flyteorg/flyte 软件分析报告

基础信息

项目名称:flyteorg/flyte

项目徽章:

Security Status

仓库地址:https://github.com/pterodactyl/panel

检测报告地址:https://www.murphysec.com/console/report/1717916271257452544/1755417119097122816

此报告由Murphysec提供

漏洞列表

漏洞名称 漏洞类型 MPS编号 CVE编号 漏洞等级
Certifi 存在数据真实性验证不充分漏洞 对数据真实性的验证不充分 MPS-2022-1918 CVE-2022-23491 中危
lxml 和 libxml2 代码问题漏洞 空指针取消引用 MPS-2022-46661 CVE-2022-2309 高危
Matthäus G. Chajdas pygments 代码问题漏洞 任意文件上传 MPS-2022-57237 CVE-2022-40896 中危
Python 安全漏洞 ReDoS MPS-2022-57238 CVE-2022-40897 中危
Google Golang 资源管理错误漏洞 MPS-2022-58307 CVE-2022-41723 高危
urllib3 安全漏洞 MPS-46py-nxai CVE-2023-45803 中危
Jinja 跨站脚本漏洞 XSS MPS-6p1s-f3oy CVE-2024-22195 中危
Google Golang 资源管理错误漏洞 不加限制或调节的资源分配 MPS-c8am-hbny CVE-2023-39325 高危
Certifi 数据伪造问题漏洞 对数据真实性的验证不充分 MPS-ck78-r6zg CVE-2023-37920 严重
Requests Proxy-Authorization 标头泄露漏洞 未授权敏感信息泄露 MPS-hr61-tzey CVE-2023-32681 中危
CVE-2023-47108漏洞 不加限制或调节的资源分配 MPS-lrfd-7kb6 CVE-2023-47108 高危
SSH协议前缀截断攻击(Terrapin攻击) 安全相关信息的截断 MPS-nv0f-qtib CVE-2023-48795 中危
urllib3 HTTP重定向信息泄露漏洞 未授权敏感信息泄露 MPS-s0oy-afbw CVE-2023-43804 高危

缺陷组件

组件名称 版本 最小修复版本 依赖关系 修复建议
golang.org/x/net v0.3.1-0.20221206200815-1e63c2f08a10 0.17.0 间接依赖 建议修复
urllib3 1.26.8 1.26.18 间接依赖 建议修复
lxml 4.7.1 4.9.1 间接依赖 建议修复
certifi 2021.10.8 2023.7.22 间接依赖 建议修复
requests 2.27.1 2.31.0 间接依赖 建议修复
golang.org/x/crypto v0.11.0 0.17.0 间接依赖 建议修复
golang.org/x/crypto v0.16.0 0.17.0 间接依赖 建议修复
golang.org/x/crypto v0.14.0 0.17.0 间接依赖 建议修复
golang.org/x/crypto v0.13.0 0.17.0 间接依赖 建议修复
setuptools 39.2.0 65.5.1 间接依赖 可选修复
golang.org/x/net v0.12.0 0.17.0 间接依赖 可选修复
pygments 2.11.2 2.15.0 间接依赖 可选修复
golang.org/x/net v0.15.0 0.17.0 间接依赖 可选修复
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.35.0 0.46.0 直接依赖 可选修复
jinja2 3.0.3 3.1.3 间接依赖 可选修复

许可证风险

许可证类型 相关组件 许可证风险
自定义许可证 7
BSD-3-Clause 108
MIT 212
Apache-2.0 179
GPL-3.0-only 1
ISC 2
MPL-2.0 10
BSD-2-Clause 14
未知许可证 1
CC0-1.0 1
GPL-3.0 7
GPL-3.0-or-later 3
BSD-2-Clause-Views 2

