{"package":"github.com/hashicorp/terraform","ecosystem":"go","latest_version":"v1.14.9","description":"Terraform enables you to safely and predictably create, change, and improve infrastructure. It is a source-available tool that codifies APIs into declarative configuration files that can be shared amongst team members, treated as code, edited, reviewed, and versioned.","license":"MPL-2.0","license_risk":"weak_copyleft","commercial_use_notes":"MPL-2.0: only modified MPL files must be released; commercial closed-source around it is fine.","homepage":"https://pkg.go.dev/github.com/hashicorp/terraform","repository":"https://github.com/hashicorp/terraform","downloads_weekly":48262,"health":{"score":88,"risk":"low","breakdown":{"maintenance":25,"popularity":10,"security":25,"maturity":15,"community":13},"deprecated":false,"max_score":100},"vulnerabilities":{"count":0,"critical":0,"high":0,"medium":0,"low":0,"details":[]},"versions":{"latest":"v1.14.9","total_count":441,"recent":["v1.1.0-alpha20210922","v0.4.2","v0.12.17","v1.15.0-alpha20260218","v0.7.10","v0.6.11","v1.3.0-alpha20220803","v0.12.1","v0.12.9","v0.9.4","v1.14.0-rc1","v1.10.0-alpha20241009","v0.7.0-rc3","v1.1.0-alpha20210630","v0.9.11","v1.3.0-dev","v1.8.0-alpha20240216","v0.14.0-alpha20201007","v0.11.7","v1.4.7"]},"metadata":{"deprecated":false,"deprecated_message":null,"maintainers_count":2325,"first_published":null,"last_published":"2026-04-20T17:54:01Z","dependencies_count":0,"dependencies":[]},"github_stats":{"stars":48282,"forks":10326,"open_issues":1893,"is_archived":false,"pushed_at":"2026-04-29T13:54:48Z","subscribers_count":1127},"bundle":null,"typescript":null,"known_issues":{"bugs_count":2,"bugs_severity":{"high":1,"medium":1},"status_breakdown":{"fixed":2},"link":"/api/bugs/go/github.com/hashicorp/terraform?version=v1.14.9","scope":"version","details":[{"title":"Use of a Broken or Risky Cryptographic Algorithm in Terraform","severity":"high","status":"fixed","affected_version":null,"fixed_version":"0.12.17","url":"https://github.com/hashicorp/terraform/security/advisories/GHSA-4rvg-555h-r626"},{"title":"Use of a Broken or Risky Cryptographic Algorithm in Terraform in github.com/hashicorp/terraform","severity":"medium","status":"fixed","affected_version":null,"fixed_version":"0.12.17","url":"https://github.com/advisories/GHSA-h3p9-wrgx-82cm"}]},"historical_compromise":null,"recommendation":{"action":"safe_to_use","issues":[],"use_version":"v1.14.9","version_hint":null,"summary":"github.com/hashicorp/terraform@v1.14.9 is safe to use (health: 88/100)"},"version_scoped":null,"requested_version":null,"_cache":"hit","_response_ms":0,"_powered_by":"depscope.dev — free package intelligence for AI agents","typosquat":{"is_suspected":false},"maintainer_trust":{"available":true,"bus_factor_3m":14,"active_contributors_12m":14,"primary_author_ratio":0.39,"owner_account_age_days":5473,"is_archived":false,"stars":48254,"alerts":[]},"malicious":{"is_malicious":false},"scorecard":{"available":true,"score":6.6,"tier":"moderate"},"quality":{"available":false},"co_used_with":[{"package":"smooth_page_indicator","occurrences":3}],"version_history_summary":{"total_versions":20,"first_release_age_days":null,"last_release_days_ago":8,"avg_days_between_releases":null,"release_velocity":"active"}}