基础信息
项目名称：jesseduffield/lazygit
项目徽章：
仓库地址：https://github.com/pterodactyl/panel
检测报告地址：https://www.murphysec.com/console/report/1719099826632441856/1719099826674384896
此报告由Murphysec提供
漏洞列表
缺陷组件
| 组件名称 | 版本 | 最小修复版本 | 依赖关系 | 修复建议 |
|---|---|---|---|---|
| golang.org/x/net | v0.7.0 | 0.17.0 | 间接依赖 | 可选修复 |
许可证风险
| 许可证类型 | 相关组件 | 许可证风险 |
|---|---|---|
| BSD-3-Clause | 15 | 低 |
| Apache-2.0 | 14 | 低 |
| MIT | 35 | 低 |
| BSD-2-Clause | 2 | 低 |
| ISC | 2 | 低 |
| Unlicense | 1 | 低 |
SBOM清单
| 组件名称 | 组件版本 | 是否直接依赖 | 仓库 |
|---|---|---|---|
| github.com/jesseduffield/minimal/gitignore | v0.3.3-0.20211018110810-9cde264e6b1e | 直接依赖 | go |
| github.com/imdario/mergo | v0.3.11 | 直接依赖 | go |
| github.com/jesseduffield/yaml | v2.1.0+incompatible | 直接依赖 | go |
| github.com/pmezard/go-difflib | v1.0.0 | 直接依赖 | go |
| github.com/kylelemons/godebug | v1.1.0 | 间接依赖 | go |
| github.com/sirupsen/logrus | v1.4.2 | 直接依赖 | go |
| github.com/atotto/clipboard | v0.1.4 | 直接依赖 | go |
| github.com/jbenet/go-context | v0.0.0-20150711004518-d14ea06fba99 | 间接依赖 | go |
| github.com/gobwas/glob | v0.2.3 | 间接依赖 | go |
| github.com/gookit/color | v1.4.2 | 直接依赖 | go |
| github.com/OpenPeeDeeP/xdg | v1.0.0 | 直接依赖 | go |
| github.com/go-logfmt/logfmt | v0.5.0 | 间接依赖 | go |
| github.com/jesseduffield/go-git/v5 | v5.1.2-0.20221018185014-fdd53fef665d | 直接依赖 | go |
| golang.org/x/exp | v0.0.0-20220318154914-8dddf5d87bd8 | 直接依赖 | go |
| github.com/kyokomi/emoji/v2 | v2.2.8 | 直接依赖 | go |
| github.com/jesseduffield/lazycore | v0.0.0-20221012050358-03d2e40243c5 | 直接依赖 | go |
| github.com/google/go-cmp | v0.5.6 | 间接依赖 | go |
| github.com/jesseduffield/generics | v0.0.0-20220320043834-727e535cbe68 | 直接依赖 | go |
| gopkg.in/warnings.v0 | v0.1.2 | 间接依赖 | go |
| github.com/sasha-s/go-deadlock | v0.3.1 | 直接依赖 | go |
| github.com/petermattis/goid | v0.0.0-20180202154549-b0b1615b78e5 | 间接依赖 | go |
| github.com/mattn/go-isatty | v0.0.14 | 间接依赖 | go |
| github.com/kr/logfmt | v0.0.0-20140226030751-b84e30acd515 | 间接依赖 | go |
| golang.org/x/net | v0.7.0 | 间接依赖 | go |
| gopkg.in/ozeidan/fuzzy-patricia.v3 | v3.0.0 | 直接依赖 | go |
| github.com/jesseduffield/kill | v0.0.0-20220618033138-bfbe04675d10 | 直接依赖 | go |
| gopkg.in/yaml.v3 | v3.0.1 | 直接依赖 | go |
| github.com/creack/pty | v1.1.11 | 直接依赖 | go |
| golang.org/x/term | v0.12.0 | 间接依赖 | go |
| github.com/sahilm/fuzzy | v0.1.0 | 直接依赖 | go |
| github.com/gdamore/encoding | v1.0.0 | 间接依赖 | go |
| golang.org/x/crypto | v0.0.0-20220722155217-630584e8d5aa | 间接依赖 | go |
| golang.org/x/sys | v0.12.0 | 间接依赖 | go |
| github.com/sergi/go-diff | v1.1.0 | 间接依赖 | go |
| golang.org/x/text | v0.13.0 | 间接依赖 | go |
| github.com/fsmiamoto/git-todo-parser | v0.0.5 | 直接依赖 | go |
| github.com/sanity-io/litter | v1.5.2 | 直接依赖 | go |
| github.com/onsi/ginkgo | v1.10.3 | 间接依赖 | go |
| github.com/cloudfoundry/jibber_jabber | v0.0.0-20151120183258-bcc4c8345a21 | 直接依赖 | go |
| github.com/xo/terminfo | v0.0.0-20210125001918-ca9a967f8778 | 直接依赖 | go |
| github.com/stefanhaller/tcell/v2 | v2.6.2-0.20230806061358-2dfa11eddb68 | 直接依赖 | go |
| github.com/samber/lo | v1.31.0 | 直接依赖 | go |
| github.com/kardianos/osext | v0.0.0-20190222173326-2bc1f35cddc0 | 直接依赖 | go |
| github.com/xanzy/ssh-agent | v0.2.1 | 间接依赖 | go |
| github.com/stretchr/testify | v1.8.0 | 直接依赖 | go |
| github.com/mitchellh/go-homedir | v1.1.0 | 间接依赖 | go |
| github.com/jesseduffield/gocui | v0.3.1-0.20230925062444-7cd0d7e2a70a | 直接依赖 | go |
| github.com/kevinburke/ssh_config | v0.0.0-20190725054713-01f96b0aa0cd | 间接依赖 | go |
| github.com/aybabtme/humanlog | v0.4.1 | 直接依赖 | go |
| github.com/konsorten/go-windows-terminal-sequences | v1.0.2 | 间接依赖 | go |
| github.com/go-git/go-billy/v5 | v5.0.0 | 间接依赖 | go |
| github.com/emirpasic/gods | v1.12.0 | 间接依赖 | go |
| github.com/fatih/color | v1.9.0 | 间接依赖 | go |
| github.com/mattn/go-colorable | v0.1.11 | 间接依赖 | go |
| github.com/mattn/go-runewidth | v0.0.15 | 直接依赖 | go |
| github.com/rivo/uniseg | v0.4.4 | 间接依赖 | go |
| github.com/spf13/afero | v1.9.5 | 直接依赖 | go |
| github.com/lucasb-eyer/go-colorful | v1.2.0 | 直接依赖 | go |
| github.com/davecgh/go-spew | v1.1.1 | 间接依赖 | go |
| github.com/spkg/bom | v0.0.0-20160624110644-59b7046e48ad | 直接依赖 | go |
| github.com/mgutz/str | v1.2.0 | 直接依赖 | go |
| github.com/integrii/flaggy | v1.4.0 | 直接依赖 | go |
| github.com/go-errors/errors | v1.5.1 | 直接依赖 | go |
| github.com/onsi/gomega | v1.7.1 | 间接依赖 | go |
| github.com/mitchellh/go-ps | v1.0.0 | 直接依赖 | go |
| github.com/go-git/gcfg | v1.5.0 | 间接依赖 | go |