Dependency Analysis
soft-serve
Direct and transitive dependency freshness, license, and CVE exposure from the latest SBOM.
100%
Freshness
106
Dependencies
0
Outdated
0
Stale
—
Avg Behind
Dependency List
Latest release v0.11.6
| Dependency | Type | Current | Latest | Behind | CVE | License |
|---|---|---|---|---|---|---|
|
actions/checkout
githubactions
|
Direct | 6.*.* | — | — | — | Unknown |
|
actions/setup-go
githubactions
|
Direct | 6.*.* | — | — | — | Unknown |
|
charm.land/bubbles/v2
golang
|
Direct | v2.1.0 | — | — | — | Unknown |
|
charm.land/bubbletea/v2
golang
|
Direct | v2.0.6 | — | — | — | Unknown |
|
charm.land/glamour/v2
golang
|
Direct | v2.0.0 | — | — | — | Unknown |
|
charm.land/lipgloss/v2
golang
|
Direct | v2.0.3 | — | — | — | Unknown |
|
charm.land/log/v2
golang
|
Direct | v2.0.0 | — | — | — | Unknown |
|
charm.land/wish/v2
golang
|
Direct | v2.0.1 | — | — | — | Unknown |
|
charmbracelet/meta/.github/workflows/build.yml
githubactions
|
Direct | main | — | — | — | Unknown |
|
charmbracelet/meta/.github/workflows/dependabot-sync.yml
githubactions
|
Direct | main | — | — | — | Unknown |
|
charmbracelet/meta/.github/workflows/goreleaser.yml
githubactions
|
Direct | main | — | — | — | Unknown |
|
charmbracelet/meta/.github/workflows/lint-sync.yml
githubactions
|
Direct | main | — | — | — | Unknown |
|
charmbracelet/meta/.github/workflows/lint.yml
githubactions
|
Direct | main | — | — | — | Unknown |
|
charmbracelet/meta/.github/workflows/nightly.yml
githubactions
|
Direct | main | — | — | — | Unknown |
|
charmbracelet/meta/.github/workflows/snapshot.yml
githubactions
|
Direct | main | — | — | — | Unknown |
|
codecov/codecov-action
githubactions
|
Direct | 6.*.* | — | — | — | Unknown |
|
github.com/alecthomas/chroma/v2
golang
|
Direct | v2.24.1 | — | — | — | Unknown |
|
github.com/anmitsu/go-shlex
golang
|
Transitive | v0.0.0-20200514113438-38f4b401e2be | — | — | — | MIT |
|
github.com/atotto/clipboard
golang
|
Transitive | v0.1.4 | — | — | — | BSD-3-Clause |
|
github.com/aymanbagabas/git-module
golang
|
Direct | v1.8.4-0.20250826192401-1f81c5471e53 | — | — | — | MIT |
|
github.com/aymerick/douceur
golang
|
Transitive | v0.2.0 | — | — | — | MIT |
|
github.com/beorn7/perks
golang
|
Transitive | v1.0.1 | — | — | — | MIT |
|
github.com/caarlos0/duration
golang
|
Direct | v0.0.0-20240108180406-5d492514f3c7 | — | — | — | Unknown |
|
github.com/caarlos0/env/v11
golang
|
Direct | v11.4.1 | — | — | — | Unknown |
|
github.com/cespare/xxhash/v2
golang
|
Transitive | v2.3.0 | — | — | — | MIT |
|
github.com/charmbracelet/colorprofile
golang
|
Direct | v0.4.3 | — | — | — | Unknown |
|
github.com/charmbracelet/git-lfs-transfer
golang
|
Direct | v0.1.1-0.20240708204110-bacbfdb68d92 | — | — | — | MIT |
|
github.com/charmbracelet/keygen
golang
|
Direct | v0.5.4 | — | — | — | MIT |
|
github.com/charmbracelet/ssh
golang
|
Direct | v0.0.0-20250826160808-ebfa259c7309 | — | — | — | BSD-3-Clause |
|
github.com/charmbracelet/ultraviolet
golang
|
Transitive | v0.0.0-20260416155717-489999b90468 | — | — | — | Unknown |
|
github.com/charmbracelet/x/ansi
golang
|
Direct | v0.11.7 | — | — | — | Unknown |
|
github.com/charmbracelet/x/conpty
golang
|
Transitive | v0.1.1 | — | — | — | MIT |
|
