Skip to content
Tools / KICS / Dependencies

Dependency Analysis

KICS

Direct and transitive dependency freshness, license, and CVE exposure from the latest SBOM.

93% Freshness
396 Dependencies
20 Outdated
0 Stale
3.0 Avg Behind

Dependency List

Latest release v2.1.20

Dependency Type Current Latest Behind CVE License
path-to-regexp
npm
Transitive 0.1.12 8.4.2 5 behind 1 high MIT
github.com/distribution/distribution/v3
golang
Transitive v3.1.0 1 medium Unknown
qs
npm
Transitive 6.14.1 6.15.2 32 behind 1 low BSD-3-Clause
express
npm
Direct 4.22.1 5.2.1 53 behind MIT
mime
npm
Transitive 1.6.0 4.1.0 30 behind MIT
debug
npm
Transitive 2.6.9 4.4.3 25 behind MIT
iconv-lite
npm
Transitive 0.4.24 0.7.2 10 behind MIT
cookie
npm
Transitive 0.7.1 1.1.1 6 behind MIT
ipaddr.js
npm
Transitive 1.9.1 2.4.0 6 behind MIT
array-flatten
npm
Transitive 1.1.1 3.0.0 5 behind MIT
content-disposition
npm
Transitive 0.5.4 2.0.1 5 behind MIT
cookie-signature
npm
Transitive 1.0.6 1.2.2 5 behind MIT
media-typer
npm
Transitive 0.3.0 2.0.0 5 behind MIT
send
npm
Transitive 0.19.0 1.2.1 5 behind MIT
ms
npm
Transitive 2.0.0 2.1.3 4 behind MIT
raw-body
npm
Transitive 2.5.3 3.0.2 4 behind MIT
finalhandler
npm
Transitive 1.3.1 2.1.1 3 behind MIT
mime-types
npm
Transitive 2.1.35 3.0.2 3 behind MIT
serve-static
npm
Transitive 1.16.2 2.2.1 3 behind MIT
type-is
npm
Transitive 1.6.18 2.1.0 3 behind MIT
hasown
npm
Transitive 2.0.2 2.0.4 2 behind MIT
mime-db
npm
Transitive 1.52.0 1.54.0 2 behind MIT
body-parser
npm
Transitive 1.20.4 2.2.2 1 behind MIT
content-type
npm
Transitive 1.0.5 2.0.0 1 behind MIT
encodeurl
npm
Transitive 1.0.2 2.0.0 1 behind MIT
es-object-atoms
npm
Transitive 1.1.1 1.1.2 1 behind MIT
http-errors
npm
Transitive 2.0.0 2.0.1 1 behind MIT
merge-descriptors
npm
Transitive 1.0.3 2.0.0 1 behind MIT
negotiator
npm
Transitive 0.6.3 1.0.0 1 behind MIT
side-channel-list
npm
Transitive 1.0.0 1.0.1 1 behind MIT
statuses
npm
Transitive 2.0.1 2.0.2 1 behind MIT
accepts
npm
Transitive 1.3.8 1.3.8 Current MIT
actions/cache
githubactions
Direct 5a3ec84eff668545956fd18022155c47e93e2684 Unknown
actions/checkout
githubactions
Direct 2.3.4 Unknown
actions/checkout
githubactions
Direct 11bd71901bbe5b1630ceea73d27597364c9af683 Unknown
actions/checkout
githubactions
Direct de0fac2e4500dabe0009e67214ff5f5447ce83dd Unknown
actions/create-release
githubactions
Direct 1.1.4 Unknown
actions/download-artifact
githubactions
Direct 3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c Unknown
actions/setup-go
githubactions
Direct 2 Unknown
actions/setup-go
githubactions
Direct 4b73464bb391d4059bd26b0524d20df3927bd417 Unknown
actions/setup-go
githubactions
Direct 0c52d547c9bc32b1aa3301fd7a9cb496313a4491 Unknown
actions/setup-go
githubactions
Direct 5.*.* Unknown
actions/setup-node
githubactions
Direct 53b83947a5a98c8d113130e565377fae1a50d02f Unknown
actions/setup-python
githubactions
Direct 5.*.* Unknown
actions/setup-python
githubactions
Direct a309ff8b426b58ec0e2a45f0f869d46889d02405 Unknown
actions/upload-artifact
githubactions
Direct ea165f8d65b6e75b540449e92b4886f43607fa02 Unknown
actions/upload-release-asset
githubactions
Direct 1.0.2 Unknown
al-cheb/configure-pagefile-action
githubactions
Direct a3b6ebd6b634da88790d9c58d4b37a7f4a7b8708 Unknown
anchore/scan-action
githubactions
Direct 3c9a191a0fbab285ca6b8530b5de5a642cba332f Unknown
aquasecurity/trivy-action
githubactions
Direct 57a97c7e7821a5776cebc9bb87c984fa69cba8f1 Unknown
aws-actions/configure-aws-credentials
githubactions
Direct ec61189d14ec14c8efccab744f656cffd0e33f37 Unknown
