Eiji224/shop_PetProject Dependency Health Report

54 dependencies · 84 connections

19 issues found

4 vulnerabilities · 3 license risks · 12 brittle deps

filippo.io/edwards25519 github.com/KyleBanks/depth github.com/PuerkitoBio/purell github.com/PuerkitoBio/urlesc github... github.com/bytedance/sonic/loader github... github.com/gabriel-vasile/mimetype github.com/gin-c.. github.com/gin-contrib/sse github.com/gin-gonic/gin github... github... github... github... github... github... github... github... github.com/goccy.. github.com/goccy/go-json github.com/goccy.. github.com/goccy/go-yaml github... github.com/golang-jwt/jwt/v5 github.com/jinzhu/inflection github.com/jinzhu/now github... github.com/joho/godotenv github.com/josharian/intern github... github.com/klauspost/cpuid/v2 github.com/leodido/go-urn github... github.com/mattn/go-isatty github... github.com/modern-go/concurrent github... github.com/modern-go/reflect2 github.com/pelletier/go-toml/v2 github.com/quic-go/qpack github... github... github.com/swaggo/files github... github.com/swaggo/gin-swag.. github.com/swaggo/swag github.com/swaggo/swag github... github... github.com/twitchyliquid64/golang-asm github.com/ugorji/go/codec go.uber.org/mock golang... golang.org/x/arch golang... golang.org/x/mod golang... golang.org/x/sync golang... golang... golang... google.golang.org/protobuf gopkg.in/yaml.v2 gorm.io.. gorm.io.. gorm.io/gorm gorm.io.. gorm.io.. shop_PetProject vuln: medium MPL-2.0 (weak-copyleft) vuln: medium vuln: low vuln: unknown filippo.io/edwards25519 — A safer, faster, and more powerful low-level edwards25519 Go implementation. last commit: 2026-02-17 ★ 182 ⚖ BSD-3-Clause ⚠ medium Visualize Go Dependency Trees ⚠ last commit: 2022-02-08 ⚠ last release: 2018-02-14 ★ 1.1k ⚖ MIT tiny Go library to normalize URLs last commit: 2026-05-18 last release: 2026-05-17 ★ 485 ⚖ BSD-3-Clause Proper URL escaping as per RFC3986 ⚠ last commit: 2020-10-14 ★ 27 ⚖ BSD-3-Clause A blazingly fast JSON serializing & deserializing library last commit: 2026-05-13 last release: 2026-01-22 ★ 9.4k ⚖ Apache-2.0 A blazingly fast JSON serializing & deserializing library last commit: 2026-05-13 last release: 2026-01-22 ★ 9.4k ⚖ Apache-2.0 High performance drop-in replacement of the encoding/base64 library. last commit: 2026-04-30 last release: 2026-04-30 ★ 26 ⚖ Apache-2.0 A Go package for media type and file extension detection, based on magic numbers last commit: 2026-05-04 last release: 2026-02-01 ★ 2.0k ⚖ MIT Server-Sent Events implementation in Go. Used by the Gin Framework. last commit: 2026-05-09 last release: 2026-03-28 ★ 151 ⚖ MIT Gin is a high-performance HTTP web framework written in Go. It provides a Martini-like API but with significantly better performance—up to 40 times faster—thanks to httprouter. Gin is designed for building REST APIs, web applications, and microservices. last commit: 2026-05-09 last release: 2026-02-28 ★ 88.6k ⚖ MIT jsonpointer for golang with support for structs last commit: 2026-05-01 last release: 2026-04-18 ★ 51 ⚖ Apache-2.0 json reference for golang last commit: 2026-05-02 last release: 2026-03-02 ★ 20 ⚖ Apache-2.0 openapi specification object model last commit: 2026-05-08 last release: 2026-03-03 ★ 432 ⚖ Apache-2.0 goodie bag in use in the go-openapi projects last commit: 2026-05-01 last release: 2026-04-15 ★ 220 ⚖ Apache-2.0 :earth_americas: a set of locales generated from the CLDR Project which can be used independently or within an i18n package; these were built for use with, but not exclusive to https://github.com/go-playground/universal-translator ⚠ last commit: 2024-01-13 ⚠ last release: 2023-01-05 ★ 302 ⚖ MIT :speech_balloon: i18n Translator for Go/Golang using CLDR data + pluralization rules ⚠ last commit: 2023-01-30 ⚠ last release: 2023-01-30 ★ 421 ⚖ MIT :100:Go Struct and Field validation, including Cross Field, Cross Struct, Map, Slice