{"id":3494247,"name":"github.com/hashicorp/go-slug","ecosystem":"go","description":"","homepage":"https://github.com/hashicorp/go-slug","licenses":"MPL-2.0","normalized_licenses":["MPL-2.0"],"repository_url":"https://github.com/hashicorp/go-slug","keywords_array":[],"namespace":"github.com/hashicorp","versions_count":48,"first_release_published_at":"2018-07-12T07:59:31.000Z","latest_release_published_at":"2026-01-14T05:52:23.000Z","latest_release_number":"v1.0.0","latest_published_release_number":"v1.0.0","last_synced_at":"2026-10-30T09:11:14.675Z","created_at":"2022-04-10T19:23:22.101Z","updated_at":"2026-10-31T03:18:41.959Z","registry_url":"https://pkg.go.dev/github.com/hashicorp/go-slug","install_command":"go get github.com/hashicorp/go-slug","documentation_url":"https://pkg.go.dev/github.com/hashicorp/go-slug#section-documentation","metadata":null,"repo_metadata":{"id":37550213,"uuid":"140256304","full_name":"hashicorp/go-slug","owner":"hashicorp","description":"The slug package provides functions to create slug archives","archived":false,"fork":false,"pushed_at":"2026-10-21T14:07:01.000Z","size":355,"stargazers_count":27,"open_issues_count":11,"forks_count":21,"subscribers_count":257,"default_branch":"main","last_synced_at":"2026-10-23T14:10:35.108Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mpl-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hashicorp.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2018-07-09T08:39:02.000Z","updated_at":"2026-08-25T13:52:47.000Z","dependencies_parsed_at":"2026-01-01T16:08:06.041Z","dependency_job_id":null,"html_url":"https://github.com/hashicorp/go-slug","commit_stats":{"total_commits":103,"total_committers":27,"mean_commits":3.814814814814815,"dds":0.8640776699029127,"last_synced_commit":"18b3ddeef74292c53b2cc237a16a243ca2fc544d"},"previous_names":["hashicorp/slug"],"tags_count":46,"template":false,"template_full_name":null,"purl":"pkg:github/hashicorp/go-slug","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hashicorp","download_url":"https://codeload.github.com/hashicorp/go-slug/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/sbom","scorecard":{"id":457043,"data":{"date":"2025-08-11","repo":{"name":"github.com/hashicorp/go-slug","commit":"c81559ebb05e0a20af4da118eac4ee20b3de9f25"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.7,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/codeql-analysis.yml:1","Warn: no topLevel permission defined: .github/workflows/test.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":10,"reason":"17 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":10,"reason":"all dependencies are pinned","details":["Info:   8 out of   8 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Mozilla Public License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hashicorp/.github/SECURITY.md:1","Info: Found linked content: github.com/hashicorp/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hashicorp/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hashicorp/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":8,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'main'","Info: 'stale review dismissal' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Info: codeowner review is required on branch 'main'","Info: 'last push approval' is required to merge on branch 'main'","Info: status check found to merge onto on branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":9,"reason":"1 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2025-3595 / GHSA-vvgc-356p-c3xw"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T09:59:17.898Z","repository_id":37550213,"created_at":"2025-08-19T09:59:17.898Z","updated_at":"2025-08-19T09:59:17.898Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":345082042,"owners_count":38478374,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-23T02:00:05.958Z","response_time":105,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hashicorp","name":"HashiCorp","uuid":"761456","kind":"organization","description":"Consistent workflows to provision, secure, connect, and run any infrastructure for any application.","email":"hello@hashicorp.com","website":"https://hashicorp.com","location":"San Francisco, CA","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/761456?v=4","repositories_count":946,"last_synced_at":"2026-10-19T20:06:35.633Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/hashicorp","funding_links":[],"total_stars":338727,"followers":10998,"following":0,"created_at":"2022-11-02T16:21:47.799Z","updated_at":"2026-10-19T20:06:35.647Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hashicorp","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hashicorp/repositories"},"tags":[{"name":"v1.0.0","sha":"fb3aa920a9f3a37970cc1c2a755505cd852f395e","kind":"commit","published_at":"2026-01-14T05:52:23.000Z","download_url":"https://codeload.github.com/hashicorp/go-slug/tar.gz/v1.0.0","html_url":"https://github.com/hashicorp/go-slug/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hashicorp/go-slug@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v1.0.0/manifests","release_url":null},{"name":"v0.18.2","sha":"bed07abb7477e66226d6e4895bbec1ab8ced175b","kind":"commit","published_at":"2026-01-06T03:54:41.000Z","download_url":"https://codeload.github.com/hashicorp/go-slug/tar.gz/v0.18.2","html_url":"https://github.com/hashicorp/go-slug/releases/tag/v0.18.