boto3
Direct Unknown
bytes
npm
Transitive 3.1.2 3.1.2 Current MIT
call-bind-apply-helpers
npm
Transitive 1.0.2 1.0.2 Current MIT
call-bound
npm
Transitive 1.0.4 1.0.4 Current MIT
cel.dev/expr
golang
Transitive v0.25.1 Apache-2.0
checkmarx/kics-github-action
githubactions
Direct 4063ea7186bec9fed1bf055e095a4658693f9998 Unknown
cloud.google.com/go
golang
Transitive v0.123.0 Apache-2.0
cloud.google.com/go/auth
golang
Transitive v0.18.2 Apache-2.0
cloud.google.com/go/auth/oauth2adapt
golang
Transitive v0.2.8 Apache-2.0
cloud.google.com/go/compute/metadata
golang
Transitive v0.9.0 Apache-2.0
cloud.google.com/go/iam
golang
Transitive v1.5.3 Apache-2.0
cloud.google.com/go/monitoring
golang
Transitive v1.24.3 Apache-2.0
cloud.google.com/go/storage
golang
Transitive v1.61.3 Apache-2.0
code.cloudfoundry.org/bytefmt
golang
Direct v0.35.0 Apache-2.0 AND LicenseRef-scancode-unknown-license-reference
dario.cat/mergo
golang
Transitive v1.0.1 BSD-3-Clause
depd
npm
Transitive 2.0.0 2.0.0 Current MIT
destroy
npm
Transitive 1.2.0 1.2.0 Current MIT
dev-drprasad/delete-tag-and-release
githubactions
Direct 82600feb9527126eca69833f07bafe53279bd9b4 Unknown
docker/build-push-action
githubactions
Direct 263435318d21b8e681c14492fe198d362a7d2c83 Unknown
docker/login-action
githubactions
Direct 74a5d142397b4f367a81961eba4e8cd7edddf772 Unknown
docker/metadata-action
githubactions
Direct 902fa8ec7d6ecbf8d84d538b9b233a880e428804 Unknown
docker/setup-buildx-action
githubactions
Direct e468171a9de216ec08956ac3ada2f0791b6bd435 Unknown
docker/setup-qemu-action
githubactions
Direct 29109295f81e9208d7d86ff1c6c12d2833863392 Unknown
dorny/paths-filter
githubactions
Direct de90cc6fb38fc0963ad72b210f1f284cd68cea36 Unknown
dunder-proto
npm
Transitive 1.0.1 1.0.1 Current MIT
ee-first
npm
Transitive 1.1.1 1.1.1 Current MIT
encodeurl
npm
Transitive 2.0.0 2.0.0 Current MIT
es-define-property
npm
Transitive 1.0.1 1.0.1 Current MIT
es-errors
npm
Transitive 1.3.0 1.3.0 Current MIT
escape-html
npm
Transitive 1.0.3 1.0.3 Current MIT
etag
npm
Transitive 1.8.1 1.8.1 Current MIT
fkirc/skip-duplicate-actions
githubactions
Direct f75f66ce1886f00957d99748a42c724f4330bdcf Unknown
forwarded
npm
Transitive 0.2.0 0.2.0 Current MIT
fresh
npm
Transitive 0.5.2 0.5.2 Current MIT
function-bind
npm
Transitive 1.1.2 1.1.2 Current MIT
get-intrinsic
npm
Transitive 1.3.0 1.3.0 Current MIT
get-proto
npm
Transitive 1.0.1 1.0.1 Current MIT
github.com/agext/levenshtein
golang
Transitive v1.2.3 Apache-2.0
github.com/agnivade/levenshtein
golang
Direct v1.2.1 MIT
github.com/alexmullins/zip
golang
Direct v0.0.0-20180717182244-4affb64b04d0 MIT
github.com/antlr4-go/antlr/v4
golang
Direct v4.13.1 BSD-3-Clause
github.com/apparentlymart/go-textseg/v15
golang
Transitive v15.0.0 MIT
github.com/asaskevich/govalidator
golang
Transitive v0.0.0-20230301143203-a9d515a09cc2 MIT
github.com/aws/aws-sdk-go-v2
golang
Direct v1.41.5 Apache-2.0
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream
golang
Transitive v1.7.8 Apache-2.0
github.com/aws/aws-sdk-go-v2/config
golang
Transitive v1.32.12 Apache-2.0
github.com/aws/aws-sdk-go-v2/credentials
golang
Transitive v1.19.12 Apache-2.0
github.com/aws/aws-sdk-go-v2/feature/ec2/imds
golang
Transitive v1.18.20 Apache-2.0
github.com/aws/aws-sdk-go-v2/internal/configsources
golang
Transitive v1.4.21 Apache-2.0
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2
golang
Transitive v2.7.21 Apache-2.0
github.com/aws/aws-sdk-go-v2/internal/ini
golang
Transitive v1.8.6 Apache-2.0
