Installations

npm install snyk-go-plugin

Pull Requests

Open

1

Total

119

Closed

22

Merged

96

Issues

Open

0

Total

3

Closed

3

Releases

71

v1.23.0

Published on 15 May 2023

v1.22.0

Published on 15 May 2023

v1.21.1

Published on 15 May 2023

v1.21.0

Published on 09 May 2023

v1.20.0

Published on 03 May 2023

v1.19.5

Published on 29 Mar 2023

View all 71 releases

Developer

snyk

Developer Guide

BETA

Module System

CommonJS

Min. Node Version

>=12

Typescript Support

Yes

Node Version

18.15.0

NPM Version

9.5.0 Statistics

13 Stars

263 Commits

12 Forks

106 Watching

2 Branches

46 Contributors

Updated on 29 Oct 2024

Languages

TypeScript (82.46%)

Go (17.54%)

Total Downloads

Cumulative downloads

Total Downloads

51,284,677

Last day

11.2%

6,099

Compared to previous day

Last week

-3.5%

36,375

Compared to previous week

Last month

56.6%

124,580

Compared to previous month

Last year

-46.2%

1,622,620

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

7

@snyk/dep-graph @snyk/graphlib debug lookpath snyk-go-parser tmp tslib

Dev Dependencies

13

@types/debug @types/node @types/tmp @typescript-eslint/eslint-plugin @typescript-eslint/parser eslint eslint-config-prettier prettier tap tap-only ts-node tslint typescript

Versions

Snyk helps you find, fix and monitor for known vulnerabilities in your dependencies, both on an ad hoc basis and as part of your CI (Build) system.

:information_source: This repository is only a plugin to be used with the Snyk CLI tool. To use this plugin to test and fix vulnerabilities in your project, install the Snyk CLI tool first. Head over to snyk.io to get started.

Snyk Golang CLI Plugin

This plugin provides dependency metadata for Golang projects that use dep (and have a Gopkg.lock file), or govendor (and have a vendor/vendor.json file).

Stable Version

The latest stable version of the package.

Stable Version

1.23.0

HIGH

1

HIGH

7.8/10

Summary

Snyk CLI affected by Command Injection vulnerability

Affected Versions

< 1.19.1

Patched Versions

1.19.1

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

9

License

Determines if the project has defined a license.

8

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

7

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

0

Maintained

Determines if the project is "actively maintained".

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

0

Security-Policy

Determines if the project has published a security policy.

0

Fuzzing

Determines if the project uses fuzzing.

0

SAST

Determines if the project uses static code analysis.

Score

4.3

/10

Last Scanned on 2024-11-18

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More

Other packages similar to snyk-go-plugin

Other packages similar to snyk-go-plugin

snyk-go-plugin

Installations

Pull Requests

1

119

22

96

Issues

0

3

3

Releases

Developer

snyk

Developer Guide

CommonJS

>=12

Yes

18.15.0

9.5.0

Statistics

Languages

Total Downloads

51,284,677

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

Dev Dependencies

Snyk Golang CLI Plugin

Stable Version

1.23.0

HIGH

10

10

9

8

7

0

0

0

0

0

0

0

4.3

/10