Is oras.land/oras-go/v2 safe to use?

oras.land/oras-go/v2 has no known vulnerabilities on the latest version (v2.6.0). DepScope rates its health at 44/100 (high risk).

What is the latest version of oras.land/oras-go/v2?

The latest version of oras.land/oras-go/v2 is v2.6.0, released 2025-05-07.

No known vulnerabilities on the latest version of oras.land/oras-go/v2.

No, oras.land/oras-go/v2 is actively maintained. Latest release: v2.6.0 (2025-05-07).

DepScope has no curated alternatives for oras.land/oras-go/v2 at this time.

oras.land/oras-go/v2 is licensed under Apache-2.0.

govv2.6.0

License Apache-2.0permissive18 versions0 deps

/ 100

Health

use with caution

oras.land/oras-go/[email protected] low health (44/100) — consider alternatives

Health breakdown0 – 100

10/25

maintenance

0/20

popularity

25/25

security

9/15

maturity

0/15

community

Vulnerabilities

none known

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/go/oras.land/oras-go/v2

Last updated · 2025-05-07T09:04:41Z