github.com/aws/aws-sdk-go-v2/internal/v4a
golang
Transitive v1.4.22 Apache-2.0
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding
golang
Transitive v1.13.7 Apache-2.0
github.com/aws/aws-sdk-go-v2/service/internal/checksum
golang
Transitive v1.9.13 Apache-2.0
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url
golang
Transitive v1.13.21 Apache-2.0
github.com/aws/aws-sdk-go-v2/service/internal/s3shared
golang
Transitive v1.19.21 Apache-2.0
github.com/aws/aws-sdk-go-v2/service/s3
golang
Transitive v1.97.3 Apache-2.0
github.com/aws/aws-sdk-go-v2/service/signin
golang
Transitive v1.0.8 Apache-2.0
github.com/aws/aws-sdk-go-v2/service/sso
golang
Transitive v1.30.13 Apache-2.0
github.com/aws/aws-sdk-go-v2/service/ssooidc
golang
Transitive v1.35.17 Apache-2.0
github.com/aws/aws-sdk-go-v2/service/sts
golang
Transitive v1.41.9 Apache-2.0
github.com/aws/smithy-go
golang
Transitive v1.24.2 Apache-2.0
github.com/azure/go-ansiterm
golang
Transitive v0.0.0-20250102033503-faa5f7b0171c MIT
github.com/beorn7/perks
golang
Transitive v1.0.1 MIT
github.com/bgentry/go-netrc
golang
Transitive v0.0.0-20140422174119-9fd32a8b3d3d MIT
github.com/bigkevmcd/go-configparser
golang
Direct v0.0.0-20230427073640-c6b631f70126 MIT
github.com/blang/semver/v4
golang
Transitive v4.0.0 MIT
github.com/boombuler/barcode
golang
Transitive v1.0.1 MIT
github.com/burntsushi/toml
golang
Direct v1.6.0 MIT
github.com/cespare/xxhash/v2
golang
Transitive v2.3.0 MIT
github.com/chai2010/gettext-go
golang
Transitive v1.0.2 BSD-3-Clause
github.com/cheggaaa/pb/v3
golang
Direct v3.1.7 BSD-3-Clause
github.com/cncf/xds/go
golang
Transitive v0.0.0-20251210132809-ee656c7534f5 Apache-2.0
github.com/containerd/containerd
golang
Transitive v1.7.30 Apache-2.0 AND CC-BY-4.0
github.com/containerd/errdefs
golang
Transitive v1.0.0 Apache-2.0
github.com/containerd/log
golang
Transitive v0.1.0 Apache-2.0
github.com/containerd/platforms
golang
Transitive v1.0.0-rc.2 Apache-2.0
github.com/containerd/typeurl/v2
golang
Transitive v2.2.3 Apache-2.0
github.com/cyphar/filepath-securejoin
golang
Transitive v0.6.1 BSD-3-Clause AND MPL-2.0
github.com/davecgh/go-spew
golang
Transitive v1.1.2-0.20180830191138-d8f796af33cc ISC
github.com/decred/dcrd/dcrec/secp256k1/v4
golang
Transitive v4.4.0 ISC
github.com/emicklei/go-restful/v3
golang
Transitive v3.12.2 MIT
github.com/emicklei/proto
golang
Direct v1.14.0 MIT
github.com/envoyproxy/go-control-plane/envoy
golang
Transitive v1.36.0 Apache-2.0
github.com/envoyproxy/protoc-gen-validate
golang
Transitive v1.3.0 Apache-2.0
github.com/evanphx/json-patch
golang
Transitive v5.9.11+incompatible BSD-3-Clause
github.com/evanphx/json-patch/v5
golang
Transitive v5.9.11 BSD-3-Clause
github.com/exponent-io/jsonpath
golang
Transitive v0.0.0-20210407135951-1de76d718b3f MIT
github.com/fatih/color
golang
Transitive v1.18.0 MIT
github.com/felixge/httpsnoop
golang
Transitive v1.0.4 MIT
github.com/fsnotify/fsnotify
golang
Transitive v1.9.0 BSD-3-Clause
github.com/fxamacker/cbor/v2
golang
Transitive v2.9.0 MIT
github.com/getsentry/sentry-go
golang
Direct v0.31.2-0.20250102155933-f2d4348b0508 Apache-2.0 AND MIT
github.com/go-errors/errors
golang
Transitive v1.4.2 MIT
github.com/go-gorp/gorp/v3
golang
Transitive v3.1.0 MIT
github.com/go-ini/ini
golang
Transitive v1.67.0 Apache-2.0
github.com/go-jose/go-jose/v4
golang
Transitive v4.1.4 Apache-2.0
github.com/go-logr/logr
golang
Transitive v1.4.3 Apache-2.0
github.com/go-logr/stdr
golang
Transitive v1.2.2 Apache-2.0
github.com/go-openapi/jsonpointer
golang
Transitive v0.22.4 Apache-2.0
