Is github.com/disintegration/imaging safe to use?

github.com/disintegration/imaging has 1 known vulnerabilities on the latest version (v1.6.2). DepScope rates its health at 45/100 (high risk).

What is the latest version of github.com/disintegration/imaging?

The latest version of github.com/disintegration/imaging is v1.6.2, released 2019-11-16.

Does github.com/disintegration/imaging have known vulnerabilities?

Yes. github.com/disintegration/imaging has 1 known vulnerabilities. See depscope.dev/pkg/go/github.com/disintegration/imaging for details.

Is github.com/disintegration/imaging deprecated?

No, github.com/disintegration/imaging is actively maintained. Latest release: v1.6.2 (2019-11-16).

What are alternatives to github.com/disintegration/imaging?

DepScope has no curated alternatives for github.com/disintegration/imaging at this time.

What license does github.com/disintegration/imaging use?

github.com/disintegration/imaging is licensed under MIT.

github.com/disintegration/imaging

govv1.6.2

Imaging is a simple image processing package for Go

License MITpermissive15 versions20 maintainers0 deps5,715 weekly dl

disintegration/imaging

/ 100

Health

use with caution

github.com/disintegration/[email protected] low health (45/100) — consider alternatives

Moderate health score (45/100) — verify manually

Health breakdown0 – 100

0/25

maintenance

6/20

popularity

25/25

security

9/15

maturity

5/15

community

Vulnerabilities

1 low

Advisories (1)

Severity	ID	Summary	Fixed in
low	CVE-2023-36308	Crash when processing crafted TIFF files	—

OSS Scorecard

OpenSSF security posture score

2.8/10

poor

Maintainer trust

Active maintainers (3m)

1

Contributors (12m)

0

Primary author dominance

0%

GitHub stars

5,711

single active maintainer 3m

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/go/github.com/disintegration/imaging

Last updated · 2019-11-16T20:43:25Z