Is github.com/mholt/archiver/v3 safe to use?

github.com/mholt/archiver/v3 has 4 known vulnerabilities on the latest version (v3.5.1). DepScope rates its health at 38/100 (critical risk).

What is the latest version of github.com/mholt/archiver/v3?

The latest version of github.com/mholt/archiver/v3 is v3.5.1, released 2021-10-30.

Does github.com/mholt/archiver/v3 have known vulnerabilities?

Yes. github.com/mholt/archiver/v3 has 4 known vulnerabilities. See depscope.dev/pkg/go/github.com/mholt/archiver/v3 for details.

Is github.com/mholt/archiver/v3 deprecated?

No, github.com/mholt/archiver/v3 is actively maintained. Latest release: v3.5.1 (2021-10-30).

What are alternatives to github.com/mholt/archiver/v3?

DepScope has no curated alternatives for github.com/mholt/archiver/v3 at this time.

What license does github.com/mholt/archiver/v3 use?

github.com/mholt/archiver/v3 is licensed under MIT.

github.com/mholt/archiver/v3

govv3.5.1

DEPRECATED. Please use mholt/archives instead.

License MITpermissive11 versions73 maintainers0 deps4,414 weekly dl

mholt/archiver/v3

/ 100

Health

update required

github.com/mholt/archiver/[email protected] has vulnerabilities — update to latest

Low health score (38/100)
1 high severity vulnerabilities

Health breakdown0 – 100

0/25

maintenance

6/20

popularity

18/25

security

9/15

maturity

5/15

community

Vulnerabilities

1 high1 medium2 low

Advisories (4)

Severity	ID	Summary	Fixed in
high	CVE-2025-3445	mholt/archiver Vulnerable to Path Traversal via Crafted ZIP File	—
medium	CVE-2024-0406	Archiver Path Traversal vulnerability	—
unknown	CVE-2024-0406	Archiver Path Traversal vulnerability in github.com/mholt/archiver	—
unknown	CVE-2025-3445	Vulnerable to Path Traversal via Crafted ZIP File in github.com/mholt/archiver	—

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/go/github.com/mholt/archiver/v3

Last updated · 2021-10-30T17:12:43Z