github.com/go-openapi/jsonreference
golang
Transitive v0.21.4 Apache-2.0
github.com/go-openapi/swag
golang
Transitive v0.25.4 Apache-2.0
github.com/go-openapi/swag/cmdutils
golang
Transitive v0.25.4 Apache-2.0
github.com/go-openapi/swag/conv
golang
Transitive v0.25.4 Apache-2.0
github.com/go-openapi/swag/fileutils
golang
Transitive v0.25.4 Apache-2.0
github.com/go-openapi/swag/jsonname
golang
Transitive v0.25.4 Apache-2.0
github.com/go-openapi/swag/jsonutils
golang
Transitive v0.25.4 Apache-2.0
github.com/go-openapi/swag/loading
golang
Transitive v0.25.4 Apache-2.0
github.com/go-openapi/swag/mangling
golang
Transitive v0.25.4 Apache-2.0
github.com/go-openapi/swag/netutils
golang
Transitive v0.25.4 Apache-2.0
github.com/go-openapi/swag/stringutils
golang
Transitive v0.25.4 Apache-2.0
github.com/go-openapi/swag/typeutils
golang
Transitive v0.25.4 Apache-2.0
github.com/go-openapi/swag/yamlutils
golang
Transitive v0.25.4 Apache-2.0
github.com/go-viper/mapstructure/v2
golang
Transitive v2.4.0 MIT
github.com/gobwas/glob
golang
Transitive v0.2.3 MIT
github.com/gocarina/gocsv
golang
Direct v0.0.0-20240520201108-78e41c74b4b1 MIT
github.com/goccy/go-json
golang
Transitive v0.10.5 MIT
github.com/gogo/protobuf
golang
Transitive v1.3.2 BSD-3-Clause
github.com/golang/mock
golang
Direct v1.6.0 Apache-2.0
github.com/golangci/golangci-lint
golang
Direct 1.37.1 GPL-3.0 AND GPL-3.0-only
github.com/google/btree
golang
Transitive v1.1.3 Apache-2.0
github.com/google/gnostic-models
golang
Transitive v0.7.0 Apache-2.0
github.com/google/go-cmp
golang
Transitive v0.7.0 BSD-3-Clause
github.com/google/pprof
golang
Direct v0.0.0-20250820193118-f64d9cf942d6 Apache-2.0
github.com/google/s2a-go
golang
Transitive v0.1.9 Apache-2.0
github.com/google/shlex
golang
Transitive v0.0.0-20191202100458-e7afc7fbc510 Apache-2.0
github.com/google/uuid
golang
Direct v1.6.0 BSD-3-Clause
github.com/googleapis/enterprise-certificate-proxy
golang
Transitive v0.3.14 Apache-2.0
github.com/googleapis/gax-go/v2
golang
Transitive v2.17.0 BSD-3-Clause
github.com/googlecloudplatform/opentelemetry-operations-go/detectors/gcp
golang
Transitive v1.31.0 Apache-2.0
github.com/googlecloudplatform/opentelemetry-operations-go/exporter/metric
golang
Transitive v0.55.0 Apache-2.0
github.com/googlecloudplatform/opentelemetry-operations-go/internal/resourcemapping
golang
Transitive v0.55.0 Apache-2.0
github.com/gookit/color
golang
Direct v1.5.4 MIT
github.com/goreleaser/goreleaser
golang
Direct 0.159.0 MIT
github.com/gosuri/uitable
golang
Transitive v0.0.4 MIT
github.com/gregjones/httpcache
golang
Transitive v0.0.0-20190611155906-901d90724c79 MIT
github.com/hashicorp/aws-sdk-go-base/v2
golang
Transitive v2.0.0-beta.72 MPL-2.0
github.com/hashicorp/errwrap
golang
Transitive v1.1.0 MPL-2.0
github.com/hashicorp/go-cleanhttp
golang
Transitive v0.5.2 MPL-2.0
github.com/hashicorp/go-getter
golang
Direct v1.8.6 MPL-2.0
github.com/hashicorp/go-multierror
golang
Transitive v1.1.1 MPL-2.0
github.com/hashicorp/go-version
golang
Transitive v1.8.0 MPL-2.0
github.com/hashicorp/hcl
golang
Direct v1.0.0 MPL-2.0
github.com/hashicorp/hcl/v2
golang
Direct v2.23.0 MPL-2.0
github.com/hashicorp/terraform-json
golang
Direct v0.24.0 MPL-2.0
github.com/huandu/xstrings
golang
Transitive v1.5.0 MIT
github.com/inconshreveable/mousetrap
golang
Transitive v1.1.0 Apache-2.0
github.com/jmoiron/sqlx
golang
Transitive v1.4.0 MIT
github.com/johnfercher/maroto
golang
Direct v1.0.0 MIT
github.com/json-iterator/go
golang
Transitive v1.1.12 MIT
github.com/jung-kurt/gofpdf
