emehd/dash Dependency Health Report

59 dependencies · 109 connections · 1 commit tracked

25 issues found

2 vulnerabilities · 4 license risks · 19 brittle deps

dash github.com/BurntSushi/toml github.com/.. github.com/a-h/parse github.com/a-h/parse github.com/a-h/templ github.com/.. github.com/.. github.com/andybalholm/brotli github.com/.. github.com/cenkalti/back.. github.com/cenkalti/back.. github.com/.. github.com/.. github.com/.. github.com/cli/browser github.com/.. github.com/.. github.com/davecgh/go-spew github.com/.. github.com/.. github.com/.. github.com/fsnotify/fsno.. github.com/.. github.com/gabriel-vasile/mimetype github.com/.. github.com/.. github.com/go-jose/go-jose/v4 github.com/go-playground/locales github.com/.. github.com/.. github.com/.. github.com/.. github.com/.. github.com/.. github.com/.. github.com/.. github.com/.. github.com/.. github.com/.. github.com/google/uuid github.com/.. github.com/gorilla/securecookie github.com/.. github.com/ilyakaznachee.. github.com/.. github.com/.. github.com/.. github.com/invopop/yaml github.com/.. github.com/.. github.com/.. github.com/.. github.com/.. github.com/.. github.com/jackc/pgx/v5 github.com/.. github.com/.. github.com/jinzhu/inflection github.com/jinzhu/now github.com/joho/godotenv github.com/.. github.com/klauspost/compress github.com/.. github.com/kr/pretty github.com/.. github.com/.. github.com/.. github.com/mattn/go-isatty github.com/mileusna/useragent github.com/natefinch/ato.. github.com/natefinch/ato.. github.com/.. github.com/.. github.com/philhofer/fwd github.com/.. github.com/pmezard/go-di.. github.com/.. github.com/.. github.com/samber/lo github.com/.. github.com/stretchr/objx github.com/.. github.com/.. github.com/.. github.com/.. github.com/valyala/bytebufferpool github.com/.. github.com/.. github.com/.. github.com/.. golang.org/.. golang.org/.. golang.org/.. golang.org/x/image golang.org/.. golang.org/.. golang.org/x/oauth2 golang.org/x/sync golang.org/.. golang.org/x/text golang.org/.. gopkg.in/ya.. gopkg.in/yaml.v3 gorm.io/dri.. gorm.io/gorm gorm.io/gorm olympos.io/encoding/edn vuln: critical vuln: unknown dash TOML parser for Golang with reflection. last commit: 2026-06-02 last release: 2025-12-18 ★ 5.0k ⚖ MIT github.com/a-h/parse ⚠ last commit: 2025-01-22 ★ 53 ⚖ MIT A language for writing HTML user interfaces in Go. last commit: 2026-06-05 last release: 2026-05-10 ★ 10.3k ⚖ MIT Pure Go Brotli encoder and decoder last commit: 2026-04-13 ★ 726 ⚖ MIT ⏱ The exponential backoff algorithm in Go last commit: 2026-03-28 ★ 4.0k ⚖ MIT Go helpers to open URLs, files, or readers in a web browser. last commit: 2026-06-09 ★ 93 ⚖ BSD-2-Clause A Go OpenID Connect client. last commit: 2026-04-08 last release: 2026-04-08 ★ 2.4k ⚖ Apache-2.0 Implements a deep pretty printer for Go data structures to aid in debugging ⚠ last commit: 2024-04-06 ★ 6.4k ⚖ ISC Color package for Go (golang) last commit: 2026-06-09 last release: 2026-03-20 ★ 8.0k ⚖ MIT Cross-platform filesystem notifications for Go. last commit: 2026-05-11 last release: 2026-05-04 ★ 10.7k ⚖ BSD-3-Clause A Go package for media type and file extension detection, based on magic numbers last commit: 2026-06-10 last release: 2026-02-01 ★ 2.0k ⚖ MIT An implementation of JOSE standards (JWE, JWS, JWT) in Go last commit: 2026-06-11 last release: 2026-04-04 ★ 510 ⚖ Apache-2.0 :earth_americas: a set of locales generated from the CLDR Project which can be used independently or within an i18n package; these were built for use with, but not exclusive to https://github.com/go-playground/universal-translator ⚠ last commit: 2024-01-13 ⚠ last release: 2023-01-05 ★ 304 ⚖ MIT :speech_balloon: i18n Translator for Go/Golang using CLDR data + pluralization rules ⚠ last commit: 2023-01-30 ⚠ last release: 2023-01-30 ★ 421 ⚖ MIT :100:Go Struct and Field validation, including Cross Field, Cross Struct, Map, Slice and Array diving last commit: 2026-06-04 last release: 2026-05-29 ★ 20.0k ⚖ MIT ⚡️ Express inspired web framework written in Go last commit: 2026-06-11 last release: 2026-05-22 ★ 39.8k ⚖ MIT 📎 Binder for gofiber/fiber last commit: 2026-06-10 last release: 2026-06-09 ★ 3 ⚖ BSD-3-Clause :zap: A collection of common functions for Fiber with better