SBOM清单

组件名称 组件版本 是否直接依赖 仓库
sphinxcontrib-qthelp 1.0.3 间接依赖 pip
github.com/golangci/go-misc v0.0.0-20220329215616-d24fe342adfe 间接依赖 go
github.com/gobwas/glob v0.2.3 间接依赖 go
github.com/flyteorg/flyte/datacatalog v0.0.0-00010101000000-000000000000 直接依赖 go
github.com/aws/aws-sdk-go-v2 v1.2.0 直接依赖 go
gopkg.in/jcmturner/aescts.v1 v1.0.1 间接依赖 go
github.com/mattn/go-colorable v0.1.12 间接依赖 go
gorm.io/driver/postgres v1.5.3 直接依赖 go
k8s.io/apimachinery v0.26.1 直接依赖 go
golang.org/x/sys v0.12.0 间接依赖 go
github.com/pseudomuto/protoc-gen-doc v1.4.1 直接依赖 go
github.com/ghodss/yaml v1.0.0 直接依赖 go
github.com/matoous/godox v0.0.0-20230222163458-006bad1f9d26 间接依赖 go
soupsieve 2.3.1 间接依赖 pip
golang.org/x/text v0.11.0 间接依赖 go
github.com/mitchellh/mapstructure v1.5.0 直接依赖 go
github.com/grpc-ecosystem/go-grpc-prometheus v1.2.1-0.20210315223345-82c243799c99 直接依赖 go
setuptools 39.2.0 间接依赖 pip
cloud.google.com/go/storage v1.29.0 间接依赖 go
go.uber.org/multierr v1.6.0 间接依赖 go
github.com/tomarrell/wrapcheck/v2 v2.8.1 间接依赖 go
github.com/go-toolsmith/astp v1.1.0 间接依赖 go
imagesize 1.3.0 间接依赖 pip
k8s.io/kube-openapi v0.0.0-20230905202853-d090da108d2f 间接依赖 go
sigs.k8s.io/json v0.0.0-20220713155537-f223a00ba0e2 间接依赖 go
github.com/aws/aws-sdk-go v1.37.1 间接依赖 go
github.com/huandu/xstrings v1.0.0 间接依赖 go
golang.org/x/oauth2 v0.15.0 直接依赖 go
github.com/flyteorg/stow v0.3.1 间接依赖 go
google.golang.org/genproto v0.0.0-20231212172506-995d672761c0 直接依赖 go
golang.org/x/exp/typeparams v0.0.0-20230224173230-c95f2b4c22f2 间接依赖 go
golang.org/x/exp v0.0.0-20230510235704-dd950f8aeaea 间接依赖 go
github.com/sashamelentyev/usestdlibvars v1.23.0 间接依赖 go
github.com/eapache/go-xerial-snappy v0.0.0-20180814174437-776d5712da21 间接依赖 go
github.com/esimonov/ifshort v1.0.4 间接依赖 go
github.com/prometheus/common v0.44.0 间接依赖 go
github.com/ssgreg/nlreturn/v2 v2.2.1 间接依赖 go
github.com/ernesto-jimenez/gogen v0.0.0-20180125220232-d7d4131e6607 直接依赖 go
github.com/Antonboom/nilnil v0.1.5 间接依赖 go
k8s.io/client-go v0.28.3 直接依赖 go
gopkg.in/inf.v0 v0.9.1 间接依赖 go
github.com/Azure/azure-sdk-for-go/sdk/internal v1.3.0 间接依赖 go
github.com/grpc-ecosystem/go-grpc-middleware v1.3.0 直接依赖 go
gopkg.in/jcmturner/dnsutils.v1 v1.0.1 间接依赖 go
sphinx-markdown-tables 0.0.15 间接依赖 pip
github.com/golangci/gofmt v0.0.0-20220901101216-f2edd75033f2 间接依赖 go
github.com/grpc-ecosystem/go-grpc-middleware v1.1.0 直接依赖 go
google.golang.org/genproto v0.0.0-20230526161137-0005af68ea54 间接依赖 go
beautifulsoup4 4.10.0 间接依赖 pip
github.com/google/uuid v1.3.0 间接依赖 go
github.com/go-errors/errors v1.0.1 间接依赖 go
k8s.io/api v0.28.3 直接依赖 go
mvdan.cc/interfacer v0.0.0-20180901003855-c20040233aed 间接依赖 go
github.com/davecgh/go-spew v1.1.1 间接依赖 go
golang.org/x/text v0.13.0 间接依赖 go
github.com/go-toolsmith/astfmt v1.1.0 间接依赖 go
github.com/ashanbrown/forbidigo v1.5.3 间接依赖 go
golang.org/x/time v0.3.0 直接依赖 go
github.com/securego/gosec/v2 v2.16.0 间接依赖 go
github.com/Azure/go-autorest v14.2.0+incompatible 间接依赖 go
github.com/breml/errchkjson v0.3.1 间接依赖 go
github.com/hashicorp/go-version v1.6.0 间接依赖 go
github.com/ory/x v0.0.214 直接依赖 go
github.com/ryanrolds/sqlclosecheck v0.4.0 间接依赖 go
github.com/quasilyte/stdinfo v0.0.0-20220114132959-f7386bf02567 间接依赖 go
github.com/gorilla/websocket v1.4.2 间接依赖 go
github.com/magiconair/properties v1.8.6 直接依赖 go
github.com/mattn/goveralls v0.0.6 间接依赖 go
github.com/kisielk/errcheck v1.6.3 间接依赖 go
sphinx-panels 0.6.0 间接依赖 pip
github.com/aws/aws-sdk-go-v2/service/athena v1.0.0 直接依赖 go
github.com/sashamelentyev/interfacebloat v1.1.0 间接依赖 go
google.golang.org/genproto/googleapis/rpc v0.0.0-20230526161137-0005af68ea54 间接依赖 go
k8s.io/apiextensions-apiserver v0.28.0 直接依赖 go
github.com/mattn/go-sqlite3 v1.14.17 间接依赖 go
gorm.io/plugin/opentelemetry v0.1.4 直接依赖 go
github.com/Masterminds/sprig v2.15.0+incompatible 间接依赖 go
CronSchedule 间接依赖 pip
github.com/sivchari/containedctx v1.0.3 间接依赖 go
github.com/cespare/xxhash/v2 v2.2.0 间接依赖 go
github.com/ettle/strcase v0.1.1 间接依赖 go