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hashicorp/go-slug@v0.18.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.18.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.18.2/manifests","release_url":null},{"name":"v0.18.1","sha":"a4d9ee0acc34b46b7d756f285643204d5134e56a","kind":"commit","published_at":"2025-12-02T15:13:06.000Z","download_url":"https://codeload.github.com/hashicorp/go-slug/tar.gz/v0.18.1","html_url":"https://github.com/hashicorp/go-slug/releases/tag/v0.18.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hashicorp/go-slug@v0.18.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.18.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.18.1/manifests","release_url":null},{"name":"v0.18.0","sha":"b6d3e8f0f792e4d39a6753bd51255be62822f0ef","kind":"commit","published_at":"2025-11-17T14:29:51.000Z","download_url":"https://codeload.github.com/hashicorp/go-slug/tar.gz/v0.18.0","html_url":"https://github.com/hashicorp/go-slug/releases/tag/v0.18.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hashicorp/go-slug@v0.18.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.18.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.18.0/manifests","release_url":null},{"name":"v0.17.1","sha":"cacfd9d05e989a2a880b30616c5478766c363698","kind":"commit","published_at":"2025-11-03T23:02:13.000Z","download_url":"https://codeload.github.com/hashicorp/go-slug/tar.gz/v0.17.1","html_url":"https://github.com/hashicorp/go-slug/releases/tag/v0.17.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hashicorp/go-slug@v0.17.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.17.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.17.1/manifests","release_url":null},{"name":"v0.17.0","sha":"0fe89e297226a4f2356a6ab617e51a650b86419f","kind":"commit","published_at":"2025-10-24T06:32:39.000Z","download_url":"https://codeload.github.com/hashicorp/go-slug/tar.gz/v0.17.0","html_url":"https://github.com/hashicorp/go-slug/releases/tag/v0.17.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hashicorp/go-slug@v0.17.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.17.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.17.0/manifests","release_url":null},{"name":"v0.16.8","sha":"c20bec394ee4758d7b504e3c32df071a91812836","kind":"commit","published_at":"2025-09-29T16:03:55.000Z","download_url":"https://codeload.github.com/hashicorp/go-slug/tar.gz/v0.16.8","html_url":"https://github.com/hashicorp/go-slug/releases/tag/v0.16.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hashicorp/go-slug@v0.16.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.16.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.16.8/manifests","release_url":null},{"name":"v0.16.7","sha":"cbe304aeed684b5d96473ae2c480cef8ea728536","kind":"commit","published_at":"2025-06-11T06:52:27.000Z","download_url":"https://codeload.github.com/hashicorp/go-slug/tar.gz/v0.16.7","html_url":"https://github.com/hashicorp/go-slug/releases/tag/v0.16.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hashicorp/go-slug@v0.16.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.16.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.16.7/manifests","release_url":null},{"name":"v0.16.6","sha":"4aacce786b36d389c77cb94b3c5c0c084d7cce47","kind":"commit","published_at":"2025-06-03T06:36:18.000Z","download_url":"https://codeload.github.com/hashicorp/go-slug/tar.gz/v0.16.6","html_url":"https://github.com/hashicorp/go-slug/releases/tag/v0.16.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hashicorp/go-slug@v0.16.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.16.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.16.6/manifests","release_url":null},{"name":"v0.16.5","sha":"0b4f9bed752839826976c38f1d79b56587b3f738","kind":"commit","published_at":"2025-03-14T12:16:33.000Z","download_url":"https://codeload.github.com/hashicorp/go-slug/tar.gz/v0.16.5","html_url":"https://github.com/hashicorp/go-slug/releases/tag/v0.16.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hashicorp/go-slug@v0.16.