Dependency Analysis
unpackerr
Direct and transitive dependency freshness, license, and CVE exposure from the latest SBOM.
100%
Freshness
77
Dependencies
0
Outdated
0
Stale
—
Avg Behind
Dependency List
Latest release v0.15.2
| Dependency | Type | Current | Latest | Behind | CVE | License |
|---|---|---|---|---|---|---|
|
golang.org/x/image
golang
|
Transitive | v0.23.0 | — | — | 3 medium | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
actions/checkout
githubactions
|
Direct | 6.*.* | — | — | — | Unknown |
|
actions/download-artifact
githubactions
|
Direct | 8.*.* | — | — | — | Unknown |
|
actions/setup-go
githubactions
|
Direct | 6.*.* | — | — | — | Unknown |
|
actions/upload-artifact
githubactions
|
Direct | 7.*.* | — | — | — | Unknown |
|
code.cloudfoundry.org/bytefmt
golang
|
Direct | v0.65.0 | — | — | — | Unknown |
|
docker/build-push-action
githubactions
|
Direct | 7.*.* | — | — | — | Unknown |
|
docker/login-action
githubactions
|
Direct | 4.*.* | — | — | — | Unknown |
|
docker/metadata-action
githubactions
|
Direct | 6.*.* | — | — | — | Unknown |
|
docker/setup-buildx-action
githubactions
|
Direct | 4.*.* | — | — | — | Unknown |
|
docker/setup-qemu-action
githubactions
|
Direct | 4.*.* | — | — | — | Unknown |
|
github.com/akavel/rsrc
golang
|
Transitive | v0.10.2 | — | — | — | MIT |
|
github.com/andybalholm/brotli
golang
|
Transitive | v1.2.0 | — | — | — | MIT |
|
github.com/beorn7/perks
golang
|
Transitive | v1.0.1 | — | — | — | MIT |
|
github.com/bodgit/plumbing
golang
|
Transitive | v1.3.0 | — | — | — | BSD-3-Clause |
|
github.com/bodgit/sevenzip
golang
|
Transitive | v1.6.1 | — | — | — | BSD-3-Clause |
|
github.com/bodgit/windows
golang
|
Transitive | v1.0.1 | — | — | — | BSD-3-Clause |
|
github.com/burntsushi/toml
golang
|
Direct | v1.6.0 | — | — | — | MIT |
|
github.com/cavaliergopher/cpio
golang
|
Transitive | v1.0.1 | — | — | — | BSD-3-Clause |
|
github.com/cavaliergopher/rpm
golang
|
Transitive | v1.3.0 | — | — | — | BSD-3-Clause |
|
github.com/cespare/xxhash/v2
golang
|
Transitive | v2.3.0 | — | — | — | MIT |
|
github.com/dchest/jsmin
golang
|
Transitive | v0.0.0-20220218165748-59f39799265f | — | — | — | JSON |
|
github.com/energye/systray
golang
|
Direct | v1.0.3 | — | — | — | Unknown |
|
github.com/fsnotify/fsnotify
golang
|
Direct | v1.9.0 | — | — | — | BSD-3-Clause |
|
github.com/godbus/dbus/v5
golang
|
Transitive | v5.1.0 | — | — | — | BSD-2-Clause |
|
github.com/hako/durafmt
golang
|
Direct | v0.0.0-20210608085754-5c1018a4e16b | — | — | — | MIT |
|
github.com/hashicorp/golang-lru/v2
golang
|
Transitive | v2.0.7 | — | — | — | MPL-2.0 |
|
github.com/icza/bitio
golang
|
Transitive | v1.1.0 | — | — | — | Apache-2.0 |
|
github.com/josephspurrier/goversioninfo
golang
|
Transitive | v1.4.1 | — | — | — | MIT |
|
github.com/julienschmidt/httprouter
golang
|
Direct | v1.3.0 | — | — | — | BSD-3-Clause |
|
github.com/klauspost/compress
golang
|
Transitive | v1.18.4 | — | — | — | Apache-2.0 AND BSD-3-Clause AND MIT |
|
github.com/kr/text
golang
|
Direct | v0.2.0 | — | — | — | MIT |
|
github.com/lestrrat-go/apache-logformat/v2
golang
|
Direct | v2.0.6 | — | — | — | Unknown |
|
github.com/lestrrat-go/strftime
golang
|
Transitive | v1.1.1 | — | — | — | MIT |
|
github.com/mewkiz/flac
golang
|
Transitive | v1.0.13 | — | — | — | Unlicense |
|
github.com/mewkiz/pkg
golang
|
Transitive | v0.0.0-20250417130911-3f050ff8c56d | — | — | — | Unlicense |
|
github.com/mewpkg/term
golang
|
Transitive | v0.0.0-20241026122259-37a80af23985 | — | — | — | Unknown |
|
github.com/mitchellh/go-homedir
golang
|
Direct | v1.1.0 | — | — | — | MIT |
|
github.com/munnerz/goautoneg