github.com/spf13/viper v1.12.0 间接依赖 go
importlib-metadata 4.10.0 间接依赖 pip
github.com/Antonboom/errname v0.1.10 间接依赖 go
github.com/asaskevich/govalidator v0.0.0-20200428143746-21a406dcc535 间接依赖 go
github.com/golang/protobuf v1.5.3 直接依赖 go
github.com/pmezard/go-difflib v1.0.0 间接依赖 go
golang.org/x/term v0.12.0 间接依赖 go
go.uber.org/atomic v1.7.0 间接依赖 go
sphinx-copybutton 0.4.0 间接依赖 pip
github.com/prometheus/procfs v0.7.3 间接依赖 go
sigs.k8s.io/controller-runtime v0.12.1 直接依赖 go
github.com/ory/go-acc v0.2.6 间接依赖 go
github.com/Azure/azure-sdk-for-go/sdk/storage/azblob v0.3.0 间接依赖 go
github.com/aws/aws-sdk-go-v2/config v1.0.0 直接依赖 go
google.golang.org/genproto/googleapis/api v0.0.0-20240102182953-50ed04b92917 间接依赖 go
google.golang.org/appengine v1.6.8 间接依赖 go
github.com/butuzov/ireturn v0.2.0 间接依赖 go
github.com/spf13/afero v1.9.2 间接依赖 go
go.opentelemetry.io/otel v1.19.0 直接依赖 go
github.com/fzipp/gocyclo v0.6.0 间接依赖 go
k8s.io/api v0.28.2 直接依赖 go
github.com/emicklei/go-restful/v3 v3.11.0 间接依赖 go
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.0.0 间接依赖 go
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.0.0 间接依赖 go
golang.org/x/sys v0.3.0 间接依赖 go
go.opentelemetry.io/otel/metric v1.19.0 间接依赖 go
k8s.io/apimachinery v0.28.3 直接依赖 go
github.com/spf13/cast v1.4.1 间接依赖 go
github.com/aws/aws-sdk-go-v2/credentials v1.0.0 间接依赖 go
github.com/tdakkota/asciicheck v0.2.0 间接依赖 go
github.com/klauspost/compress v1.9.8 间接依赖 go
github.com/PuerkitoBio/urlesc v0.0.0-20170810143723-de5bf2ad4578 间接依赖 go
github.com/jackc/pgx/v5 v5.4.3 直接依赖 go
github.com/Djarvur/go-err113 v0.0.0-20210108212216-aea10b59be24 间接依赖 go
github.com/go-openapi/swag v0.22.3 间接依赖 go
github.com/jgautheron/goconst v1.5.1 间接依赖 go
github.com/go-redis/redis v6.15.7+incompatible 直接依赖 go
golang.org/x/term v0.13.0 间接依赖 go
github.com/maratori/testpackage v1.1.1 间接依赖 go
github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.3.1 间接依赖 go
github.com/Azure/go-autorest/autorest v0.11.17 间接依赖 go
unidecode 1.3.2 间接依赖 pip
golang.org/x/crypto v0.16.0 间接依赖 go
github.com/prometheus/client_golang v1.16.0 直接依赖 go
cloud.google.com/go/compute/metadata v0.2.3 间接依赖 go
golang.org/x/mod v0.12.0 间接依赖 go
github.com/flyteorg/flyte/flyteplugins v0.0.0-00010101000000-000000000000 直接依赖 go
commonmark 0.9.1 间接依赖 pip
github.com/google/gofuzz v1.2.0 间接依赖 go
github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0 直接依赖 go
github.com/fsnotify/fsnotify v1.5.4 间接依赖 go
golang.org/x/text v0.14.0 间接依赖 go
github.com/mattn/go-runewidth v0.0.9 间接依赖 go
github.com/spf13/cobra v1.7.0 直接依赖 go
google.golang.org/genproto/googleapis/api v0.0.0-20230530153820-e85fd2cbaebc 间接依赖 go
golang.org/x/crypto v0.13.0 间接依赖 go
flytekit 间接依赖 pip
github.com/BurntSushi/toml v1.3.2 间接依赖 go
snowballstemmer 2.2.0 间接依赖 pip
k8s.io/kube-openapi v0.0.0-20230717233707-2695361300d9 间接依赖 go
github.com/jackc/pgconn v1.14.1 直接依赖 go
attrs 22.2.0 间接依赖 pip
github.com/fatih/color v1.13.0 直接依赖 go
github.com/cloudevents/sdk-go/binding/format/protobuf/v2 v2.8.0 直接依赖 go
github.com/jackc/pgio v1.0.0 间接依赖 go
github.com/prometheus/procfs v0.10.1 间接依赖 go
golang.org/x/tools v0.13.0 间接依赖 go
github.com/gtank/cryptopasta v0.0.0-20170601214702-1f550f6f2f69 直接依赖 go
go.uber.org/zap v1.25.0 间接依赖 go
requests 2.27.1 间接依赖 pip
github.com/go-toolsmith/astcopy v1.1.0 间接依赖 go
github.com/pierrec/lz4 v2.5.2+incompatible 间接依赖 go
github.com/gogo/protobuf v1.3.2 间接依赖 go
github.com/golangci/check v0.0.0-20180506172741-cfe4005ccda2 间接依赖 go
idna 3.3 间接依赖 pip
github.com/googleapis/gax-go/v2 v2.12.0 直接依赖 go
github.com/ykadowak/zerologlint v0.1.2 间接依赖 go
github.com/nunnatsa/ginkgolinter v0.12.1 间接依赖 go
github.com/go-toolsmith/astcast v1.1.0 间接依赖 go
github.com/julz/importas v0.1.0 间接依赖 go
sphinxcontrib-devhelp 1.0.2 间接依赖 pip
golang.org/x/net v0.17.0 直接依赖 go
gotest.tools v2.2.0+incompatible 直接依赖 go
github.com/kyoh86/exportloopref v0.1.11 间接依赖 go
text-unidecode 1.3 间接依赖 pip
gorm.io/driver/mysql v1.4.4 直接依赖 go
