`github.com/anchore/stereoscope`

Ecosystem:
go

Package URL:
pkg:golang/github.com/anchore/stereoscope

Total PRs:
235 Dependabot PRs

Latest PR:
4 days ago

Unique Repositories:
50 repositories

Unique Repos (30 days):
1 repository

Security Advisories

stereoscope vulnerable to tar path traversal when processing OCI tar archives

GHSA-hpxr-w9w7-g4gv CVE-2024-24579 MODERATE published over 2 years ago • updated 4 days ago

### Impact It is possible to craft an OCI tar archive that, when stereoscope attempts to unarchive the contents, will result in writing to paths ou...

Recent PRs

Bump the go-modules group across 1 directory with 28 updates

paketo-buildpacks/vsdbg #749

0.2.0 → 0.2.1 Patch PR

Closed 4 days ago 1 comment

chore(deps): bump the go-minor-patch group across 1 directory with 28 updates

dmgoldstein1/syft #34

0.1.20 → 0.1.23 Patch PR

Open about 1 month ago 1 comment

chore(deps): bump the go-minor-patch group across 1 directory with 27 updates

Hadiiii16/SBOM_EMB #12

0.1.20 → 0.1.23 Patch PR

Open about 1 month ago 1 comment

Bump github.com/anchore/stereoscope from 0.0.0-20230412183729-8602f1afc574 to 0.0.1

neetozone/neeto-deploy-paketo-bundle-install-buildpack #9

0.0.0-20230412183729-8602f1afc574 → 0.0.1 Patch PR

Closed about 2 months ago 2 comments

chore(deps): bump the go-minor-patch group across 1 directory with 26 updates

Hadiiii16/SBOM_EMB #10

0.1.20 → 0.1.22 Patch PR

Closed about 2 months ago 2 comments

chore(deps): bump the go-minor-patch group across 1 directory with 26 updates

dmgoldstein1/syft #26

0.1.20 → 0.1.22 Patch PR

Closed about 2 months ago 3 comments

(AST-87115) Dependabot (Go) (deps): Bump the all-go-modules group with 4 updates

Checkmarx/containers-syft-packages-extractor #32

0.1.0 → 0.1.22 Patch PR

Closed 2 months ago 2 comments

Bump the go-modules group across 1 directory with 66 updates

paketo-buildpacks/miniconda #795

0.1.21 → 0.1.22 Patch PR

Closed 2 months ago 1 comment

chore(deps): bump the go-modules group across 1 directory with 82 updates

paketo-buildpacks/python-package-managers-install #142

0.1.21 → 0.1.22 Patch PR

Closed 2 months ago 1 comment

Bump the go-modules group across 1 directory with 82 updates

paketo-buildpacks/poetry-install #646

0.1.21 → 0.1.22 Patch PR

Closed 2 months ago 1 comment

Bump the go-modules group across 1 directory with 86 updates

paketo-buildpacks/pip-install #678

0.1.21 → 0.1.22 Patch PR

Closed 2 months ago 1 comment

chore(deps): bump the go-modules group across 1 directory with 74 updates

paketo-buildpacks/python-package-managers-run #116

0.1.21 → 0.1.22 Patch PR

Closed 2 months ago 1 comment

chore(deps): bump the go-modules group across 1 directory with 66 updates

paketo-buildpacks/python-package-managers-install #140

0.1.21 → 0.1.22 Patch PR

Closed 2 months ago 1 comment

Bump the go-modules group across 1 directory with 63 updates

paketo-buildpacks/conda-env-update #573

0.1.21 → 0.1.22 Patch PR

Closed 2 months ago 1 comment

chore(deps): bump the go-modules group across 1 directory with 63 updates

paketo-buildpacks/python-package-managers-install #138

0.1.21 → 0.1.22 Patch PR

Closed 2 months ago 1 comment

chore(deps): bump the go-modules group across 1 directory with 60 updates

paketo-buildpacks/python-package-managers-run #113

0.1.21 → 0.1.22 Patch PR

Closed 2 months ago 1 comment

chore(deps): bump the go-modules group across 1 directory with 57 updates

paketo-buildpacks/python-package-managers-install #137

0.1.21 → 0.1.22 Patch PR

Closed 2 months ago 1 comment

Bump the go-modules group across 1 directory with 48 updates

paketo-buildpacks/conda-env-update #569

0.1.21 → 0.1.22 Patch PR

Closed 2 months ago 1 comment

chore(deps): bump the go-modules group across 1 directory with 45 updates

paketo-buildpacks/python-package-managers-install #134

0.1.21 → 0.1.22 Patch PR

Closed 2 months ago 1 comment

Bump the go-modules group across 1 directory with 43 updates

paketo-buildpacks/conda-env-update #567

0.1.21 → 0.1.22 Patch PR

Closed 2 months ago 1 comment

chore(deps): bump the go-modules group across 1 directory with 41 updates

paketo-buildpacks/python-package-managers-run #108

0.1.21 → 0.1.22 Patch PR

Closed 2 months ago 1 comment

Bump the go-modules group across 1 directory with 37 updates

paketo-buildpacks/poetry-install #635

0.1.21 → 0.1.22 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump the go-modules group across 1 directory with 23 updates