and Array diving last commit: 2026-05-18 last release: 2026-03-31 ★ 20.0k ⚖ MIT Go MySQL Driver is a MySQL driver for Go's (golang) database/sql package last commit: 2026-05-20 last release: 2026-04-29 ★ 15.2k ⚖ MPL-2.0 · weak-copyleft Fast JSON encoder/decoder compatible with encoding/json for Go last commit: 2026-03-20 last release: 2026-03-12 ★ 3.7k ⚖ MIT YAML support for the Go language last commit: 2026-04-11 last release: 2026-01-08 ★ 2.2k ⚖ MIT Go implementation of JSON Web Tokens (JWT). last commit: 2026-05-01 last release: 2026-01-28 ★ 9.1k ⚖ MIT Pluralizes and singularizes English nouns ⚠ last commit: 2023-10-16 ★ 527 ⚖ MIT Now is a time toolkit for golang last commit: 2026-02-02 ★ 4.7k ⚖ MIT A Go port of Ruby's dotenv library (Loads environment variables from .env files) last commit: 2026-05-20 last release: 2023-02-05 ★ 10.4k ⚖ MIT Intern Go strings ⚠ last commit: 2023-11-23 ★ 100 ⚖ MIT A high-performance 100% compatible drop-in replacement of "encoding/json" ⚠ last commit: 2024-05-27 ⚠ last release: 2021-09-11 ★ 13.9k ⚖ MIT CPU feature identification for Go last commit: 2026-03-30 last release: 2025-07-14 ★ 1.2k ⚖ MIT Parser for uniform resource names as seen on RFC 8141, RFC 2141, and RFC 7643 ⚠ last commit: 2024-02-03 ⚠ last release: 2024-02-03 ★ 94 ⚖ MIT Fast JSON serializer for golang. last commit: 2026-03-14 last release: 2026-03-14 ★ 4.9k ⚖ MIT github.com/mattn/go-isatty last commit: 2026-04-27 ★ 910 ⚖ MIT concurrency utilities ⚠ last commit: 2019-08-09 ⚠ last release: 2018-03-06 ★ 306 ⚖ Apache-2.0 reflect api without runtime reflect.Value cost ⚠ last commit: 2025-03-22 ⚠ last release: 2021-09-11 ★ 827 ⚖ Apache-2.0 Go library for the TOML file format last commit: 2026-05-01 last release: 2026-05-02 ★ 1.9k a (minimal) QPACK (RFC 9204) implementation in Go last commit: 2026-04-12 last release: 2025-11-19 ★ 43 ⚖ MIT A production-ready QUIC implementation in pure Go last commit: 2026-05-21 last release: 2026-05-11 ★ 11.6k ⚖ MIT ⚠ medium github.com/swaggo/files last commit: 2025-11-21 last release: 2024-07-04 ★ 42 ⚖ MIT gin middleware to automatically generate RESTful API documentation with Swagger 2.0. last commit: 2026-01-15 last release: 2025-09-02 ★ 4.2k ⚖ MIT Automatically generate RESTful API documentation with Swagger 2.0 for Go. last commit: 2026-05-15 last release: 2026-01-09 ★ 12.8k ⚖ MIT The assembler from the Go compiler, in library form. ⚠ last commit: 2021-01-12 ★ 206 ⚖ BSD-3-Clause idiomatic codec and rpc lib for msgpack, cbor, json, etc. msgpack.org[Go] last commit: 2026-05-11 last release: 2025-10-28 ★ 1.9k ⚖ MIT GoMock is a mocking framework for the Go programming language. last commit: 2025-12-17 last release: 2025-08-18 ★ 3.3k ⚖ Apache-2.0 [mirror] architecture code last commit: 2026-05-21 ★ 161 ⚖ BSD-3-Clause [mirror] Go supplementary cryptography libraries last commit: 2026-05-18 ★ 3.3k ⚖ BSD-3-Clause ⚠ low [mirror] Go module mechanics libraries last commit: 2026-05-20 ★ 209 ⚖ BSD-3-Clause [mirror] Go supplementary network libraries last commit: 2026-05-15 ★ 3.0k ⚖ BSD-3-Clause ⚠ unknown [mirror] concurrency primitives last commit: 2026-03-08 ★ 920 ⚖ BSD-3-Clause [mirror] Go packages for low-level interaction with the operating system last commit: 2026-05-20 ★ 1.3k ⚖ BSD-3-Clause [mirror] Go text processing support last commit: 2026-05-08 last release: 2018-02-21 ★ 796 ⚖ BSD-3-Clause [mirror] Go Tools last commit: 2026-05-20 last release: 2026-05-18 ★ 8.0k ⚖ BSD-3-Clause Go support for Google's protocol buffers last commit: 2026-01-20 last release: 2025-12-12 ★ 3.3k ⚖ BSD-3-Clause YAML support for the Go language. ⚠ last commit: 2025-04-01 ★ 7.0k GORM mysql driver last commit: 2026-04-30 ★ 244 ⚖ MIT The fantastic ORM library for Golang, aims to be developer friendly last commit: 2026-05-11 last release: 2025-11-02 ★ 39.8k ⚖ MIT shop_PetProject stacktower.io
Dependencies

