Is github.com/mholt/archiver safe to use?

github.com/mholt/archiver has 3 known vulnerabilities on the latest version (v2.1.0+incompatible). DepScope rates its health at 37/100 (critical risk).

What is the latest version of github.com/mholt/archiver?

The latest version of github.com/mholt/archiver is v2.1.0+incompatible, released 2018-09-10.

Does github.com/mholt/archiver have known vulnerabilities?

Yes. github.com/mholt/archiver has 3 known vulnerabilities. See depscope.dev/pkg/go/github.com/mholt/archiver for details.

Is github.com/mholt/archiver deprecated?

No, github.com/mholt/archiver is actively maintained. Latest release: v2.1.0+incompatible (2018-09-10).

What are alternatives to github.com/mholt/archiver?

DepScope has no curated alternatives for github.com/mholt/archiver at this time.

What license does github.com/mholt/archiver use?

github.com/mholt/archiver is licensed under MIT.

github.com/mholt/archiver

govv2.1.0+incompatible

DEPRECATED. Please use mholt/archives instead.

License MITpermissive8 versions73 maintainers0 deps4,414 weekly dl

mholt/archiver

/ 100

Health

update required

github.com/mholt/[email protected]+incompatible has vulnerabilities — update to latest

Low health score (37/100)
1 high severity vulnerabilities

Health breakdown0 – 100

0/25

maintenance

6/20

popularity

20/25

security

6/15

maturity

5/15

community

Vulnerabilities

1 high2 low

Advisories (3)

Severity	ID	Summary	Fixed in
high	CVE-2025-3445	mholt/archiver Vulnerable to Path Traversal via Crafted ZIP File	—
unknown	CVE-2024-0406	Archiver Path Traversal vulnerability in github.com/mholt/archiver	—
unknown	CVE-2025-3445	Vulnerable to Path Traversal via Crafted ZIP File in github.com/mholt/archiver	—

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/go/github.com/mholt/archiver

Last updated · 2018-09-10T00:04:18Z