paketo-buildpacks/python-package-managers-run #106

0.1.21 → 0.1.22 Patch PR

Closed 3 months ago 1 comment

Bump the go-modules group across 1 directory with 14 updates

paketo-buildpacks/poetry-install #632

0.1.21 → 0.1.22 Patch PR

Closed 3 months ago 1 comment

Bump the go-modules group across 1 directory with 9 updates

paketo-buildpacks/npm-install #1194

0.1.21 → 0.1.22 Patch PR

Closed 3 months ago 1 comment

Bump the go-modules group across 1 directory with 13 updates

paketo-buildpacks/pip #934

0.1.21 → 0.1.22 Patch PR

Closed 3 months ago 1 comment

Bump the go-modules group with 51 updates

paketo-buildpacks/go-dist #1267

0.1.21 → 0.1.22 Patch PR

Closed 3 months ago 1 comment

Bump the go-modules group across 1 directory with 44 updates

paketo-buildpacks/vsdbg #684

0.1.20 → 0.1.21 Patch PR

Closed 3 months ago 1 comment

Bump the go-modules group across 1 directory with 40 updates

paketo-buildpacks/icu #858

0.1.20 → 0.1.21 Patch PR

Closed 3 months ago 1 comment

Bump the go-modules group across 1 directory with 28 updates

paketo-buildpacks/dotnet-publish #943

0.1.20 → 0.1.21 Patch PR

Closed 3 months ago 1 comment

Bump the go-modules group with 11 updates

paketo-buildpacks/dotnet-publish #940

0.1.20 → 0.1.21 Patch PR

Closed 3 months ago 1 comment

Bump the go-modules group across 1 directory with 20 updates

paketo-buildpacks/yarn-install #1185

0.1.19 → 0.1.20 Patch PR

Closed 4 months ago 1 comment

Bump the go-modules group across 1 directory with 16 updates

paketo-buildpacks/yarn-install #1184

0.1.19 → 0.1.20 Patch PR

Closed 4 months ago 1 comment

Bump the go-modules group with 41 updates

paketo-buildpacks/dotnet-core-aspnet-runtime #645

0.1.17 → 0.1.18 Patch PR

Closed 5 months ago 1 comment

chore(deps): bump github.com/anchore/stereoscope from 0.1.13 to 0.1.18

zarf-dev/zarf #4535

0.1.13 → 0.1.18 Patch PR

Open 5 months ago 1 comment

Bump the go-modules group across 1 directory with 69 updates

paketo-buildpacks/yarn-install #1162

0.1.16 → 0.1.17 Patch PR

Closed 5 months ago 1 comment

Bump the go-modules group across 1 directory with 66 updates

paketo-buildpacks/yarn #1001

0.1.16 → 0.1.17 Patch PR

Closed 5 months ago 1 comment

chore(deps): bump github.com/anchore/stereoscope from 0.1.13 to 0.1.17

zarf-dev/zarf #4507

0.1.13 → 0.1.17 Patch PR

Open 5 months ago 2 comments

Bump the go-modules group across 1 directory with 107 updates

paketo-buildpacks/miniconda #696

0.1.12 → 0.1.16 Patch PR

Closed 6 months ago 1 comment

Bump the go-modules group across 1 directory with 106 updates

paketo-buildpacks/miniconda #695

0.1.12 → 0.1.16 Patch PR

Closed 6 months ago 1 comment

Bump the go-modules group across 1 directory with 105 updates

paketo-buildpacks/miniconda #692

0.1.12 → 0.1.16 Patch PR

Closed 6 months ago 1 comment

Bump the go-modules group across 1 directory with 102 updates

paketo-buildpacks/miniconda #690

0.1.12 → 0.1.16 Patch PR

Closed 6 months ago 1 comment

Bump github.com/anchore/stereoscope from 0.1.12 to 0.1.16

paketo-buildpacks/poetry #568

0.1.12 → 0.1.16 Patch PR

Closed 6 months ago 1 comment

chore(deps): bump github.com/anchore/stereoscope from 0.1.13 to 0.1.16

zarf-dev/zarf #4471

0.1.13 → 0.1.16 Patch PR

Open 6 months ago 2 comments

Bump github.com/anchore/stereoscope from 0.1.14 to 0.1.16

paketo-buildpacks/dotnet-publish #868

0.1.14 → 0.1.16 Patch PR

Closed 6 months ago 1 comment

chore(deps): bump github.com/anchore/stereoscope from 0.1.13 to 0.1.14

zarf-dev/zarf #4460

0.1.13 → 0.1.14 Patch PR

Open 6 months ago 2 comments

Bump github.com/anchore/stereoscope from 0.1.12 to 0.1.13

paketo-buildpacks/pip-install #556

0.1.12 → 0.1.13 Patch PR

Closed 7 months ago 1 comment

Bump github.com/anchore/stereoscope from 0.1.11 to 0.1.12

paketo-buildpacks/dotnet-execute #798

0.1.11 → 0.1.12 Patch PR

Closed 7 months ago 1 comment

Bump github.com/anchore/stereoscope from 0.1.11 to 0.1.12

paketo-buildpacks/pipenv #746

0.1.11 → 0.1.12 Patch PR

Closed 7 months ago 1 comment

Bump github.com/anchore/stereoscope from 0.1.11 to 0.1.12

paketo-buildpacks/dotnet-core-sdk #941

0.1.11 → 0.1.12 Patch PR

Closed 7 months ago 1 comment

Package Details

Name:	`github.com/anchore/stereoscope`
Ecosystem:	go
PURL Type:	golang
Package URL:	`pkg:golang/github.com/anchore/stereoscope`
JSON API:	View JSON

Security Advisories

1

Active advisories

MODERATE 1

View All golang Advisories

Package Information

Description:

Repository:	https://github.com/anchore/stereoscope
Homepage:	https://github.com/anchore/stereoscope
Latest Release:	`v0.1.4` about 1 year ago
Dependent Repos:	199
Dependent Packages:	260
Ranking:	Top 0.449% by dependent repos Top 0.2965% by dependent pkgs

PR Status

Open 76 (32.3%)

Merged 27 (11.5%)

Closed 121 (51.5%)

PR Types

Minor 53 (22.6%)

Patch 153 (65.1%)