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.16.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.16.5/manifests","release_url":null},{"name":"v0.16.4","sha":"d8b1ee7171000f15726d9e0583d88132232b9229","kind":"commit","published_at":"2025-01-27T22:44:57.000Z","download_url":"https://codeload.github.com/hashicorp/go-slug/tar.gz/v0.16.4","html_url":"https://github.com/hashicorp/go-slug/releases/tag/v0.16.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hashicorp/go-slug@v0.16.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.16.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.16.4/manifests","release_url":null},{"name":"v0.16.3","sha":"9a9315589124e21b01ffe8a7816f4f2bea7da8b4","kind":"commit","published_at":"2025-01-06T15:27:24.000Z","download_url":"https://codeload.github.com/hashicorp/go-slug/tar.gz/v0.16.3","html_url":"https://github.com/hashicorp/go-slug/releases/tag/v0.16.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hashicorp/go-slug@v0.16.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.16.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.16.3/manifests","release_url":null},{"name":"v0.16.2","sha":"53c172a3e00fc1ac280365255b56af57846abdb4","kind":"commit","published_at":"2024-12-04T10:21:56.000Z","download_url":"https://codeload.github.com/hashicorp/go-slug/tar.gz/v0.16.2","html_url":"https://github.com/hashicorp/go-slug/releases/tag/v0.16.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hashicorp/go-slug@v0.16.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.16.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.16.2/manifests","release_url":null},{"name":"v0.16.1","sha":"6004eb1bc5144a120f3e780aeb63e1582b9b72d7","kind":"commit","published_at":"2024-11-04T07:50:36.000Z","download_url":"https://codeload.github.com/hashicorp/go-slug/tar.gz/v0.16.1","html_url":"https://github.com/hashicorp/go-slug/releases/tag/v0.16.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hashicorp/go-slug@v0.16.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.16.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.16.1/manifests","release_url":null},{"name":"v0.16.0","sha":"18b3ddeef74292c53b2cc237a16a243ca2fc544d","kind":"commit","published_at":"2024-08-21T08:16:29.000Z","download_url":"https://codeload.github.com/hashicorp/go-slug/tar.gz/v0.16.0","html_url":"https://github.com/hashicorp/go-slug/releases/tag/v0.16.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hashicorp/go-slug@v0.16.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.16.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.16.0/manifests","release_url":null},{"name":"v0.15.2","sha":"9b7ef214fd15260fbb4852b29d4fa83d5e9ce554","kind":"commit","published_at":"2024-06-11T14:25:44.000Z","download_url":"https://codeload.github.com/hashicorp/go-slug/tar.gz/v0.15.2","html_url":"https://github.com/hashicorp/go-slug/releases/tag/v0.15.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hashicorp/go-slug@v0.15.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.15.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.15.2/manifests","release_url":null},{"name":"v0.15.1","sha":"d050c345a6e24f7d114e1f5ed929e814e7888e16","kind":"commit","published_at":"2024-06-10T19:15:07.000Z","download_url":"https://codeload.github.com/hashicorp/go-slug/tar.gz/v0.15.1","html_url":"https://github.com/hashicorp/go-slug/releases/tag/v0.15.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hashicorp/go-slug@v0.15.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.15.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.15.1/manifests","release_url":null},{"name":"v0.15.0","sha":"b314f2137164c73de1ea8d6fbcd724f428879dd1","kind":"commit","published_at":"2024-04-16T07:13:30.000Z","download_url":"https://codeload.github.com/hashicorp/go-slug/tar.gz/v0.15.0","html_url":"https://github.com/hashicorp/go-slug/releases/tag/v0.15.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hashicorp/go-slug@v0.15.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.15.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.15.0/manifests","release_url":null},{"name":"v0.14.0","sha":"0ba92f738b5c43eda173555c62f259257599fee2","kind":"commit","published_at":"2024-02-02T16:33:47.000Z","download_url":"https://codeload.github.com/hashicorp/go-slug/tar.gz/v0.14.0","html_url":"https://github.com/hashicorp/go-slug/releases/tag/v0.14.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hashicorp/go-slug@v0.14.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.14.