golang
Transitive v1.16.3-0.20210918000319-0c885ad36193 Unknown
github.com/klauspost/compress
golang
Transitive v1.18.5 Apache-2.0 AND BSD-3-Clause AND MIT
github.com/lann/builder
golang
Transitive v0.0.0-20180802200727-47ae307949d0 MIT
github.com/lann/ps
golang
Transitive v0.0.0-20150810152359-62de8c46ede0 MIT
github.com/lestrrat-go/blackmagic
golang
Transitive v1.0.4 MIT
github.com/lestrrat-go/dsig
golang
Transitive v1.0.0 MIT
github.com/lestrrat-go/dsig-secp256k1
golang
Transitive v1.0.0 MIT
github.com/lestrrat-go/httpcc
golang
Transitive v1.0.1 MIT
github.com/lestrrat-go/httprc/v3
golang
Transitive v3.0.1 MIT
github.com/lestrrat-go/jwx/v3
golang
Transitive v3.0.12 MIT
github.com/lestrrat-go/option
golang
Transitive v1.0.1 MIT
github.com/lestrrat-go/option/v2
golang
Transitive v2.0.0 MIT
github.com/lib/pq
golang
Transitive v1.10.9 MIT
github.com/liggitt/tabwriter
golang
Transitive v0.0.0-20181228230101-89fcab3d43de BSD-3-Clause
github.com/mackerelio/go-osstat
golang
Direct v0.2.5 Apache-2.0
github.com/makenowjust/heredoc
golang
Transitive v1.0.0 MIT
github.com/masterminds/goutils
golang
Transitive v1.1.1 Apache-2.0
github.com/masterminds/semver/v3
golang
Transitive v3.4.0 MIT
github.com/masterminds/sprig/v3
golang
Transitive v3.3.0 MIT
github.com/masterminds/squirrel
golang
Transitive v1.5.4 MIT
github.com/mattn/go-colorable
golang
Transitive v0.1.14 MIT
github.com/mattn/go-colorable
golang
Transitive v0.1.13 MIT
github.com/mattn/go-isatty
golang
Transitive v0.0.20 MIT
github.com/mattn/go-isatty
golang
Transitive v0.0.19 MIT
github.com/mattn/go-runewidth
golang
Transitive v0.0.16 MIT
github.com/mitchellh/copystructure
golang
Transitive v1.2.0 MIT
github.com/mitchellh/go-homedir
golang
Transitive v1.1.0 MIT
github.com/mitchellh/go-wordwrap
golang
Transitive v1.0.1 MIT
github.com/mitchellh/reflectwalk
golang
Transitive v1.0.2 MIT
github.com/moby/buildkit
golang
Direct v0.28.1 Unknown
github.com/moby/term
golang
Transitive v0.5.2 Apache-2.0
github.com/modern-go/concurrent
golang
Transitive v0.0.0-20180306012644-bacd9c7ef1dd Apache-2.0
github.com/modern-go/reflect2
golang
Transitive v1.0.3-0.20250322232337-35a7c28c31ee Apache-2.0
github.com/monochromegane/go-gitignore
golang
Transitive v0.0.0-20200626010858-205db1a8cc00 MIT
github.com/munnerz/goautoneg
golang
Transitive v0.0.0-20191010083416-a7dc8b61c822 BSD-3-Clause
github.com/open-policy-agent/opa
golang
Direct v1.12.3 Unknown
github.com/opencontainers/go-digest
golang
Transitive v1.0.0 Apache-2.0 AND CC-BY-SA-4.0
github.com/opencontainers/image-spec
golang
Transitive v1.1.1 Apache-2.0 AND LicenseRef-scancode-dco-1.1 AND MIT
github.com/pelletier/go-toml/v2
golang
Transitive v2.2.4 MIT
github.com/peterbourgon/diskv
golang
Transitive v2.0.1+incompatible MIT
github.com/pkg/errors
golang
Direct v0.9.1 BSD-2-Clause
github.com/planetscale/vtprotobuf
golang
Transitive v0.6.1-0.20240319094008-0393e58bdf10 BSD-3-Clause
github.com/pmezard/go-difflib
golang
Transitive v1.0.1-0.20181226105442-5d4384ee4fb2 BSD-3-Clause
github.com/prometheus/client_golang
golang
Transitive v1.23.2 Apache-2.0
github.com/prometheus/client_model
golang
Transitive v0.6.2 Apache-2.0
github.com/prometheus/common
golang
Transitive v0.67.5 Apache-2.0
github.com/prometheus/procfs
golang
Transitive v0.20.1 Unknown
github.com/rcrowley/go-metrics
golang
Transitive v0.0.0-20250401214520-65e299d6c5c9 BSD-2-Clause-Views
github.com/relex/aini
golang
Direct v1.6.0 MIT
github.com/rivo/uniseg
golang
Transitive v0.4.7 MIT
github.com/rs/zerolog
golang
