threadsecurity/go-ethereum Dependency Health Report

97 dependencies · 175 connections · 1 commit tracked

120 issues found

5 vulnerabilities · 72 license risks · 43 brittle deps

github.com/A.. github.com/A.. github.com/Azure/go-autorest/autorest/adal github.com/Azure/go-autores.. github.com/V.. github.com/V.. github.com/V.. github.com/V.. github.com/agiledragon/gomonkey/v2 github.com/a.. github.com/a.. github.com/a.. github.com/a.. github.com/a.. github.com/a.. github.com/aws/aws-sdk-go-v.. github.com/a.. github.com/a.. github.com/a.. github.com/a.. github.com/a.. github.com/a.. github.com/b.. github.com/b.. github.com/bits-and-blooms/.. github.com/cespare/cp github.com/c.. github.com/cespare/cp github.com/c.. github.com/c.. github.com/c.. github.com/cespare/xxhash/v2 github.com/c.. github.com/c.. github.com/c.. github.com/c.. github.com/c.. github.com/c.. github.com/c.. github.com/c.. github.com/davecgh/go-spew github.com/deckarep/golang-.. github.com/d.. github.com/d.. github.com/deckarep/golang-.. github.com/d.. github.com/d.. github.com/d.. github.com/d.. github.com/d.. github.com/edsrzf/mmap-go github.com/e.. github.com/e.. github.com/edsrzf/mmap-go github.com/e.. github.com/e.. github.com/e.. github.com/fatih/color github.com/fatih/color github.com/fjl/memsize github.com/fjl/memsize github.com/gballet/go-libpcsclite github.com/gballet/go-libpcsclite github.com/go-ole/go-ole github.com/g.. github.com/g.. github.com/g.. github.com/go-sourcemap/sou.. github.com/go-stack/stack github.com/go-stack/stack github.com/g.. github.com/golang/snappy github.com/golang/snappy github.com/g.. github.com/google/uuid github.com/google/uuid github.com/gorilla/websocket github.com/gorilla/websocket github.com/gotestyourself/gotestyourself github.com/g.. github.com/h.. github.com/h.. github.com/h.. github.com/hashicorp/golang-lru github.com/hashicorp/golang-lru github.com/holiman/bloomfilter/v2 github.com/holiman/bloomfilter/v2 github.com/holiman/uint256 github.com/h.. github.com/h.. github.com/i.. github.com/i.. github.com/i.. github.com/i.. github.com/i.. github.com/i.. github.com/i.. github.com/i.. github.com/i.. github.com/i.. github.com/i.. github.com/i.. github.com/i.. github.com/i.. github.com/influxdata/line-.. github.com/i.. github.com/j.. github.com/j.. github.com/julienschmidt/httprouter github.com/julienschmidt/httprouter github.com/karalabe/usb github.com/karalabe/usb github.com/klauspost/compress github.com/kylelemons/godebug github.com/m.. github.com/m.. github.com/m.. github.com/mattn/go-ieproxy github.com/m.. github.com/m.. github.com/m.. github.com/m.. github.com/m.. github.com/m.. github.com/mitchellh/mapstr.. github.com/m.. github.com/m.. github.com/m.. github.com/mmcloughlin/addc.. github.com/naoina/go-stringutil github.com/naoina/toml github.com/naoina/toml github.com/o.. github.com/opentracing/open.. github.com/opentracing/opentracing-go github.com/p.. github.com/pkg/errors github.com/p.. github.com/pmezard/go-difflib github.com/p.. github.com/p.. github.com/p.. github.com/prometheus/tsdb github.com/p.. github.com/r.. github.com/rivo/uniseg github.com/rjeczalik/notify github.com/rjeczalik/notify github.com/rs/cors github.com/rs/cors github.com/s.. github.com/scroll-tech/da-c.. github.com/s.. github.com/s.. github.com/s.. github.com/shirou/gopsutil github.com/s.. github.com/status-im/keycard-go github.com/s.. github.com/s.. github.com/s.. github.com/supranational/blst github.com/s.. github.com/s.. github.com/t.. github.com/tklauser/numcpus github.com/y.. go-ethereum go.uber.org/.. go.uber.org/.. golang.org/x.. golang.org/x.. golang.org/x.. golang.org/x/sync golang.org/x/sys golang.org/x.. golang.org/x.. golang.org/x.. golang.org/x/text golang.org/x.. golang.org/x.. golang.org/x.. golang.org/x/time google.golang.org/protobuf google.golang.org/protobuf gopkg.in/urfave/cli.v1 gopkg.in/yam.. gopkg.in/yam.. gopkg.in/yaml.v2 gopkg.in/yaml.v3 gotest.tools rsc.io/tmplf.. rsc.io/tmplfunc vuln: medium vuln: medium vuln: medium vuln: medium vuln: medium Package pipeline implements an HTTP request/response middleware pipeline whose policy objects mutate an HTTP request's URL, query parameters, and/or headers before the request is sent over the wire. This is the Go implementation. ⚠ last commit: 2023-01-07 ★ 23 Microsoft Azure Blob Storage