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.14.0/manifests","release_url":null},{"name":"v0.13.4","sha":"0480d9e1fee00c8c87c4c03e905d76aca40e3dcd","kind":"commit","published_at":"2024-01-30T14:42:10.000Z","download_url":"https://codeload.github.com/hashicorp/go-slug/tar.gz/v0.13.4","html_url":"https://github.com/hashicorp/go-slug/releases/tag/v0.13.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hashicorp/go-slug@v0.13.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.13.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.13.4/manifests","release_url":null},{"name":"v0.13.3","sha":"4f0952778ca2b62dc739b6b2953d8f7e53db684c","kind":"commit","published_at":"2023-12-04T21:26:17.000Z","download_url":"https://codeload.github.com/hashicorp/go-slug/tar.gz/v0.13.3","html_url":"https://github.com/hashicorp/go-slug/releases/tag/v0.13.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hashicorp/go-slug@v0.13.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.13.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.13.3/manifests","release_url":null},{"name":"v0.13.2","sha":"ffdd023a246723fb9bdfa0a0efeca00b6a697caf","kind":"commit","published_at":"2023-11-10T17:11:35.000Z","download_url":"https://codeload.github.com/hashicorp/go-slug/tar.gz/v0.13.2","html_url":"https://github.com/hashicorp/go-slug/releases/tag/v0.13.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hashicorp/go-slug@v0.13.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.13.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.13.2/manifests","release_url":null},{"name":"v0.13.1","sha":"eb823de8b87ba1ec9f03c35d674a33101e8ae4dd","kind":"commit","published_at":"2023-11-01T20:25:19.000Z","download_url":"https://codeload.github.com/hashicorp/go-slug/tar.gz/v0.13.1","html_url":"https://github.com/hashicorp/go-slug/releases/tag/v0.13.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hashicorp/go-slug@v0.13.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.13.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.13.1/manifests","release_url":null},{"name":"v0.13.0","sha":"fffa1ad60c312f05e518bf6e197d694966551e53","kind":"commit","published_at":"2023-10-30T19:11:59.000Z","download_url":"https://codeload.github.com/hashicorp/go-slug/tar.gz/v0.13.0","html_url":"https://github.com/hashicorp/go-slug/releases/tag/v0.13.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hashicorp/go-slug@v0.13.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.13.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.13.0/manifests","release_url":null},{"name":"v0.12.2","sha":"b8b2299b0795eb792a8ed41f2d7c32df35318485","kind":"tag","published_at":"2023-09-08T22:52:52.000Z","download_url":"https://codeload.github.com/hashicorp/go-slug/tar.gz/v0.12.2","html_url":"https://github.com/hashicorp/go-slug/releases/tag/v0.12.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hashicorp/go-slug@v0.12.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.12.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.12.2/manifests","release_url":null},{"name":"v0.12.1","sha":"7f973de24b87701dd63a6cf2d12c4afdf8565302","kind":"commit","published_at":"2023-08-18T15:39:40.000Z","download_url":"https://codeload.github.com/hashicorp/go-slug/tar.gz/v0.12.1","html_url":"https://github.com/hashicorp/go-slug/releases/tag/v0.12.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hashicorp/go-slug@v0.12.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.12.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.12.1/manifests","release_url":null},{"name":"v0.12.0","sha":"6a7ca7ac026f4d9fd54540d46c61e35caf4e33e5","kind":"tag","published_at":"2023-07-13T20:17:40.000Z","download_url":"https://codeload.github.com/hashicorp/go-slug/tar.gz/v0.12.0","html_url":"https://github.com/hashicorp/go-slug/releases/tag/v0.12.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hashicorp/go-slug@v0.12.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.12.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.12.0/manifests","release_url":null},{"name":"v0.11.1","sha":"66525e4a52a0587db9de8662346a2f2f0ea052c9","kind":"commit","published_at":"2023-04-17T20:24:59.000Z","download_url":"https://codeload.github.com/hashicorp/go-slug/tar.gz/v0.11.1","html_url":"https://github.com/hashicorp/go-slug/releases/tag/v0.11.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hashicorp/go-slug@v0.11.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.11.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.11.1/manifests","release_url":null},{"name":"v0.11.0","sha":"9277946ab97b3b8fdfcd17d9c73e7da4199297e5","kind":"commit","published_at":"2023-04-07T17:58:10.000Z","download_url":"https://codeload.github.com/hashicorp/go-slug/tar.gz/v0.11.0","html_url":"https://github.com/hashicorp/go-slug/releases/tag/v0.11.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hashicorp/go-slug@v0.11.