wearedevilabs/CloudSlash Dependency Health Report

182 dependencies · 546 connections · 1 commit tracked

55 issues found

14 vulnerabilities · 13 license risks · 28 brittle deps

Dependencies

182

Connections

546

Vulnerabilities

License Risks

Security Overview

Vulnerabilities

2 critical, 3 high, 6 medium, 1 low

•golang.org/x/crypto(critical)via github.com/hashicorp/hcl/v2
•google.golang.org/grpc(critical)via go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp
•go.opentelemetry.io/otel(high)
•github.com/docker/docker(high)
•go.opentelemetry.io/otel/sdk(high)

License Risks

13 packages with non-permissive or unknown licenses

Weak Copyleft (1)

Unknown (12)

Brittle Dependencies

28 unmaintained or at-risk packages

•github.com/Azure/go-ansiterm(low activity or limited maintainers)
•github.com/agext/levenshtein(low activity or limited maintainers)via github.com/hashicorp/hcl/v2
•github.com/antlr4-go/antlr/v4(low activity or limited maintainers)via github.com/google/cel-go
•github.com/aymanbagabas/go-osc52/v2(low activity or limited maintainers)via github.com/charmbracelet/lipgloss
•github.com/cespare/xxhash/v2(low activity or limited maintainers)via go.opentelemetry.io/otel

Click a card to copy the markdown to your clipboard.

Get dependency diffs on every PR

- uses: stacktower-io/stacktower-action@v1
  with:
    api-key: ${{ secrets.STACKTOWER_API_KEY }}
    fail-on-vuln: true

Starts from package.json - Free with any account

Commit	Deps	Rendered	Compare
	182	29d ago	current