github.com/charmbracelet/x/errors
golang
|
Transitive | v0.0.0-20251110184232-6ab307057ac7 | — | — | — | MIT |
|
github.com/charmbracelet/x/exp/slice
golang
|
Transitive | v0.0.0-20250327172914-2fdc97757edf | — | — | — | MIT |
|
github.com/charmbracelet/x/term
golang
|
Transitive | v0.2.2 | — | — | — | MIT |
|
github.com/charmbracelet/x/termios
golang
|
Transitive | v0.1.1 | — | — | — | MIT |
|
github.com/charmbracelet/x/windows
golang
|
Transitive | v0.2.2 | — | — | — | MIT |
|
github.com/clipperhouse/displaywidth
golang
|
Transitive | v0.11.0 | — | — | — | MIT |
|
github.com/clipperhouse/uax29/v2
golang
|
Transitive | v2.7.0 | — | — | — | MIT |
|
github.com/creack/pty
golang
|
Transitive | v1.1.24 | — | — | — | MIT |
|
github.com/dlclark/regexp2
golang
|
Transitive | v1.12.0 | — | — | — | Unknown |
|
github.com/dustin/go-humanize
golang
|
Direct | v1.0.1 | — | — | — | MIT |
|
github.com/felixge/httpsnoop
golang
|
Transitive | v1.0.4 | — | — | — | MIT |
|
github.com/git-lfs/pktline
golang
|
Transitive | v0.0.0-20230103162542-ca444d533ef1 | — | — | — | MIT |
|
github.com/go-git/gcfg
golang
|
Transitive | v1.5.1-0.20230307220236-3a3c6141e376 | — | — | — | BSD-3-Clause |
|
github.com/go-git/go-git/v5
golang
|
Direct | v5.18.0 | — | — | — | Apache-2.0 |
|
github.com/go-jose/go-jose/v3
golang
|
Direct | v3.0.5 | — | — | — | Unknown |
|
github.com/go-logfmt/logfmt
golang
|
Transitive | v0.6.1 | — | — | — | MIT |
|
github.com/gobwas/glob
golang
|
Direct | v0.2.3 | — | — | — | MIT |
|
github.com/golang-jwt/jwt/v5
golang
|
Direct | v5.3.1 | — | — | — | MIT |
|
github.com/google/go-querystring
golang
|
Direct | v1.2.0 | — | — | — | BSD-3-Clause |
|
github.com/google/uuid
golang
|
Direct | v1.6.0 | — | — | — | BSD-3-Clause |
|
github.com/gorilla/css
golang
|
Transitive | v1.0.1 | — | — | — | BSD-3-Clause |
|
github.com/gorilla/handlers
golang
|
Direct | v1.5.2 | — | — | — | BSD-3-Clause |
|
github.com/gorilla/mux
golang
|
Direct | v1.8.1 | — | — | — | BSD-3-Clause |
|
github.com/hashicorp/golang-lru/v2
golang
|
Direct | v2.0.7 | — | — | — | MPL-2.0 |
|
github.com/inconshreveable/mousetrap
golang
|
Transitive | v1.1.0 | — | — | — | Apache-2.0 |
|
github.com/jmoiron/sqlx
golang
|
Direct | v1.4.0 | — | — | — | MIT |
|
github.com/lib/pq
golang
|
Direct | v1.12.3 | — | — | — | MIT |
|
github.com/lrstanley/bubblezone/v2
golang
|
Direct | v2.0.0 | — | — | — | Unknown |
|
github.com/lucasb-eyer/go-colorful
golang
|
Transitive | v1.4.0 | — | — | — | Unknown |
|
github.com/matryer/is
golang
|
Direct | v1.4.1 | — | — | — | MIT |
|
github.com/mattn/go-isatty
golang
|
Transitive | v0.0.20 | — | — | — | MIT |
|
github.com/mattn/go-runewidth
golang
|
Transitive | v0.0.23 | — | — | — | Unknown |
|
github.com/mcuadros/go-version
golang
|
Transitive | v0.0.0-20190830083331-035f6764e8d2 | — | — | — | MIT |
|
github.com/microcosm-cc/bluemonday
golang
|
Transitive | v1.0.27 | — | — | — | BSD-3-Clause |
|
github.com/muesli/cancelreader
golang
|
Transitive | v0.2.2 | — | — | — | MIT |
|
github.com/muesli/mango
golang
|
Transitive | v0.2.0 | — | — | — | MIT |
|
github.com/muesli/mango-cobra
golang
|
Direct | v1.3.0 | — | — | — | MIT |
|
github.com/muesli/mango-pflag
golang
|
Transitive | v0.1.0 | — | — | — | MIT |