github.com/mwitkow/go-proto-validators v0.0.0-20180403085117-0950a7990007 间接依赖 go
pygments 2.11.2 间接依赖 pip
github.com/envoyproxy/protoc-gen-validate v0.10.0 间接依赖 go
github.com/inconshreveable/mousetrap v1.1.0 间接依赖 go
go.opentelemetry.io/otel/exporters/jaeger v1.17.0 直接依赖 go
github.com/bkielbasa/cyclop v1.2.1 间接依赖 go
github.com/Azure/azure-sdk-for-go/sdk/internal v0.8.3 间接依赖 go
github.com/jinzhu/copier v0.3.5 直接依赖 go
github.com/Shopify/sarama v1.26.4 直接依赖 go
github.com/hexops/gotextdiff v1.0.3 间接依赖 go
github.com/blizzy78/varnamelen v0.8.0 间接依赖 go
github.com/pelletier/go-toml v1.9.5 间接依赖 go
urllib3 1.26.8 间接依赖 pip
docutils 0.17.1 间接依赖 pip
github.com/google/uuid v1.4.0 直接依赖 go
sphinxcontrib-htmlhelp 2.0.0 间接依赖 pip
github.com/prometheus/client_model v0.4.0 直接依赖 go
github.com/jackc/pgproto3/v2 v2.3.2 间接依赖 go
github.com/golangci/golangci-lint v1.53.3 直接依赖 go
github.com/google/go-cmp v0.5.9 间接依赖 go
github.com/hashicorp/go-multierror v1.1.1 间接依赖 go
babel 2.9.1 间接依赖 pip
grafanalib 0.7.0 间接依赖 pip
github.com/imdario/mergo v0.3.5 间接依赖 go
github.com/Azure/go-autorest/autorest/date v0.3.0 间接依赖 go
github.com/Azure/go-autorest/tracing v0.6.0 间接依赖 go
github.com/sirupsen/logrus v1.9.3 直接依赖 go
github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 间接依赖 go
github.com/evanphx/json-patch v4.12.0+incompatible 间接依赖 go
github.com/bombsimon/wsl/v3 v3.4.0 间接依赖 go
golang.org/x/sys v0.15.0 间接依赖 go
github.com/leonklingele/grouper v1.1.1 间接依赖 go
github.com/ryancurrah/gomodguard v1.3.0 间接依赖 go
golang.org/x/net v0.15.0 直接依赖 go
pyparsing 3.0.6 间接依赖 pip
github.com/googleapis/enterprise-certificate-proxy v0.3.2 间接依赖 go
github.com/robfig/cron/v3 v3.0.0 直接依赖 go
k8s.io/klog/v2 v2.100.1 间接依赖 go
github.com/ory/fosite v0.42.2 直接依赖 go
gopkg.in/yaml.v3 v3.0.1 间接依赖 go
github.com/google/s2a-go v0.1.4 间接依赖 go
github.com/google/gnostic v0.5.7-v3refs 间接依赖 go
google.golang.org/grpc v1.55.0 间接依赖 go
github.com/go-toolsmith/typep v1.1.0 间接依赖 go
github.com/go-logr/logr v1.2.4 间接依赖 go
golang.org/x/xerrors v0.0.0-20220907171357-04be3eba64a2 间接依赖 go
go.opentelemetry.io/otel/sdk v1.19.0 直接依赖 go
github.com/hashicorp/errwrap v1.1.0 间接依赖 go
github.com/bradfitz/gomemcache v0.0.0-20190913173617-a41fca850d0b 间接依赖 go
github.com/spf13/afero v1.8.2 间接依赖 go
github.com/grpc-ecosystem/grpc-gateway/v2 v2.7.0 直接依赖 go
github.com/alexkohler/nakedret/v2 v2.0.2 间接依赖 go
cloud.google.com/go/iam v0.13.0 间接依赖 go
github.com/go-openapi/swag v0.19.14 间接依赖 go
github.com/golangci/lint-1 v0.0.0-20191013205115-297bf364a8e0 间接依赖 go
github.com/Azure/azure-sdk-for-go/sdk/storage/azblob v1.1.0 间接依赖 go
github.com/Abirdcfly/dupword v0.0.11 间接依赖 go
github.com/Azure/azure-sdk-for-go/sdk/azcore v1.7.2 间接依赖 go
k8s.io/apimachinery v0.20.2 间接依赖 go
github.com/flyteorg/flyte/flytepropeller v0.0.0-00010101000000-000000000000 直接依赖 go
github.com/sirupsen/logrus v1.9.2 间接依赖 go
sphinxcontrib-applehelp 1.0.2 间接依赖 pip
github.com/gostaticanalysis/forcetypeassert v0.1.0 间接依赖 go
css-html-js-minify 2.5.5 间接依赖 pip
github.com/golangci/misspell v0.4.0 间接依赖 go
github.com/dask/dask-kubernetes/v2023 v2023.0.0-20230626103304-abd02cd17b26 直接依赖 go
google.golang.org/appengine v1.6.7 间接依赖 go
github.com/PuerkitoBio/purell v1.1.1 间接依赖 go
pytz 2021.3 间接依赖 pip
cloud.google.com/go v0.110.0 间接依赖 go
github.com/grpc-ecosystem/grpc-gateway v1.16.0 直接依赖 go
github.com/OpenPeeDeeP/depguard/v2 v2.1.0 间接依赖 go
github.com/Azure/azure-sdk-for-go/sdk/azcore v0.21.1 间接依赖 go
mvdan.cc/lint v0.0.0-20170908181259-adc824a0674b 间接依赖 go
github.com/xlab/treeprint v1.1.0 间接依赖 go
sigs.k8s.io/controller-runtime v0.16.3 直接依赖 go
github.com/tommy-muehle/go-mnd/v2 v2.5.1 间接依赖 go
github.com/kelseyhightower/envconfig v1.4.0 间接依赖 go
github.com/denis-tingaikin/go-header v0.4.3 间接依赖 go
golang.org/x/tools v0.11.1 间接依赖 go
github.com/google/uuid v1.3.1 直接依赖 go
github.com/cloudevents/sdk-go/binding/format/protobuf/v2 v2.14.0 间接依赖 go
github.com/aokoli/goutils v1.0.1 间接依赖 go
