct | v1.6.0 | — | — | — | Apache-2.0 |
|
github.com/google/go-cmp
golang
|
Transitive | v0.7.0 | — | — | — | BSD-3-Clause |
|
github.com/jsimonetti/rtnetlink
golang
|
Direct | v1.4.2 | — | — | — | MIT |
|
github.com/klauspost/compress
golang
|
Direct | v1.18.4 | — | — | — | Apache-2.0 AND BSD-3-Clause AND MIT |
|
github.com/klauspost/pgzip
golang
|
Direct | v1.2.6 | — | — | — | BSD-3-Clause AND MIT |
|
github.com/mattn/go-colorable
golang
|
Transitive | v0.1.13 | — | — | — | MIT |
|
github.com/mattn/go-colorable
golang
|
Direct | 0.1.9 | — | — | — | MIT |
|
github.com/mattn/go-isatty
golang
|
Transitive | v0.0.20 | — | — | — | MIT |
|
github.com/mattn/go-isatty
golang
|
Direct | 0.0.14 | — | — | — | MIT |
|
github.com/mdlayher/genetlink
golang
|
Direct | v1.3.2 | — | — | — | MIT |
|
github.com/mdlayher/netlink
golang
|
Direct | v1.9.0 | — | — | — | MIT |
|
github.com/mdlayher/socket
golang
|
Transitive | v0.5.1 | — | — | — | MIT |
|
github.com/Microsoft/go-winio
golang
|
Direct | 0.6.2 | — | — | — | MIT |
|
github.com/miekg/dns
golang
|
Transitive | v1.1.62 | — | — | — | BSD-3-Clause |
|
github.com/moby/docker-image-spec
golang
|
Direct | 1.3.1 | — | — | — | Apache-2.0 |
|
github.com/moby/sys/atomicwriter
golang
|
Direct | 0.1.0 | — | — | — | Apache-2.0 |
|
github.com/moby/term
golang
|
Direct | 0.5.2 | — | — | — | Apache-2.0 |
|
github.com/morikuni/aec
golang
|
Direct | 1.0.0 | — | — | — | MIT |
|
github.com/morikuni/aec
golang
|
Direct | 1.1.0 | — | — | — | MIT |
|
github.com/munnerz/goautoneg
golang
|
Transitive | v0.0.0-20191010083416-a7dc8b61c822 | — | — | — | BSD-3-Clause |
|
github.com/opencontainers/go-digest
golang
|
Direct | 1.0.0 | — | — | — | Apache-2.0 AND CC-BY-SA-4.0 |
|
github.com/opencontainers/image-spec
golang
|
Direct | 1.1.1 | — | — | — | Apache-2.0 AND LicenseRef-scancode-dco-1.1 AND MIT |
|
github.com/pelletier/go-toml/v2
golang
|
Direct | v2.2.4 | — | — | — | MIT |
|
github.com/pkg/errors
golang
|
Transitive | v0.9.1 | — | — | — | BSD-2-Clause |
|
github.com/pmezard/go-difflib
golang
|
Transitive | v1.0.0 | — | — | — | BSD-3-Clause |
|
github.com/prometheus/client_golang
golang
|
Transitive | v1.20.5 | — | — | — | Apache-2.0 |
|
github.com/prometheus/client_model
golang
|
Transitive | v0.6.1 | — | — | — | Apache-2.0 |
|
github.com/prometheus/common
golang
|
Transitive | v0.60.1 | — | — | — | Apache-2.0 |
|
github.com/prometheus/procfs
golang
|
Transitive | v0.15.1 | — | — | — | Apache-2.0 |
|
github.com/protonmail/bcrypt
golang
|
Transitive | v0.0.0-20211005172633-e235017c1baf | — | — | — | BSD-3-Clause |
|
github.com/protonmail/go-crypto
golang
|
Transitive | v1.3.0-proton | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
github.com/protonmail/go-srp
golang
|
Direct | v0.0.7 | — | — | — | LicenseRef-scancode-unknown-license-reference AND MIT |
|
github.com/qdm12/dns/v2
golang
|
Direct | v2.0.0-rc9.0.20260421173011-9de8e7fdbe3a | — | — | — | Unknown |
|
github.com/qdm12/goservices
golang
|
Transitive | v0.1.1-0.20251104135713-6bee97bd4978 | — | — | — | MIT |
|
github.com/qdm12/gosettings
golang
|
Direct | v0.4.4 | — | — | — | Unknown |
|
github.com/qdm12/goshutdown
golang
|
Direct | v0.3.0 | — | — | — | Unknown |
|
github.com/qdm12/gosplash
golang
|
Direct | v0.2.1-0.20260305164749-b713de4fee6c | — | — | — | Unknown |
|
github.com/qdm12/gotree
golang
|
Direct | v0.3.0 | — | — | — | Unknown |
|
github.com/qdm12/log
golang
|
Direct | v0.1.0 | — | — | — | MIT |
|
github.com/qdm12/ss-server
golang
|
Direct | v0.6.0 | — | — | — | Unknown |
|
github.com/riobard/go-bloom
golang
|
Transitive | v0.0.0-20200614022211-cdc8013cb5b3 | — | — | — | Apache-2.0 |
|
github.com/stretchr/testify
golang
|
Direct | v1.11.1 | — | — | — | MIT |
|
github.com/ti-mo/netfilter
golang
|
Direct | v0.5.3 | — | — | — | MIT |
|
github.com/ulikunitz/xz
golang
|
Direct | v0.5.15 | — | — | — | BSD-3-Clause |
|
github.com/youmark/pkcs8
golang
|
Direct | v0.0.0-20201027041543-1326539a0a0a | — | — | — | MIT |
|
github/codeql-action/analyze
githubactions
|
Direct | 4.*.* | — | — | — | Unknown |
|
github/codeql-action/autobuild
githubactions
|
Direct | 4.*.* | — | — | — | Unknown |
|
github/codeql-action/init
githubactions
|
Direct | 4.*.* | — | — | — | Unknown |
|
go.opentelemetry.io/auto/sdk
golang
|
Direct | 1.1.0 | — | — | — | Apache-2.0 |
|
go.opentelemetry.io/auto/sdk
golang