Direct v1.34.0 MIT
github.com/rs/zerolog
golang
Direct v1.31.0 MIT
github.com/rubenv/sql-migrate
golang
Transitive v1.8.1 MIT
github.com/russross/blackfriday/v2
golang
Transitive v2.1.0 BSD-2-Clause
github.com/ruudk/golang-pdf417
golang
Transitive v0.0.0-20201230142125-a7e3863a1245 MIT
github.com/sabhiram/go-gitignore
golang
Direct v0.0.0-20210923224102-525f6e181f06 MIT
github.com/sagikazarmark/locafero
golang
Transitive v0.11.0 MIT
github.com/samber/lo
golang
Transitive v1.38.1 MIT
github.com/santhosh-tekuri/jsonschema/v6
golang
Transitive v6.0.2 Apache-2.0
github.com/segmentio/asm
golang
Transitive v1.2.1 MIT-0
github.com/shopspring/decimal
golang
Transitive v1.4.0 MIT
github.com/sirupsen/logrus
golang
Transitive v1.9.4 MIT
github.com/sosedoff/ansible-vault-go
golang
Direct v0.2.0 MIT
github.com/sourcegraph/conc
golang
Transitive v0.3.1-0.20240121214520-5f936abd7ae8 MIT
github.com/spf13/afero
golang
Transitive v1.15.0 Apache-2.0
github.com/spf13/cast
golang
Transitive v1.10.0 MIT
github.com/spf13/cobra
golang
Direct v1.10.2 Apache-2.0
github.com/spf13/pflag
golang
Direct v1.0.10 BSD-3-Clause
github.com/spf13/viper
golang
Direct v1.21.0 MIT
github.com/spiffe/go-spiffe/v2
golang
Transitive v2.6.0 Apache-2.0
github.com/stretchr/testify
golang
Direct v1.11.1 MIT
github.com/subosito/gotenv
golang
Transitive v1.6.0 MIT
github.com/tchap/go-patricia/v2
golang
Transitive v2.3.3 MIT
github.com/tdewolff/minify/v2
golang
Direct v2.23.1 MIT
github.com/tdewolff/minify/v2
golang
Direct v2.9.21 Unknown
github.com/tdewolff/parse/v2
golang
Transitive v2.7.23 MIT
github.com/tdewolff/parse/v2
golang
Transitive v2.5.19 MIT
github.com/tidwall/gjson
golang
Direct v1.18.0 MIT
github.com/tidwall/match
golang
Transitive v1.1.1 MIT
github.com/tidwall/pretty
golang
Transitive v1.2.1 MIT
github.com/ulikunitz/xz
golang
Transitive v0.5.15 BSD-3-Clause
github.com/valyala/fastjson
golang
Transitive v1.6.4 MIT
github.com/vektah/gqlparser/v2
golang
Transitive v2.5.31 MIT
github.com/vividcortex/ewma
golang
Transitive v1.2.0 MIT
github.com/x448/float16
golang
Transitive v0.8.4 MIT
github.com/xeipuuv/gojsonpointer
golang
Transitive v0.0.0-20190905194746-02993c407bfb Apache-2.0
github.com/xeipuuv/gojsonreference
golang
Transitive v0.0.0-20180127040603-bd5ef7bd5415 Apache-2.0
github.com/xeipuuv/gojsonschema
golang
Direct v1.2.0 Apache-2.0
github.com/xlab/treeprint
golang
Transitive v1.2.0 MIT
github.com/xo/terminfo
golang
Transitive v0.0.0-20210125001918-ca9a967f8778 MIT
github.com/yargevad/filepathx
golang
Direct v1.0.0 MIT
github.com/yashtewari/glob-intersection
golang
Transitive v0.2.0 Apache-2.0
github.com/zclconf/go-cty
golang
Direct v1.16.2 MIT
github/codeql-action/upload-sarif
githubactions
Direct 4c3e5362829f0b0bb62ff5f6c938d7f95574c306 Unknown
go.opentelemetry.io/auto/sdk
golang
Transitive v1.2.1 Apache-2.0
go.opentelemetry.io/contrib/detectors/gcp
golang
Transitive v1.39.0 Apache-2.0 AND BSD-3-Clause
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
golang
Transitive v0.63.0 Apache-2.0 AND BSD-3-Clause
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
golang
Transitive v0.67.0 Apache-2.0 AND BSD-3-Clause
go.opentelemetry.io/otel
golang
Transitive v1.43.0 Apache-2.0 AND BSD-3-Clause
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp
golang
Transitive v0.19.0 Unknown
go.opentelemetry.io/otel/exporters/stdout/stdoutmetric
golang
Transitive v1.42.0 Apache-2.0 AND BSD-3-Clause
go.opentelemetry.io/otel/metric
golang
Transitive v1.43.0 Apache-2.0 AND BSD-3-Clause
go.opentelemetry.io/otel/sdk
