Is github.com/openshift/source-to-image safe to use?

github.com/openshift/source-to-image has 2 known vulnerabilities on the latest version (v1.6.1). DepScope rates its health at 66/100 (moderate risk).

What is the latest version of github.com/openshift/source-to-image?

The latest version of github.com/openshift/source-to-image is v1.6.1, released 2026-03-11.

Does github.com/openshift/source-to-image have known vulnerabilities?

Yes. github.com/openshift/source-to-image has 2 known vulnerabilities. See depscope.dev/pkg/go/github.com/openshift/source-to-image for details.

Is github.com/openshift/source-to-image deprecated?

No, github.com/openshift/source-to-image is actively maintained. Latest release: v1.6.1 (2026-03-11).

What are alternatives to github.com/openshift/source-to-image?

DepScope has no curated alternatives for github.com/openshift/source-to-image at this time.

What license does github.com/openshift/source-to-image use?

github.com/openshift/source-to-image is licensed under Apache-2.0.

github.com/openshift/source-to-image

govv1.6.1

A tool for building artifacts from source and injecting into container images

License Apache-2.0permissive41 versions113 maintainers0 deps2,537 weekly dl

openshift/source-to-image

/ 100

Health

safe to use

github.com/openshift/[email protected] is safe to use (health: 66/100)

Update to >= 1.1.10-0.20180427153919-f5cbcbc5cc6f to fix known vulnerabilities

Health breakdown0 – 100

20/25

maintenance

6/20

popularity

23/25

security

12/15

maturity

5/15

community

Vulnerabilities

1 medium1 low

Advisories (2)

Severity	ID	Summary	Fixed in
medium	CVE-2018-1103	Openshift Enterprise source-to-image vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip)	1.1.10-0.20180427153919-f5cbcbc5cc6f
unknown	CVE-2018-1103	Arbitrary file write via archive extraction in github.com/openshift/source-to-image	1.1.10-0.20180427153919-f5cbcbc5cc6f

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/go/github.com/openshift/source-to-image

Last updated · 2026-03-11T07:35:53Z