github.com/t-yuki/gocover-cobertura v0.0.0-20180217150009-aaee18c8195c 间接依赖 go
k8s.io/utils v0.0.0-20230406110748-d93618cff8a2 直接依赖 go
sphinx-material 0.0.35 间接依赖 pip
k8s.io/component-base v0.28.1 间接依赖 go
github.com/prometheus/client_golang v1.12.1 间接依赖 go
github.com/felixge/httpsnoop v1.0.3 间接依赖 go
golang.org/x/time v0.0.0-20201208040808-7e3f01d25324 间接依赖 go
golang.org/x/sys v0.13.0 间接依赖 go
sphinxcontrib-jsmath 1.0.1 间接依赖 pip
github.com/ory/go-convenience v0.1.0 间接依赖 go
github.com/jinzhu/inflection v1.0.0 间接依赖 go
golang.org/x/net v0.19.0 间接依赖 go
github.com/mattn/go-colorable v0.1.13 间接依赖 go
github.com/fsnotify/fsnotify v1.6.0 直接依赖 go
github.com/subosito/gotenv v1.4.1 间接依赖 go
dataclass 间接依赖 pip
github.com/grpc-ecosystem/grpc-gateway/v2 v2.19.0 直接依赖 go
github.com/pelletier/go-toml v1.9.4 间接依赖 go
golang.org/x/net v0.3.1-0.20221206200815-1e63c2f08a10 间接依赖 go
zipp 3.7.0 间接依赖 pip
LaunchPlan 间接依赖 pip
github.com/GoogleCloudPlatform/spark-on-k8s-operator v0.0.0-20200723154620-6f35a1152625 直接依赖 go
github.com/sourcegraph/go-diff v0.7.0 间接依赖 go
github.com/ldez/tagliatelle v0.5.0 间接依赖 go
github.com/go-openapi/jsonreference v0.20.2 间接依赖 go
github.com/Masterminds/semver v1.5.0 间接依赖 go
github.com/coreos/go-oidc/v3 v3.6.0 直接依赖 go
github.com/eapache/queue v1.1.0 间接依赖 go
github.com/subosito/gotenv v1.2.0 间接依赖 go
k8s.io/client-go v0.28.1 直接依赖 go
sphinx 4.3.2 间接依赖 pip
github.com/eapache/go-resiliency v1.2.0 间接依赖 go
golang.org/x/sync v0.4.0 直接依赖 go
github.com/mitchellh/go-ps v1.0.0 直接依赖 go
github.com/benlaurie/objecthash v0.0.0-20180202135721-d1e3d6079fc1 直接依赖 go
github.com/gostaticanalysis/comment v1.4.2 间接依赖 go
github.com/cloudevents/sdk-go/protocol/kafka_sarama/v2 v2.8.0 直接依赖 go
github.com/flyteorg/flytestdlib v0.4.16 直接依赖 go
google.golang.org/grpc v1.60.1 直接依赖 go
go.uber.org/zap v1.24.0 间接依赖 go
jinja2 3.0.3 间接依赖 pip
github.com/kylelemons/godebug v1.1.0 间接依赖 go
field 间接依赖 pip
github.com/xen0n/gosmopolitan v1.2.1 间接依赖 go
github.com/NYTimes/gizmo v1.3.6 直接依赖 go
github.com/olekukonko/tablewriter v0.0.5 间接依赖 go
github.com/mitchellh/go-homedir v1.1.0 间接依赖 go
task 间接依赖 pip
cloud.google.com/go/compute v1.23.3 间接依赖 go
golang.org/x/crypto v0.11.0 间接依赖 go
github.com/json-iterator/go v1.1.12 间接依赖 go
github.com/spf13/jwalterweatherman v1.1.0 间接依赖 go
cloud.google.com/go v0.110.2 间接依赖 go
github.com/pelletier/go-toml/v2 v2.0.0-beta.8 间接依赖 go
google.golang.org/genproto/googleapis/rpc v0.0.0-20240102182953-50ed04b92917 间接依赖 go
github.com/mattn/go-sqlite3 v2.0.3+incompatible 间接依赖 go
github.com/ncw/swift v1.0.53 间接依赖 go
github.com/golangci/unconvert v0.0.0-20180507085042-28b1c447d1f4 间接依赖 go
github.com/rogpeppe/go-internal v1.11.0 间接依赖 go
github.com/envoyproxy/protoc-gen-validate v0.10.1 间接依赖 go
github.com/dgraph-io/ristretto v0.0.3 间接依赖 go
google.golang.org/api v0.149.0 直接依赖 go
github.com/flyteorg/flyte/flyteadmin v0.0.0-00010101000000-000000000000 直接依赖 go
cloud.google.com/go/iam v1.1.5 直接依赖 go
github.com/shazow/go-diff v0.0.0-20160112020656-b6b7b6733b8c 间接依赖 go
github.com/pkg/errors v0.9.1 直接依赖 go
github.com/quasilyte/go-ruleguard v0.3.19 间接依赖 go
gopkg.in/ini.v1 v1.67.0 间接依赖 go
github.com/mailru/easyjson v0.7.6 间接依赖 go
github.com/beorn7/perks v1.0.1 间接依赖 go
lxml 4.7.1 间接依赖 pip
github.com/josharian/intern v1.0.0 间接依赖 go
github.com/gostaticanalysis/nilerr v0.1.1 间接依赖 go
github.com/mohae/deepcopy v0.0.0-20170929034955-c48cc78d4826 间接依赖 go
github.com/pascaldekloe/name v0.0.0-20180628100202-0fd16699aae1 间接依赖 go
github.com/chavacava/garif v0.0.0-20230227094218-b8c73b2037b8 间接依赖 go
github.com/breml/bidichk v0.2.4 间接依赖 go
golang.org/x/crypto v0.14.0 间接依赖 go
github.com/kisielk/gotool v1.0.0 间接依赖 go
github.com/emicklei/go-restful/v3 v3.9.0 间接依赖 go
github.com/hashicorp/go-uuid v1.0.2 间接依赖 go
github.com/go-openapi/jsonpointer v0.19.6 间接依赖 go
google.golang.org/protobuf v1.28.1 间接依赖 go
gopkg.in/yaml.v2 v2.4.0 间接依赖 go
github.com/quasilyte/regex/syntax v0.0.0-20210819130434-b3f0c404a727 间接依赖 go
gopkg.in/jcmturner/gokrb5.v7 v7.5.0 间接依赖 go