golang
Transitive v1.43.0 Apache-2.0 AND BSD-3-Clause
go.opentelemetry.io/otel/sdk/log
golang
Transitive v0.19.0 Unknown
go.opentelemetry.io/otel/sdk/metric
golang
Transitive v1.43.0 Apache-2.0 AND BSD-3-Clause
go.opentelemetry.io/otel/trace
golang
Transitive v1.43.0 Apache-2.0 AND BSD-3-Clause
go.opentelemetry.io/proto/otlp
golang
Transitive v1.10.0 Apache-2.0
go.yaml.in/yaml/v2
golang
Transitive v2.4.3 Apache-2.0 AND MIT
go.yaml.in/yaml/v3
golang
Transitive v3.0.4 Apache-2.0 AND MIT
golang.org/x/crypto
golang
Transitive v0.49.0 BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang
golang.org/x/exp
golang
Direct v0.0.0-20250911091902-df9299821621 BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang
golang.org/x/mod
golang
Transitive v0.33.0 BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang
golang.org/x/net
golang
Direct v0.52.0 1 unknown BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang
golang.org/x/oauth2
golang
Transitive v0.36.0 BSD-3-Clause
golang.org/x/sync
golang
Transitive v0.20.0 BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang
golang.org/x/sys
golang
Transitive v0.42.0 BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang
golang.org/x/sys
golang
Transitive v0.12.0 BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang
golang.org/x/term
golang
Transitive v0.41.0 BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang
golang.org/x/text
golang
Direct v0.35.0 BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang
golang.org/x/time
golang
Transitive v0.15.0 BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang
golang.org/x/tools
golang
Transitive v0.42.0 BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang
golang.org/x/tools/godoc
golang
Direct v0.1.0-deprecated BSD-3-Clause
golangci/golangci-lint-action
githubactions
Direct 1e7e51e771db61008b38414a730f564565cf7c20 Unknown
google.golang.org/api
golang
Transitive v0.271.0 BSD-3-Clause
google.golang.org/genproto
golang
Transitive v0.0.0-20260128011058-8636f8732409 Apache-2.0
google.golang.org/genproto/googleapis/api
golang
Transitive v0.0.0-20260401024825-9d38bb4040a9 Apache-2.0
google.golang.org/genproto/googleapis/rpc
golang
Transitive v0.0.0-20260401024825-9d38bb4040a9 Apache-2.0
google.golang.org/grpc
golang
Transitive v1.80.0 Apache-2.0
google.golang.org/protobuf
golang
Transitive v1.36.11 BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang
gopd
npm
Transitive 1.2.0 1.2.0 Current MIT
gopkg.in/evanphx/json-patch.v4
golang
Transitive v4.13.0 BSD-3-Clause
gopkg.in/inf.v0
golang
Transitive v0.9.1 BSD-3-Clause
gopkg.in/yaml.v3
golang
Direct v3.0.1 Apache-2.0
goreleaser/goreleaser-action
githubactions
Direct 2.8.1 Unknown
goreleaser/goreleaser-action
githubactions
Direct 9c156ee8a17a598857849441385a2041ef570552 Unknown
has-symbols
npm
Transitive 1.1.0 1.1.0 Current MIT
helm.sh/helm/v3
golang
Direct v3.20.2 Unknown
http-errors
npm
Transitive 2.0.1 2.0.1 Current MIT
ibiqlik/action-yamllint
githubactions
Direct 2576378a8e339169678f9939646ee3ee325e845c Unknown
inherits
npm
Transitive 2.0.4 2.0.4 Current ISC
jinja2
Direct >= 2.10.1 Unknown
k8s.io/api
golang
Direct v0.35.1 Apache-2.0
k8s.io/apiextensions-apiserver
golang
Transitive v0.35.1 Apache-2.0
k8s.io/apimachinery
golang
Direct v0.35.1 Apache-2.0
k8s.io/apiserver
golang
Transitive v0.35.1 Unknown
k8s.io/cli-runtime
golang
Transitive v0.35.1 Unknown
k8s.io/client-go
golang
Direct v0.35.1 Apache-2.0
k8s.io/component-base
golang
Transitive v0.35.1 Unknown
k8s.io/klog/v2
golang
Transitive v2.130.1 Apache-2.0