Library for Go ⚠ last commit: 2023-12-18 ★ 157 This package implements an HTTP request pipeline suitable for use across multiple go-routines and provides the shared routines relied on by AutoRest generated Go code. ⚠ last commit: 2025-02-12 ★ 215 Fast thread-safe inmemory cache for big number of entries in Go. Minimizes GC overhead last commit: 2026-04-15 ★ 2.4k gomonkey is a library to make monkey patching in unit tests easy last commit: 2025-12-28 ★ 2.3k AWS SDK for the Go programming language. last commit: 2026-05-07 last release: 2026-05-07 ★ 3.5k ⚖ Apache-2.0 AWS SDK for the Go programming language. last commit: 2026-05-07 last release: 2026-05-07 ★ 3.5k ⚖ Apache-2.0 AWS SDK for the Go programming language. last commit: 2026-05-07 last release: 2026-05-07 ★ 3.5k ⚖ Apache-2.0 AWS SDK for the Go programming language. last commit: 2026-05-07 last release: 2026-05-07 ★ 3.5k ⚖ Apache-2.0 AWS SDK for the Go programming language. last commit: 2026-05-07 last release: 2026-05-07 ★ 3.5k ⚖ Apache-2.0 AWS SDK for the Go programming language. last commit: 2026-05-07 last release: 2026-05-07 ★ 3.5k ⚖ Apache-2.0 AWS SDK for the Go programming language. last commit: 2026-05-07 last release: 2026-05-07 ★ 3.5k ⚖ Apache-2.0 AWS SDK for the Go programming language. last commit: 2026-05-07 last release: 2026-05-07 ★ 3.5k ⚖ Apache-2.0 Smithy code generators for Go (in development) last commit: 2026-05-05 ★ 245 Go package implementing bitsets last commit: 2026-03-01 ★ 1.5k File copying for Go ⚠ last commit: 2023-09-07 ★ 6 A Go implementation of the 64-bit xxHash algorithm (XXH64) ⚠ last commit: 2024-07-03 ★ 2.1k ⚖ MIT The official Go library for the Cloudflare API last commit: 2026-05-07 last release: 2026-05-07 ★ 2.0k ⚖ Apache-2.0 WIP: code generation package in Go -- used by gnark, goff and gurvy last commit: 2026-02-19 ★ 14 gnark-crypto provides elliptic curve and pairing-based cryptography on BN, BLS12, BLS24 and BW6 curves. It also provides various algorithms (algebra, crypto) of particular interest to zero knowledge proof systems last commit: 2026-05-07 last release: 2026-03-17 ★ 596 ⚖ Apache-2.0 ⚠ medium github.com/crate-crypto/go-eth-kzg last commit: 2026-03-17 ★ 35 Implements a deep pretty printer for Go data structures to aid in debugging ⚠ last commit: 2024-04-06 ★ 6.4k A simple, battle-tested and generic set type for the Go language. Trusted by GoogleCloudPlatform, Docker, 1Password, Ethereum and Hashicorp. last commit: 2026-05-05 ★ 4.7k Generate Go client and server boilerplate from OpenAPI 3 specifications last commit: 2026-05-07 ★ 8.3k ECMAScript/JavaScript engine in pure Go last commit: 2026-03-11 ★ 6.8k A portable mmap package for Go ⚠ last commit: 2024-12-12 ★ 1.1k A minimal implementation of the Polynomial Commitments API for EIP-4844 and EIP-7594, written in C. last commit: 2026-05-01 ★ 168 Color package for Go (golang) last commit: 2026-04-28 ★ 8.0k memsize computes the size of your object graph ⚠ last commit: 2024-08-14 ★ 34 ⚖ MIT A golang implementation of the libpcpsclite client last commit: 2025-09-18 ★ 5 win32 ole implementation for golang last commit: 2026-03-30 ★ 1.3k Source maps consumer for Golang last commit: 2025-10-01 ★ 79 Package stack implements utilities to capture, manipulate, and format call stacks. ⚠ last commit: 2021-08-18 ★ 404 Go support for Google's protocol buffers ⚠ last commit: 2024-08-05 ★ 10.1k The Snappy compression format in the Go programming language. ⚠ last commit: 2025-03-07 ★ 1.6k Go package for UUIDs based on RFC 4122 and DCE 1.1: Authentication and Security Services. ⚠ last commit: 2024-11-14 ★ 6.1k Package gorilla/websocket is a fast, well-tested and widely used WebSocket implementation for Go. ⚠ last commit: 2025-03-19 ★ 24.7k A collection of packages to augment the go testing package and support common patterns. ⚠ last commit: 2025-02-08 ★ 577 GraphQL server with a focus on ease of use last commit: 2026-05-07 ★ 4.7k ⚠ medium Generic boolean expression evaluation in Go last commit: 2026-04-13 ★ 121 Golang LRU cache last commit: 2026-03-13 ★ 5.1k Face-meltingly fast, thread-safe, marshalable, unionable, probability- and optimal-size-calculating Bloom filter in go last commit: 2025-06-13 ★ 31 Fixed size 256-bit math library last commit: 2026-02-28 ★ 374 UPnP client library for Go (#golang) ⚠ last