k8s.io/kube-openapi v0.0.0-20221012153701-172d655c2280 间接依赖 go
github.com/cespare/xxhash v1.1.0 间接依赖 go
github.com/quasilyte/gogrep v0.5.0 间接依赖 go
github.com/imdario/mergo v0.3.6 间接依赖 go
six 1.16.0 间接依赖 pip
github.com/sendgrid/sendgrid-go v3.10.0+incompatible 直接依赖 go
github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da 间接依赖 go
github.com/jcmturner/gofork v1.0.0 间接依赖 go
golang.org/x/mod v0.10.0 间接依赖 go
github.com/gorilla/securecookie v1.1.1 直接依赖 go
k8s.io/apimachinery v0.28.2 直接依赖 go
google.golang.org/genproto/googleapis/api v0.0.0-20230525234035-dd9d682886f9 直接依赖 go
github.com/spf13/pflag v1.0.5 直接依赖 go
github.com/golangci/maligned v0.0.0-20180506175553-b1d89398deca 间接依赖 go
go.starlark.net v0.0.0-20200306205701-8dd3e2ee1dd5 间接依赖 go
github.com/moricho/tparallel v0.3.1 间接依赖 go
github.com/google/s2a-go v0.1.7 间接依赖 go
github.com/fatih/color v1.15.0 间接依赖 go
github.com/golang/protobuf v1.5.2 间接依赖 go
cloud.google.com/go/storage v1.30.1 直接依赖 go
google.golang.org/protobuf v1.32.0 直接依赖 go
github.com/bradfitz/gomemcache v0.0.0-20180710155616-bc664df96737 间接依赖 go
github.com/timakin/bodyclose v0.0.0-20230421092635-574207250966 间接依赖 go
github.com/go-xmlfmt/xmlfmt v1.1.2 间接依赖 go
github.com/4meepo/tagalign v1.2.2 间接依赖 go
github.com/googleapis/gax-go/v2 v2.11.0 间接依赖 go
github.com/alexkohler/prealloc v1.0.0 间接依赖 go
github.com/maratori/testableexamples v1.0.0 间接依赖 go
github.com/lestrrat-go/httpcc v1.0.0 间接依赖 go
github.com/mattn/go-isatty v0.0.16 间接依赖 go
github.com/butuzov/mirror v1.1.0 间接依赖 go
github.com/goccy/go-json v0.4.8 间接依赖 go
github.com/Azure/go-autorest/autorest/adal v0.9.10 间接依赖 go
github.com/uudashr/gocognit v1.0.6 间接依赖 go
github.com/go-openapi/jsonpointer v0.19.5 间接依赖 go
github.com/go-toolsmith/strparse v1.1.0 间接依赖 go
gopkg.in/jcmturner/rpc.v1 v1.1.0 间接依赖 go
github.com/gofrs/flock v0.8.1 间接依赖 go
golang.org/x/sync v0.2.0 直接依赖 go
github.com/jackc/pgservicefile v0.0.0-20221227161230-091c0ba34f0a 间接依赖 go
github.com/firefart/nonamedreturns v1.0.4 间接依赖 go
github.com/form3tech-oss/jwt-go v3.2.2+incompatible 间接依赖 go
github.com/mattn/go-isatty v0.0.17 间接依赖 go
github.com/flyteorg/flyte/flyteidl v0.0.0-00010101000000-000000000000 直接依赖 go
github.com/kkHAIKE/contextcheck v1.1.4 间接依赖 go
github.com/googleapis/enterprise-certificate-proxy v0.2.3 间接依赖 go
github.com/benbjohnson/clock v1.3.0 直接依赖 go
github.com/google/gnostic-models v0.6.8 间接依赖 go
4d63.com/gocheckcompilerdirectives v1.2.1 间接依赖 go
github.com/tetafro/godot v1.4.11 间接依赖 go
google.golang.org/api v0.126.0 间接依赖 go
github.com/pelletier/go-toml/v2 v2.0.5 间接依赖 go
github.com/curioswitch/go-reassign v0.2.0 间接依赖 go
google.golang.org/genproto/googleapis/rpc v0.0.0-20230525234030-28d5490b6b19 间接依赖 go
github.com/stretchr/testify v1.8.4 直接依赖 go
github.com/kubeflow/common v0.4.3 直接依赖 go
github.com/go-gormigrate/gormigrate/v2 v2.1.1 直接依赖 go
cloud.google.com/go/iam v1.1.2 间接依赖 go
github.com/mgechev/revive v1.3.2 间接依赖 go
github.com/Azure/go-autorest/logger v0.2.0 间接依赖 go
cloud.google.com/go/storage v1.28.1 间接依赖 go
github.com/go-critic/go-critic v0.8.1 间接依赖 go
github.com/hashicorp/hcl v1.0.0 间接依赖 go
github.com/flyteorg/stow v0.3.8 直接依赖 go
recommonmark 0.7.1 间接依赖 pip
github.com/DiSiqueira/GoTree v1.0.1-0.20180907134536-53a8e837f295 直接依赖 go
github.com/go-jose/go-jose/v3 v3.0.0 间接依赖 go
google.golang.org/genproto/googleapis/api v0.0.0-20230526161137-0005af68ea54 间接依赖 go
gorm.io/gorm v1.25.5 间接依赖 go
github.com/lestrrat-go/backoff/v2 v2.0.7 间接依赖 go
cloud.google.com/go/compute v1.19.3 间接依赖 go
github.com/coocood/freecache v1.1.1 直接依赖 go
golang.org/x/term v0.15.0 间接依赖 go
sphinx-fontawesome 0.0.6 间接依赖 pip
google.golang.org/api v0.114.0 直接依赖 go
github.com/kubeflow/training-operator v1.5.0-rc.0 直接依赖 go
github.com/charithe/durationcheck v0.0.10 间接依赖 go
github.com/pborman/uuid v1.2.0 间接依赖 go
cloud.google.com/go v0.111.0 间接依赖 go
github.com/aws/smithy-go v1.1.0 间接依赖 go
k8s.io/klog/v2 v2.80.1 间接依赖 go