performance, fewer allocations, and fewer dependencies. last commit: 2026-06-10 last release: 2026-06-01 ★ 56 ⚖ MIT Go package for UUIDs based on RFC 4122 and DCE 1.1: Authentication and Security Services. ⚠ last commit: 2024-11-14 ⚠ last release: 2024-01-23 ★ 6.1k ⚖ BSD-3-Clause Package gorilla/securecookie encodes and decodes authenticated and optionally encrypted cookie values for Go web applications. ⚠ last commit: 2023-11-08 ⚠ last release: 2023-11-05 ★ 729 ⚖ BSD-3-Clause ✨Clean and minimalistic environment configuration reader for Golang last commit: 2025-09-15 last release: 2023-07-20 ★ 2.1k ⚖ MIT Go Context Internationalization - translating apps easily ⚠ last commit: 2024-12-04 ★ 94 ⚖ Apache-2.0 A better way to marshal and unmarshal YAML in Golang ⚠ last commit: 2024-08-12 ★ 30 github.com/jackc/pgpassfile ⚠ last commit: 2023-08-22 ★ 5 ⚖ MIT pgservicefile is a parser PostgreSQL for service files (e.g. .pg_service.conf) ⚠ last commit: 2024-06-06 ★ 9 ⚖ MIT PostgreSQL driver and toolkit for Go last commit: 2026-06-03 ★ 13.9k ⚖ MIT ⚠ critical Generic resource pool for Go last commit: 2026-01-17 ★ 419 ⚖ MIT Pluralizes and singularizes English nouns ⚠ last commit: 2023-10-16 ★ 526 ⚖ MIT Now is a time toolkit for golang last commit: 2026-02-02 ★ 4.7k ⚖ MIT A Go port of Ruby's dotenv library (Loads environment variables from .env files) last commit: 2026-05-25 last release: 2023-02-05 ★ 10.5k ⚖ MIT Optimized Go Compression Packages last commit: 2026-06-03 last release: 2026-04-30 ★ 5.5k Pretty printing for Go values ⚠ last commit: 2024-07-26 ★ 1.4k ⚖ MIT Parser for uniform resource names as seen on RFC 8141, RFC 2141, and RFC 7643 ⚠ last commit: 2024-02-03 ⚠ last release: 2024-02-03 ★ 93 ⚖ MIT github.com/mattn/go-colorable last commit: 2026-05-29 ★ 809 ⚖ MIT github.com/mattn/go-isatty last commit: 2026-04-27 ★ 911 ⚖ MIT Go/Golang parser for user agent strings ⚠ last commit: 2024-09-13 ⚠ last release: 2024-09-13 ★ 538 ⚖ MIT atomic is a go package for atomic file writing ⚠ last commit: 2022-05-24 ⚠ last release: 2021-06-28 ★ 207 ⚖ MIT Buffered Reader/Writer last commit: 2025-06-25 last release: 2017-12-05 ★ 80 ⚖ MIT Partial port of Python difflib package to Go ⚠ last commit: 2023-05-30 ★ 429 💥 A Lodash-style Go library based on Go 1.18+ Generics (map, filter, contains, find...) last commit: 2026-06-10 last release: 2026-03-02 ★ 21.3k ⚖ MIT Go package for dealing with maps, slices, JSON and other data. last commit: 2026-03-20 last release: 2025-10-07 ★ 859 ⚖ MIT A toolkit with common assertions and mocks that plays nicely with the standard library last commit: 2026-06-10 last release: 2025-08-27 ★ 26.0k ⚖ MIT A Go code generator for MessagePack / msgpack.org[Go] last commit: 2026-06-04 last release: 2026-04-14 ★ 1.9k ⚖ MIT Anti-memory-waste byte buffer pool ⚠ last commit: 2024-07-20 ★ 1.3k ⚖ MIT Fast HTTP package for Go. Tuned for high performance. Zero memory allocations in hot paths. Up to 10x faster than net/http last commit: 2026-06-11 last release: 2026-05-05 ★ 23.4k ⚖ MIT [mirror] Go supplementary cryptography libraries last commit: 2026-06-09 ★ 3.3k ⚖ BSD-3-Clause [mirror] Go supplementary image libraries last commit: 2026-06-08 ★ 544 ⚖ BSD-3-Clause [mirror] Go module mechanics libraries last commit: 2026-06-08 ★ 209 ⚖ BSD-3-Clause [mirror] Go supplementary network libraries last commit: 2026-06-10 ★ 3.0k ⚖ BSD-3-Clause ⚠ unknown Go OAuth2 last commit: 2026-03-08 ★ 5.9k ⚖ BSD-3-Clause [mirror] concurrency primitives last commit: 2026-06-08 ★ 922 ⚖ BSD-3-Clause [mirror] Go packages for low-level interaction with the operating system last commit: 2026-06-08 ★ 1.3k ⚖ BSD-3-Clause [mirror] Go text processing support last commit: 2026-06-08 last release: 2018-02-21 ★ 800 ⚖ BSD-3-Clause [mirror] Go Tools last commit: 2026-06-11 last release: 2026-05-18 ★ 8.0k ⚖ BSD-3-Clause YAML support for the Go language. ⚠ last commit: 2025-04-01 ★ 7.0k GORM PostgreSQL driver last commit: 2026-06-04 ★ 293 ⚖ MIT The fantastic ORM library for Golang, aims to be developer friendly last commit: 2026-05-11 last release: 2025-11-02 ★ 39.8k ⚖ MIT Go implementation of EDN (Extensible Data Notation) ⚠ last commit: 2020-10-19 ★ 120 ⚖ BSD-3-Clause stacktower.io
Dependencies

