Is github.com/google/osv-scalibr safe to use?

github.com/google/osv-scalibr has no known vulnerabilities on the latest version (v0.4.5). DepScope rates its health at 65/100 (moderate risk).

What is the latest version of github.com/google/osv-scalibr?

The latest version of github.com/google/osv-scalibr is v0.4.5, released 2026-03-10.

No known vulnerabilities on the latest version of github.com/google/osv-scalibr.

No, github.com/google/osv-scalibr is actively maintained. Latest release: v0.4.5 (2026-03-10).

DepScope has no curated alternatives for github.com/google/osv-scalibr at this time.

github.com/google/osv-scalibr is licensed under Apache-2.0.

govv0.4.5

OSV-SCALIBR: A library for Software Composition Analysis

License Apache-2.0permissive24 versions86 maintainers0 deps591 weekly dl

/ 100

Health

safe to use

github.com/google/[email protected] is safe to use (health: 65/100)

Health breakdown0 – 100

20/25

maintenance

3/20

popularity

25/25

security

12/15

maturity

5/15

community

Vulnerabilities

none known

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/go/github.com/google/osv-scalibr

Last updated · 2026-03-10T09:22:23Z