golang
|
Transitive | v0.0.0-20191010083416-a7dc8b61c822 | — | — | — | BSD-3-Clause |
|
github.com/ncruces/zenity
golang
|
Direct | v0.10.14 | — | — | — | MIT |
|
github.com/nwaples/rardecode/v2
golang
|
Transitive | v2.2.2 | — | — | — | BSD-2-Clause |
|
github.com/peterebden/ar
golang
|
Transitive | v0.0.0-20241106141004-20dc11b778e8 | — | — | — | Unknown |
|
github.com/pierrec/lz4/v4
golang
|
Transitive | v4.1.26 | — | — | — | BSD-3-Clause |
|
github.com/pkg/errors
golang
|
Transitive | v0.9.1 | — | — | — | BSD-2-Clause |
|
github.com/prometheus/client_golang
golang
|
Direct | v1.23.2 | — | — | — | Apache-2.0 |
|
github.com/prometheus/client_model
golang
|
Transitive | v0.6.2 | — | — | — | Apache-2.0 |
|
github.com/prometheus/common
golang
|
Transitive | v0.67.5 | — | — | — | Apache-2.0 |
|
github.com/prometheus/procfs
golang
|
Transitive | v0.20.1 | — | — | — | Unknown |
|
github.com/radovskyb/watcher
golang
|
Direct | v1.0.7 | — | — | — | BSD-3-Clause |
|
github.com/randall77/makefat
golang
|
Transitive | v0.0.0-20210315173500-7ddd0e42c844 | — | — | — | Unlicense |
|
github.com/saintfish/chardet
golang
|
Transitive | v0.0.0-20230101081208-5e3ef4b5456d | — | — | — | MIT |
|
github.com/spf13/afero
golang
|
Transitive | v1.15.0 | — | — | — | Apache-2.0 |
|
github.com/spf13/pflag
golang
|
Direct | v1.0.10 | — | — | — | BSD-3-Clause |
|
github.com/sshaman1101/dcompress
golang
|
Transitive | v0.0.0-20200109162717-50436a6332de | — | — | — | Unknown |
|
github.com/therootcompany/xz
golang
|
Transitive | v1.0.1 | — | — | — | CC0-1.0 |
|
github.com/ulikunitz/xz
golang
|
Transitive | v0.5.15 | — | — | — | BSD-3-Clause |
|
github.com/unpackerr/iso9660
golang
|
Transitive | v0.0.3 | — | — | — | Unknown |
|
go.yaml.in/yaml/v2
golang
|
Transitive | v2.4.4 | — | — | — | Apache-2.0 AND MIT |
|
go4.org
golang
|
Transitive | v0.0.0-20260112195520-a5071408f32f | — | — | — | Unknown |
|
golang.org/x/crypto
golang
|
Transitive | v0.48.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/mod
golang
|
Direct | v0.33.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/net
golang
|
Transitive | v0.51.0 | — | — | 1 unknown | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/sys
golang
|
Direct | v0.42.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/text
golang
|
Transitive | v0.34.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golangci/golangci-lint-action
githubactions
|
Direct | 9.*.* | — | — | — | Unknown |
|
golift.io/cnfg
golang
|
Direct | v0.2.5 | — | — | — | Unknown |
|
golift.io/cnfgfile
golang
|
Direct | v0.0.0-20240713024420-a5436d84eb48 | — | — | — | Unknown |
|
golift.io/rotatorr
golang
|
Direct | v0.0.0-20260217050959-f6ac6fc7b38e | — | — | — | Unknown |
|
golift.io/starr
golang
|
Direct | v1.3.1 | — | — | — | Unknown |
|
golift.io/udf
golang
|
Transitive | v0.0.1 | — | — | — | Unknown |
|
golift.io/version
golang
|
Direct | v0.0.2 | — | — | — | Unknown |
|
golift.io/xtractr
golang
|
Direct | v0.3.1 | — | — | — | Unknown |
|
golift/upload-packagecloud
githubactions
|
Direct | 1.*.* | — | — | — | Unknown |
|
google.golang.org/protobuf
golang
|
Transitive | v1.36.11 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
gopkg.in/yaml.v3
golang
|
Direct | v3.0.1 | — | — | — | Apache-2.0 |
|
softprops/action-gh-release
githubactions
|
Direct | 2.*.* | — | — | — | Unknown |
License Breakdown
Unknown
28
BSD-3-Clause
12
MIT
12
BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang
7
Apache-2.0
6
BSD-2-Clause
3
Unlicense
3
Apache-2.0 AND BSD-3-Clause AND MIT
1
Apache-2.0 AND MIT
1
CC0-1.0
1
JSON
1
MPL-2.0
1
CVE Severity
critical
0
high
0
medium
1
low
0
unknown
1