59

Connections

109

Vulnerabilities

2

License Risks

4

Security Overview

Vulnerabilities

1 critical

  • github.com/jackc/pgx/v5(critical)via gorm.io/driver/postgres
  • golang.org/x/net(unknown)via github.com/gofiber/fiber/v3

License Risks

4 packages with non-permissive or unknown licenses

Unknown (4)

  • github.com/pmezard/go-difflib
  • gopkg.in/yaml.v3
  • github.com/invopop/yaml

Brittle Dependencies

19 unmaintained or at-risk packages

  • github.com/a-h/parse(low activity or limited maintainers)via github.com/a-h/templ
  • github.com/davecgh/go-spew(low activity or limited maintainers)via github.com/stretchr/testify
  • github.com/go-playground/locales(low activity or limited maintainers)via github.com/go-playground/validator/v10
  • github.com/go-playground/universal-translator(low activity or limited maintainers)via github.com/go-playground/validator/v10
  • github.com/google/uuid(low activity or limited maintainers)

Heaviest Dependencies

Direct DependencyTransitive Deps% of Total
github.com/gofiber/fiber/v32339.7%
github.com/invopop/ctxi18n2339.7%
github.com/a-h/templ2136.2%

Add to your README

Click a card to copy the markdown to your clipboard.

Get dependency diffs on every PR
- uses: stacktower-io/stacktower-action@v1
  with:
    api-key: ${{ secrets.STACKTOWER_API_KEY }}
    fail-on-vuln: true
Starts from package.json - Free with any account

Commit History

CommitDepsRenderedCompare
591mo agocurrent

Sign in to access full commit history.

Cookie Preferences

We use essential cookies for authentication. We also use analytics cookies to understand how you use Stacktower and improve the experience. Read our Privacy Policy.

  1. Server error
    Something went wrong. Please try again later.
  2. Server error
    Something went wrong. Please try again later.