k8s.io/kube-openapi
golang
Transitive v0.0.0-20250910181357-589584f1c912 Apache-2.0
k8s.io/kubectl
golang
Transitive v0.35.1 Unknown
k8s.io/utils
golang
Transitive v0.0.0-20251002143259-bc988d571ff4 Apache-2.0
lots0logs/gh-action-get-changed-files
githubactions
Direct 6cb5164a823dbf3318b7c8032a333b4b7ed425b2 Unknown
math-intrinsics
npm
Transitive 1.1.0 1.1.0 Current MIT
methods
npm
Transitive 1.1.2 1.1.2 Current MIT
ms
npm
Transitive 2.1.3 2.1.3 Current MIT
mvdan.cc/sh/v3
golang
Direct v3.11.0 BSD-3-Clause
object-inspect
npm
Transitive 1.13.4 1.13.4 Current MIT
on-finished
npm
Transitive 2.4.1 2.4.1 Current MIT
oras.land/oras-go/v2
golang
Transitive v2.6.0 Apache-2.0
parseurl
npm
Transitive 1.3.3 1.3.3 Current MIT
peter-evans/create-pull-request
githubactions
Direct 271a8d0340265f705b14b6d32b9829c1cb33d45e Unknown
peter-evans/repository-dispatch
githubactions
Direct ff45666b9427631e3450c54a1bcbee4d9ff4d7c0 Unknown
proxy-addr
npm
Transitive 2.0.7 2.0.7 Current MIT
range-parser
npm
Transitive 1.2.1 1.2.1 Current MIT
requests
Direct Unknown
safe-buffer
npm
Transitive 5.2.1 5.2.1 Current MIT
safer-buffer
npm
Transitive 2.1.2 2.1.2 Current MIT
securego/gosec
githubactions
Direct d2d3ae66bd8d340b78b5142b6fe610691783c2fe Unknown
setprototypeof
npm
Transitive 1.2.0 1.2.0 Current ISC
side-channel
npm
Transitive 1.1.0 1.1.0 Current MIT
side-channel-map
npm
Transitive 1.0.1 1.0.1 Current MIT
side-channel-weakmap
npm
Transitive 1.0.2 1.0.2 Current MIT
sigs.k8s.io/controller-runtime
golang
Direct v0.14.6 Apache-2.0
sigs.k8s.io/json
golang
Transitive v0.0.0-20250730193827-2d320260d730 Apache-2.0 AND BSD-3-Clause
sigs.k8s.io/kustomize/api
golang
Transitive v0.20.1 Apache-2.0
sigs.k8s.io/kustomize/kyaml
golang
Transitive v0.20.1 Apache-2.0
sigs.k8s.io/randfill
golang
Transitive v1.0.0 Apache-2.0
sigs.k8s.io/structured-merge-diff/v6
golang
Transitive v6.3.0 Apache-2.0
sigs.k8s.io/yaml
golang
Transitive v1.6.0 Apache-2.0 AND BSD-3-Clause AND MIT
SonarSource/sonarcloud-github-action
githubactions
Direct master Unknown
statuses
npm
Transitive 2.0.2 2.0.2 Current MIT
styfle/cancel-workflow-action
githubactions
Direct 85880fa0301c86cca9da44039ee3bb12d3bedbfa Unknown
svenstaro/upload-release-action
githubactions
Direct 29e53e917877a24fad85510ded594ab3c9ca12de Unknown
tabulate
pypi
Direct 0.8.9 MIT
tabulate
Direct Unknown
thollander/actions-comment-pull-request
githubactions
Direct e4a76dd2b0a3c2027c3fd84147a67c22ee4c90fa Unknown
tj-actions/verify-changed-files
githubactions
Direct a1c6acee9df209257a246f2cc6ae8cb6581c1edf Unknown
toidentifier
npm
Transitive 1.0.1 1.0.1 Current MIT
toko-bifrost/ms-teams-deploy-card
githubactions
Direct master Unknown
toko-bifrost/ms-teams-deploy-card
githubactions
Direct dcc94e4ce4088b1e6b6de5c9a3cda4ddcbe97d2e Unknown
unpipe
npm
Transitive 1.0.0 1.0.0 Current MIT
utils-merge
npm
Transitive 1.0.1 1.0.1 Current MIT
vary
npm
Transitive 1.1.2 1.1.2 Current MIT

License Breakdown

MIT 160
Apache-2.0 100
Unknown 61
BSD-3-Clause 24
BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang 12
Apache-2.0 AND BSD-3-Clause 10
MPL-2.0 9
ISC 4
Apache-2.0 AND MIT 3
Apache-2.0 AND BSD-3-Clause AND MIT 2
BSD-2-Clause 2
Apache-2.0 AND CC-BY-4.0 1
Apache-2.0 AND CC-BY-SA-4.0 1
Apache-2.0 AND LicenseRef-scancode-dco-1.1 AND MIT 1
Apache-2.0 AND LicenseRef-scancode-unknown-license-reference 1
BSD-2-Clause-Views 1
BSD-3-Clause AND MPL-2.0 1
GPL-3.0 AND GPL-3.0-only 1
MIT-0 1

CVE Severity

critical 0
high 1
medium 1
low 1
unknown 1

Beta — feedback welcome: [email protected]