|
Direct | 1.2.1 | — | — | — | Apache-2.0 |
|
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
golang
|
Direct | 0.63.0 | — | — | — | Apache-2.0 AND BSD-3-Clause |
|
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
golang
|
Direct | 0.68.0 | — | — | — | Apache-2.0 AND BSD-3-Clause |
|
go.opentelemetry.io/otel
golang
|
Direct | 1.43.0 | — | — | — | Apache-2.0 AND BSD-3-Clause |
|
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp
golang
|
Direct | 1.43.0 | — | — | — | Apache-2.0 AND BSD-3-Clause |
|
go.opentelemetry.io/otel/metric
golang
|
Direct | 1.38.0 | — | — | — | Apache-2.0 AND BSD-3-Clause |
|
go.opentelemetry.io/otel/metric
golang
|
Direct | 1.43.0 | — | — | — | Apache-2.0 AND BSD-3-Clause |
|
go.opentelemetry.io/otel/trace
golang
|
Direct | 1.38.0 | — | — | — | Apache-2.0 AND BSD-3-Clause |
|
go.opentelemetry.io/otel/trace
golang
|
Direct | 1.43.0 | — | — | — | Apache-2.0 AND BSD-3-Clause |
|
golang.org/x/crypto
golang
|
Transitive | v0.48.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/crypto
golang
|
Direct | 0.50.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/exp
golang
|
Direct | v0.0.0-20241009180824-f66d83c29e7c | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/mod
golang
|
Transitive | v0.33.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/net
golang
|
Direct | v0.51.0 | — | — | 1 unknown | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/sync
golang
|
Transitive | v0.20.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/sys
golang
|
Direct | v0.42.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/sys
golang
|
Direct | 0.35.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/sys
golang
|
Direct | 0.43.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/term
golang
|
Direct | 0.42.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/text
golang
|
Direct | v0.35.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/time
golang
|
Direct | 0.14.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/time
golang
|
Direct | 0.15.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/tools
golang
|
Transitive | v0.42.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.zx2c4.com/wintun
golang
|
Transitive | v0.0.0-20230126152724-0fa3db229ce2 | — | — | — | MIT |
|
golang.zx2c4.com/wireguard
golang
|
Direct | v0.0.0-20231211153847-12269c276173 | — | — | — | MIT |
|
golang.zx2c4.com/wireguard/wgctrl
golang
|
Direct | v0.0.0-20230429144221-925a1e7659e6 | — | — | — | MIT |
|
golang.zx2c4.com/wireguard/wgctrl
golang
|
Direct | 0.0.0-20241231184526-a9ab2273dd10 | — | — | — | MIT |
|
google.golang.org/protobuf
golang
|
Transitive | v1.35.1 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
gopkg.in/ini.v1
golang
|
Direct | v1.67.1 | — | — | — | Apache-2.0 |
|
gopkg.in/yaml.v3
golang
|
Transitive | v3.0.1 | — | — | — | Apache-2.0 |
|
gotest.tools/v3
golang
|
Direct | 3.5.2 | — | — | — | Apache-2.0 |
|
kernel.org/pub/linux/libs/security/libcap/cap
golang
|
Transitive | v1.2.70 | — | — | — | (BSD-3-Clause AND GPL-1.0-or-later AND GPL-2.0 AND GPL-2.0-only AND GPL-2.0-or-later) OR (BSD-3-Clause AND GPL-1.0-or-later AND GPL-2.0 AND GPL-2.0-only) |
|
kernel.org/pub/linux/libs/security/libcap/psx
golang
|
Transitive | v1.2.70 | — | — | — | (BSD-3-Clause AND GPL-1.0-or-later AND GPL-2.0 AND GPL-2.0-only AND GPL-2.0-or-later) OR (BSD-3-Clause AND GPL-1.0-or-later AND GPL-2.0 AND GPL-2.0-only) |
|
peter-evans/create-or-update-comment
githubactions
|
Direct | 5.*.* | — | — | — | Unknown |
|
peter-evans/create-pull-request
githubactions
|
Direct | 8.*.* | — | — | — | Unknown |
|
peter-evans/dockerhub-description
githubactions
|
Direct | 5.*.* | — | — | — | Unknown |
|
reviewdog/action-misspell
githubactions
|
Direct | 1.*.* | — | — | — | Unknown |
License Breakdown
MIT
27
Unknown
25
Apache-2.0
24
BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang
16
Apache-2.0 AND BSD-3-Clause
10
BSD-3-Clause
7
(BSD-3-Clause AND GPL-1.0-or-later AND GPL-2.0 AND GPL-2.0-only AND GPL-2.0-or-later) OR (BSD-3-Clause AND GPL-1.0-or-later AND GPL-2.0 AND GPL-2.0-only)
2
BSD-3-Clause AND MIT
2
Apache-2.0 AND BSD-3-Clause AND MIT
1
Apache-2.0 AND CC-BY-SA-4.0
1
Apache-2.0 AND LicenseRef-scancode-dco-1.1 AND MIT
1
BSD-2-Clause
1
ISC
1
LicenseRef-scancode-unknown-license-reference AND MIT
1
CVE Severity
critical
0
high
2
medium
1
low
1
unknown
1