commit: 2025-04-27 ★ 463 Go implementation of some cryptographic primitives (that fit inside the SNARK field) and compatible with circomlib ⚠ last commit: 2025-01-21 ★ 145 Scalable datastore for metrics, events, and real-time analytics last commit: 2026-05-07 ★ 31.5k InfluxDB 2 Go Client last commit: 2026-04-17 ★ 654 github.com/influxdata/line-protocol ⚠ last commit: 2022-08-03 ★ 37 Minisign verification library for Golang. ⚠ last commit: 2024-12-12 ★ 117 ⚖ MIT A high performance HTTP request router that scales well ⚠ last commit: 2024-07-22 ★ 17.1k Self contained USB and HID library for Go ⚠ last commit: 2024-01-23 ★ 177 Optimized Go Compression Packages last commit: 2026-05-07 ★ 5.5k Debugging helper utilities for Go ⚠ last commit: 2022-06-17 ★ 360 github.com/mattn/go-colorable ⚠ last commit: 2025-01-10 ★ 808 github.com/mattn/go-ieproxy ⚠ last commit: 2024-05-22 ★ 97 github.com/mattn/go-isatty last commit: 2026-04-27 ★ 910 wcwidth for golang last commit: 2026-04-18 ★ 695 Go library for decoding generic map values into native Go structures and vice versa. ⚠ last commit: 2024-06-25 ★ 8.0k Go library for addressing and reading/writing a specific value within any Go structure using a string syntax. ⚠ last commit: 2023-09-06 ★ 215 Cryptographic Addition Chain Generation in Go ⚠ last commit: 2024-06-30 ★ 195 Faster string utilities implementation for Go ⚠ last commit: 2020-11-04 ★ 11 TOML parser and encoder library for Golang ⚠ last commit: 2022-08-08 ★ 294 ASCII table in golang last commit: 2026-04-07 ★ 4.8k OpenTracing API for Go. 🛑 This library is DEPRECATED! https://github.com/opentracing/specification/issues/163 ⚠ last commit: 2023-04-21 ★ 3.5k Simple error handling primitives last commit: 2026-03-27 last release: 2020-01-14 ★ 8.2k ⚖ BSD-2-Clause Partial port of Python difflib package to Go ⚠ last commit: 2023-05-30 ★ 428 The Prometheus time series database layer. ⚠ last commit: 2019-08-13 ⚠ last release: 2019-07-24 ★ 831 ⚖ Apache-2.0 Unicode Text Segmentation, Word Wrapping, and String Width Calculation in Go ⚠ last commit: 2024-05-31 ★ 718 File system event notification library on steroids. ⚠ last commit: 2024-02-26 ★ 931 Go net/http configurable handler to handle CORS requests last commit: 2026-01-23 ★ 2.9k scroll's DA encoding/decoding libraries last commit: 2026-02-04 ★ 17 Binary storage trie ⚠ last commit: 2024-11-29 ★ 76 psutil for golang last commit: 2026-05-07 ★ 11.8k Better structured concurrency for go last commit: 2026-04-29 ★ 10.4k Go pkg to interact with the Status Keycard ⚠ last commit: 2024-11-29 ★ 43 A toolkit with common assertions and mocks that plays nicely with the standard library last commit: 2026-05-07 ★ 26.0k Multilingual BLS12-381 signature library last commit: 2026-04-17 ★ 559 LevelDB key/value database in Go. ⚠ last commit: 2024-05-14 ★ 6.3k sysconf for Go, without using cgo last commit: 2026-05-07 ★ 152 Go package providing information about the number of CPUs in the system last commit: 2026-05-07 ★ 32 WMI for Go ⚠ last commit: 2024-01-28 ★ 167 go-ethereum Wrapper types for sync/atomic which enforce atomic access ⚠ last commit: 2025-04-14 ★ 1.4k Combine one or more Go errors together ⚠ last commit: 2024-04-29 ★ 1.2k [mirror] Go supplementary cryptography libraries last commit: 2026-05-01 ★ 3.3k ⚠ medium [mirror] Go supplementary network libraries last commit: 2026-05-07 ★ 3.0k ⚖ BSD-3-Clause ⚠ medium [mirror] concurrency primitives last commit: 2026-03-08 ★ 918 [mirror] Go packages for low-level interaction with the operating system last commit: 2026-04-23 ★ 1.3k Go terminal and console support last commit: 2026-04-09 ★ 306 ⚖ BSD-3-Clause [mirror] Go text processing support last commit: 2026-04-09 ★ 797 [mirror] Go supplementary time packages last commit: 2026-03-08 ★ 418 Go support for Google's protocol buffers last commit: 2026-01-20 ★ 3.3k ⚠ medium A declarative, simple, fast, and fun package for building command line tools in Go last commit: 2026-05-03 ★ 24.0k YAML support for the Go language. ⚠ last commit: 2025-04-01 ★ 7.0k YAML support for the Go language. ⚠ last commit: 2025-04-01 ★ 7.0k A collection of packages to augment the go testing package and support common patterns. ⚠ last commit: 2025-02-08 ★ 577 Go templates invoked as functions ⚠ last commit: 2021-05-17 ★ 157 stacktower.io
Dependencies