github.com/ultraware/funlen v0.0.3 间接依赖 go
sigs.k8s.io/kustomize/api v0.12.1 直接依赖 go
alabaster 0.7.12 间接依赖 pip
github.com/modern-go/reflect2 v1.0.2 间接依赖 go
github.com/ashanbrown/makezero v1.1.1 间接依赖 go
github.com/imdario/mergo v0.3.13 直接依赖 go
github.com/imdario/mergo v0.3.11 间接依赖 go
github.com/ray-project/kuberay/ray-operator v1.0.0 直接依赖 go
github.com/yagipy/maintidx v1.0.0 间接依赖 go
github.com/jirfag/go-printf-func-name v0.0.0-20200119135958-7558a9eaa5af 间接依赖 go
github.com/stretchr/testify v1.8.0 直接依赖 go
github.com/go-logr/stdr v1.2.2 间接依赖 go
markupsafe 2.0.1 间接依赖 pip
github.com/googleapis/gax-go/v2 v2.7.1 间接依赖 go
k8s.io/utils v0.0.0-20221107191617-1a15be271d1d 间接依赖 go
github.com/lestrrat-go/option v1.0.0 间接依赖 go
k8s.io/api v0.26.1 直接依赖 go
sphinx-code-include 1.1.1 间接依赖 pip
github.com/google/gofuzz v1.1.0 间接依赖 go
github.com/nakabonne/nestif v0.3.1 间接依赖 go
github.com/spf13/viper v1.11.0 直接依赖 go
github.com/golang/glog v1.1.0 直接依赖 go
github.com/go-sql-driver/mysql v1.7.0 间接依赖 go
github.com/Azure/azure-sdk-for-go v62.3.0+incompatible 间接依赖 go
go.opencensus.io v0.24.0 间接依赖 go
github.com/go-toolsmith/astequal v1.1.0 间接依赖 go
golang.org/x/tools v0.9.3 直接依赖 go
github.com/golang/snappy v0.0.4 间接依赖 go
github.com/golang-jwt/jwt/v5 v5.0.0 间接依赖 go
google.golang.org/genproto v0.0.0-20230530153820-e85fd2cbaebc 间接依赖 go
github.com/aws/aws-sdk-go v1.44.2 直接依赖 go
sigs.k8s.io/controller-runtime v0.0.0-00010101000000-000000000000 直接依赖 go
github.com/golang-jwt/jwt/v4 v4.5.0 直接依赖 go
github.com/mattn/go-isatty v0.0.14 间接依赖 go
golang.org/x/exp v0.0.0-20220722155223-a9213eeb770e 直接依赖 go
github.com/pseudomuto/protokit v0.2.0 间接依赖 go
github.com/hashicorp/golang-lru v0.5.4 直接依赖 go
gopkg.in/square/go-jose.v2 v2.6.0 间接依赖 go
golang.org/x/oauth2 v0.8.0 直接依赖 go
sphinxcontrib-serializinghtml 1.1.5 间接依赖 pip
github.com/timonwong/loggercheck v0.9.4 间接依赖 go
github.com/AzureAD/microsoft-authentication-library-for-go v1.2.0 间接依赖 go
github.com/prometheus/client_model v0.2.0 间接依赖 go
honnef.co/go/tools v0.4.3 间接依赖 go
github.com/yeya24/promlinter v0.2.0 间接依赖 go
github.com/prometheus/common v0.32.1 间接依赖 go
github.com/mbilski/exhaustivestruct v1.2.0 间接依赖 go
github.com/alingse/asasalint v0.0.11 间接依赖 go
mvdan.cc/unparam v0.0.0-20221223090309-7455f1af531d 间接依赖 go
4d63.com/gochecknoglobals v0.2.1 间接依赖 go
github.com/gorilla/handlers v1.5.1 直接依赖 go
github.com/lestrrat-go/jwx v1.1.6 直接依赖 go
github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 间接依赖 go
github.com/kunwardeep/paralleltest v1.0.7 间接依赖 go
sphinx-prompt 1.5.0 间接依赖 pip
k8s.io/klog v1.0.0 直接依赖 go
sigs.k8s.io/kustomize/kyaml v0.13.9 直接依赖 go
sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd 间接依赖 go
github.com/gordonklaus/ineffassign v0.0.0-20230610083614-0e73809eb601 间接依赖 go
cloud.google.com/go/compute v1.19.1 间接依赖 go
github.com/hashicorp/errwrap v1.0.0 间接依赖 go
gorm.io/gorm v1.25.4 直接依赖 go
github.com/sivchari/tenv v1.7.1 间接依赖 go
github.com/fatih/structtag v1.2.0 直接依赖 go
github.com/GaijinEntertainment/go-exhaustruct/v2 v2.3.0 间接依赖 go
google.golang.org/protobuf v1.30.0 直接依赖 go
github.com/pkg/browser v0.0.0-20210911075715-681adbf594b8 直接依赖 go
github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd 间接依赖 go
github.com/ldez/gomoddirectives v0.2.3 间接依赖 go
github.com/jackc/pgpassfile v1.0.0 间接依赖 go
github.com/go-test/deep v1.0.7 直接依赖 go
github.com/decred/dcrd/dcrec/secp256k1/v3 v3.0.0 间接依赖 go
certifi 2021.10.8 间接依赖 pip
packaging 21.3 间接依赖 pip
github.com/lestrrat-go/iter v1.0.1 间接依赖 go
go.uber.org/multierr v1.11.0 间接依赖 go
github.com/monochromegane/go-gitignore v0.0.0-20200626010858-205db1a8cc00 间接依赖 go
github.com/jmespath/go-jmespath v0.4.0 间接依赖 go
github.com/golang/glog v1.1.2 直接依赖 go
google.golang.org/genproto/googleapis/rpc v0.0.0-20230530153820-e85fd2cbaebc 间接依赖 go
github.com/gostaticanalysis/analysisutil v0.7.1 间接依赖 go
github.com/aws/aws-sdk-go-v2/service/sts v1.0.0 间接依赖 go
github.com/grpc-ecosystem/go-grpc-middleware v1.4.0 直接依赖 go