54

Connections

84

Vulnerabilities

4

License Risks

3

Security Overview

Vulnerabilities

2 medium, 1 low

  • filippo.io/edwards25519(medium)
  • github.com/quic-go/quic-go(medium)via github.com/gin-gonic/gin
  • golang.org/x/crypto(low)
  • golang.org/x/net(unknown)via github.com/swaggo/gin-swagger

License Risks

3 packages with non-permissive or unknown licenses

Weak Copyleft (1)

  • github.com/go-sql-driver/mysql(MPL-2.0)

Unknown (2)

  • github.com/pelletier/go-toml/v2
  • gopkg.in/yaml.v2

Brittle Dependencies

12 unmaintained or at-risk packages

  • github.com/KyleBanks/depth(low activity or limited maintainers)via github.com/swaggo/gin-swagger
  • github.com/PuerkitoBio/urlesc(archived)
  • github.com/go-playground/locales(low activity or limited maintainers)via github.com/gin-gonic/gin
  • github.com/go-playground/universal-translator(low activity or limited maintainers)via github.com/gin-gonic/gin
  • github.com/jinzhu/inflection(low activity or limited maintainers)via gorm.io/gorm

Heaviest Dependencies

Direct DependencyTransitive Deps% of Total
github.com/swaggo/gin-swagger4381.1%
github.com/gin-gonic/gin3158.5%
gorm.io/gorm917.0%

Add to your README

Click a card to copy the markdown to your clipboard.

Get dependency diffs on every PR
- uses: stacktower-io/stacktower-action@v1
  with:
    api-key: ${{ secrets.STACKTOWER_API_KEY }}
    fail-on-vuln: true
Starts from package.json - Free with any account

Cookie Preferences

We use essential cookies for authentication. We also use analytics cookies to understand how you use Stacktower and improve the experience. Read our Privacy Policy.

  1. Server error
    Something went wrong. Please try again later.
  2. Server error
    Something went wrong. Please try again later.