github.com/pingcap/tidb

govv1.0.9

TiDB is built for agentic workloads that grow unpredictably, with ACID guarantees and native support for transactions, analytics, and vector search. No data silos. No noisy neighbors. No infrastructure ceiling.

License Apache-2.0permissive39 versions1062 maintainers0 deps39,985 weekly dl
pingcap/tidb
43
/ 100
Health
do not use

github.com/pingcap/tidb has critical vulnerabilities — do not use

Update to >= 8.2.0 to fix known vulnerabilities

  • 1 high severity vulnerabilities
  • 1 critical vulnerabilities
Health breakdown0 – 100
0/25
maintenance
10/20
popularity
8/25
security
12/15
maturity
13/15
community
Vulnerabilities
4
1 critical1 high1 medium1 low
Advisories (4)
SeverityIDSummaryFixed in
highCVE-2022-31011TiDB authentication bypass vulnerability1.1.0-beta.0.20220221072141-27ffd1126da1
criticalCVE-2022-3023TiDB vulnerable to Use of Externally-Controlled Format String
mediumCVE-2024-37820PingCAP TiDB nil pointer dereference8.2.0
unknownCVE-2024-37820PingCAP TiDB nil pointer dereference in github.com/pingcap/tidb
Maintainer trust
Active maintainers (3m)
29
Contributors (12m)
29
Primary author dominance
16%
GitHub stars
40,030

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/go/github.com/pingcap/tidb

Last updated · 2018-04-20T06:03:18Z

github.com/pingcap/tidb — Health Score 43/100 | DepScope | DepScope