97

Connections

175

Vulnerabilities

5

License Risks

72

Security Overview

Vulnerabilities

5 medium

  • github.com/consensys/gnark-crypto(medium)
  • github.com/graph-gophers/graphql-go(medium)
  • golang.org/x/crypto(medium)
  • golang.org/x/net(medium)via github.com/cloudflare/cloudflare-go
  • google.golang.org/protobuf(medium)via github.com/golang/protobuf

License Risks

72 packages with non-permissive or unknown licenses

Unknown (72)

  • github.com/agiledragon/gomonkey/v2
  • github.com/stretchr/testify
  • github.com/VictoriaMetrics/fastcache

Brittle Dependencies

43 unmaintained or at-risk packages

  • github.com/Azure/azure-pipeline-go(low activity or limited maintainers)via github.com/Azure/azure-storage-blob-go
  • github.com/Azure/azure-storage-blob-go(low activity or limited maintainers)
  • github.com/Azure/go-autorest/autorest/adal(archived)
  • github.com/cespare/cp(low activity or limited maintainers)
  • github.com/cespare/xxhash/v2(low activity or limited maintainers)via github.com/VictoriaMetrics/fastcache

Heaviest Dependencies

Direct DependencyTransitive Deps% of Total
github.com/crate-crypto/go-eth-kzg1616.7%
github.com/consensys/gnark-crypto1515.6%
github.com/cloudflare/cloudflare-go1414.6%

Add to your README

Click a card to copy the markdown to your clipboard.

Get dependency diffs on every PR
- uses: stacktower-io/stacktower-action@v1
  with:
    api-key: ${{ secrets.STACKTOWER_API_KEY }}
    fail-on-vuln: true
Starts from package.json - Free with any account

Commit History

CommitDepsRenderedCompare
973mo agocurrent

Sign in to access full commit history.

Cookie Preferences

We use essential cookies for authentication. We also use analytics cookies to understand how you use Stacktower and improve the experience. Read our Privacy Policy.

  1. Server error
    Something went wrong. Please try again later.
  2. Server error
    Something went wrong. Please try again later.