github.com/cloudevents/sdk-go/v2 v2.8.0 直接依赖 go
golang.org/x/text v0.5.0 间接依赖 go
markdown 3.3.6 间接依赖 pip
github.com/ultraware/whitespace v0.0.5 间接依赖 go
github.com/sanposhiho/wastedassign/v2 v2.0.7 间接依赖 go
golang.org/x/net v0.12.0 间接依赖 go
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.35.0 直接依赖 go
github.com/EngHabu/mockery v0.0.0-20220405200825-3f76291311cf 直接依赖 go
sigs.k8s.io/yaml v1.3.0 直接依赖 go
workflow 间接依赖 pip
github.com/stretchr/objx v0.5.0 间接依赖 go
cloud.google.com/go/pubsub v1.33.0 间接依赖 go
go.opentelemetry.io/otel/trace v1.19.0 直接依赖 go
golang.org/x/sync v0.3.0 间接依赖 go
github.com/go-openapi/jsonreference v0.19.5 间接依赖 go
github.com/flyteorg/flyte/flytestdlib v0.0.0-00010101000000-000000000000 直接依赖 go
github.com/golangci/dupl v0.0.0-20180902072040-3e9179ac440a 间接依赖 go
github.com/nbutton23/zxcvbn-go v0.0.0-20210217022336-fa2cb2858354 间接依赖 go
github.com/gofrs/uuid v4.2.0+incompatible 直接依赖 go
golang.org/x/sys v0.10.0 间接依赖 go
github.com/matttproud/golang_protobuf_extensions v1.0.4 间接依赖 go
github.com/golangci/revgrep v0.0.0-20220804021717-745bb2f7c2e6 间接依赖 go
mvdan.cc/gofumpt v0.5.0 间接依赖 go
github.com/evanphx/json-patch v5.6.0+incompatible 直接依赖 go
github.com/nishanths/exhaustive v0.11.0 间接依赖 go
github.com/nishanths/predeclared v0.2.2 间接依赖 go
k8s.io/client-go v0.0.0-20210217172142-7279fc64d847 间接依赖 go
github.com/google/go-cmp v0.6.0 间接依赖 go
golang.org/x/exp v0.0.0-20231005195138-3e424a577f31 直接依赖 go
gopkg.in/ini.v1 v1.66.4 间接依赖 go
github.com/sendgrid/rest v2.6.8+incompatible 间接依赖 go
github.com/polyfloyd/go-errorlint v1.4.2 间接依赖 go
github.com/Selvatico/go-mocket v1.0.7 直接依赖 go
go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.19.0 直接依赖 go
google.golang.org/grpc v1.56.1 直接依赖 go
github.com/jingyugao/rowserrcheck v1.1.1 间接依赖 go
sigs.k8s.io/structured-merge-diff/v4 v4.2.3 间接依赖 go
github.com/spf13/cast v1.5.0 间接依赖 go
github.com/alvaroloes/enumer v1.1.2 直接依赖 go
github.com/mailru/easyjson v0.7.7 间接依赖 go
github.com/ory/viper v1.7.5 间接依赖 go
github.com/sonatard/noctx v0.0.2 间接依赖 go
github.com/kulti/thelper v0.6.3 间接依赖 go
gorm.io/driver/sqlite v1.5.4 直接依赖 go
k8s.io/klog/v2 v2.5.0 间接依赖 go
github.com/stbenjam/no-sprintf-host-port v0.1.1 间接依赖 go
github.com/evanphx/json-patch/v5 v5.6.0 间接依赖 go
github.com/matttproud/golang_protobuf_extensions v1.0.1 间接依赖 go
github.com/jinzhu/now v1.1.5 间接依赖 go
github.com/go-logr/logr v1.2.3 间接依赖 go
gitlab.com/bosi/decorder v0.2.3 间接依赖 go
github.com/lufeee/execinquery v1.2.1 间接依赖 go
github.com/rcrowley/go-metrics v0.0.0-20200313005456-10cdbea86bc0 间接依赖 go
go.tmz.dev/musttag v0.7.0 间接依赖 go
gomodules.xyz/jsonpatch/v2 v2.4.0 间接依赖 go
github.com/sirupsen/logrus v1.7.0 直接依赖 go
github.com/cloudevents/sdk-go/v2 v2.14.0 间接依赖 go
github.com/sivchari/nosnakecase v1.7.0 间接依赖 go
github.com/jackc/chunkreader/v2 v2.0.1 间接依赖 go
charset-normalizer 2.0.10 间接依赖 pip
github.com/daixiang0/gci v0.10.1 间接依赖 go
(0)
上一篇 2024年2月8日
下一篇 2024年2月8日

相关推荐

  • Blosc/bcolz 软件分析报告

    基础信息 项目名称:Blosc/bcolz 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1730104052905103360/1730104053546831872 此报告由Murphysec提供 漏洞列表 漏…

    软件分析 2023年11月30日
    0
  • metabrainz/listenbrainz-server 软件分析报告

    基础信息 项目名称:metabrainz/listenbrainz-server 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1751866085351895040/1751866102024253440 此报告…

    软件分析 2024年1月29日
    0
  • kubernetes-sigs/aws-efs-csi-driver 软件分析报告

    基础信息 项目名称:kubernetes-sigs/aws-efs-csi-driver 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1719583424931037184/1719583430022922240…

    软件分析 2023年11月1日
    0
  • huangz1990/redisbook 软件分析报告

    基础信息 项目名称:huangz1990/redisbook 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1718685014693822464/1718685014735765504 此报告由Murphysec…

    软件分析 2023年10月30日
    0
  • lacerbi/optimviz 软件分析报告

    基础信息 项目名称:lacerbi/optimviz 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1719623195120238592/1719623195367702528 此报告由Murphysec提供 漏…

    软件分析 2023年11月1日
    0