|
github.com/muesli/reflow
golang
|
Direct | v0.3.0 | — | — | — | MIT |
|
github.com/muesli/roff
golang
|
Direct | v0.1.0 | — | — | — | MIT |
|
github.com/munnerz/goautoneg
golang
|
Transitive | v0.0.0-20191010083416-a7dc8b61c822 | — | — | — | BSD-3-Clause |
|
github.com/ncruces/go-strftime
golang
|
Transitive | v1.0.0 | — | — | — | MIT |
|
github.com/prometheus/client_golang
golang
|
Direct | v1.23.2 | — | — | — | Apache-2.0 |
|
github.com/prometheus/client_model
golang
|
Transitive | v0.6.2 | — | — | — | Apache-2.0 |
|
github.com/prometheus/common
golang
|
Transitive | v0.66.1 | — | — | — | Apache-2.0 |
|
github.com/prometheus/procfs
golang
|
Transitive | v0.16.1 | — | — | — | Apache-2.0 |
|
github.com/remyoudompheng/bigfft
golang
|
Transitive | v0.0.0-20230129092748-24d4a6f8daec | — | — | — | BSD-3-Clause |
|
github.com/rivo/uniseg
golang
|
Transitive | v0.4.7 | — | — | — | MIT |
|
github.com/robfig/cron/v3
golang
|
Direct | v3.0.1 | — | — | — | MIT |
|
github.com/rogpeppe/go-internal
golang
|
Direct | v1.14.1 | — | — | — | BSD-3-Clause |
|
github.com/sahilm/fuzzy
golang
|
Transitive | v0.1.1 | — | — | — | MIT |
|
github.com/sergi/go-diff
golang
|
Direct | v1.4.0 | — | — | — | Apache-2.0 AND MIT |
|
github.com/spf13/cobra
golang
|
Direct | v1.10.2 | — | — | — | Apache-2.0 |
|
github.com/spf13/pflag
golang
|
Transitive | v1.0.9 | — | — | — | BSD-3-Clause |
|
github.com/xo/terminfo
golang
|
Transitive | v0.0.0-20220910002029-abceb7e1c41e | — | — | — | MIT |
|
github.com/yuin/goldmark
golang
|
Transitive | v1.7.8 | — | — | — | MIT |
|
github.com/yuin/goldmark-emoji
golang
|
Transitive | v1.0.5 | — | — | — | MIT |
|
go.uber.org/automaxprocs
golang
|
Direct | v1.6.0 | — | — | — | MIT |
|
go.yaml.in/yaml/v2
golang
|
Transitive | v2.4.2 | — | — | — | Apache-2.0 AND MIT |
|
golang.org/x/crypto
golang
|
Direct | v0.50.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/exp
golang
|
Transitive | v0.0.0-20251023183803-a4bb9ffd2546 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/net
golang
|
Transitive | v0.52.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/sync
golang
|
Direct | v0.20.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/sys
golang
|
Transitive | v0.43.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/text
golang
|
Transitive | v0.36.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/tools
golang
|
Transitive | v0.43.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
google.golang.org/protobuf
golang
|
Transitive | v1.36.8 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
gopkg.in/warnings.v0
golang
|
Transitive | v0.1.2 | — | — | — | BSD-2-Clause |
|
gopkg.in/yaml.v3
golang
|
Direct | v3.0.1 | — | — | — | Apache-2.0 |
|
modernc.org/libc
golang
|
Transitive | v1.72.0 | — | — | — | Unknown |
|
modernc.org/mathutil
golang
|
Transitive | v1.7.1 | — | — | — | BSD-3-Clause |
|
modernc.org/memory
golang
|
Transitive | v1.11.0 | — | — | — | BSD-3-Clause |
|
modernc.org/sqlite
golang
|
Direct | v1.50.0 | — | — | — | Unknown |
License Breakdown
MIT
41
Unknown
29
BSD-3-Clause
15
Apache-2.0
8
BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang
8
Apache-2.0 AND MIT
2
BSD-2-Clause
1
MPL-2.0
1
CVE Severity
critical
0
high
0
medium
0
low
0
unknown
0