Go Vulnerability Management

This repository contains the following:

• Package client: a client for interacting with the Go vulnerability database
• Package vulncheck: an API for detecting vulnerabilities in Go packages
• Command govulncheck: a CLI for detecting vulnerabilities in Go packages

The code in this repository is under active development and not to be considered stable.

License

Unless otherwise noted, the Go source files are distributed under the BSD-style license found in the LICENSE file.

Database entries available at https://vuln.go.dev are distributed under the terms of the CC-BY 4.0 license.