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.11.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.11.0/manifests","release_url":null},{"name":"v0.10.1","sha":"2777fe23a2a40325aca4743f6572035ca5394ac0","kind":"commit","published_at":"2022-11-23T16:23:28.000Z","download_url":"https://codeload.github.com/hashicorp/go-slug/tar.gz/v0.10.1","html_url":"https://github.com/hashicorp/go-slug/releases/tag/v0.10.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hashicorp/go-slug@v0.10.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.10.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.10.1/manifests","release_url":null},{"name":"v0.10.0","sha":"3355e732705b51cd5db3d175bd20e00c9f374f6f","kind":"commit","published_at":"2022-07-29T02:53:03.000Z","download_url":"https://codeload.github.com/hashicorp/go-slug/tar.gz/v0.10.0","html_url":"https://github.com/hashicorp/go-slug/releases/tag/v0.10.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hashicorp/go-slug@v0.10.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.10.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.10.0/manifests","release_url":null},{"name":"v0.9.1","sha":"0be483f58d9ed5c8df3509d18d8398023e9f0bcc","kind":"commit","published_at":"2022-06-23T16:58:32.000Z","download_url":"https://codeload.github.com/hashicorp/go-slug/tar.gz/v0.9.1","html_url":"https://github.com/hashicorp/go-slug/releases/tag/v0.9.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hashicorp/go-slug@v0.9.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.9.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.9.1/manifests","release_url":null},{"name":"v0.9.0","sha":"049f407e5c7e930bc7af99332d30495b81e65630","kind":"commit","published_at":"2022-06-21T16:59:20.000Z","download_url":"https://codeload.github.com/hashicorp/go-slug/tar.gz/v0.9.0","html_url":"https://github.com/hashicorp/go-slug/releases/tag/v0.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hashicorp/go-slug@v0.9.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.9.0/manifests","release_url":null},{"name":"v0.8.1","sha":"246e536d749dd9db226a20c90b9df1d642f13c00","kind":"commit","published_at":"2022-04-25T21:00:10.000Z","download_url":"https://codeload.github.com/hashicorp/go-slug/tar.gz/v0.8.1","html_url":"https://github.com/hashicorp/go-slug/releases/tag/v0.8.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hashicorp/go-slug@v0.8.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.8.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.8.1/manifests","release_url":null},{"name":"v0.8.0","sha":"28b9dceb1f658dd4a1bc27359b7214519733b0e6","kind":"commit","published_at":"2022-03-02T15:53:19.000Z","download_url":"https://codeload.github.com/hashicorp/go-slug/tar.gz/v0.8.0","html_url":"https://github.com/hashicorp/go-slug/releases/tag/v0.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hashicorp/go-slug@v0.8.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.8.0/manifests","release_url":null},{"name":"v0.7.0","sha":"447e7f0eaa48d0b5cb8a406eb740b736323be387","kind":"commit","published_at":"2021-02-26T14:36:59.000Z","download_url":"https://codeload.github.com/hashicorp/go-slug/tar.gz/v0.7.0","html_url":"https://github.com/hashicorp/go-slug/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hashicorp/go-slug@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.7.0/manifests","release_url":null},{"name":"v0.6.0","sha":"34fbf61bec6109cee20edba09bd785b7d1851c04","kind":"commit","published_at":"2020-12-11T18:36:36.000Z","download_url":"https://codeload.github.com/hashicorp/go-slug/tar.gz/v0.6.0","html_url":"https://github.com/hashicorp/go-slug/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hashicorp/go-slug@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.6.0/manifests","release_url":null},{"name":"v0.5.0","sha":"28cafc59c8da6126a3ae94dfa84181df4073454f","kind":"commit","published_at":"2020-12-03T17:13:41.000Z","download_url":"https://codeload.github.com/hashicorp/go-slug/tar.gz/v0.5.0","html_url":"https://github.com/hashicorp/go-slug/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hashicorp/go-slug@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.5.0/manifests","release_url":null},{"name":"v0.4.3","sha":"dbc66eb36565a91ad0e3dd9ddec5e9446da6754c","kind":"commit","published_at":"2020-06-09T23:40:03.000Z","download_url":"https://codeload.github.com/hashicorp/go-slug/tar.gz/v0.4.3","html_url":"https://github.com/hashicorp/go-slug/releases/tag/v0.4.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hashicorp/go-slug@v0.4.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.4.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.4.3/manifests","release_url":null},{"name":"v0.4.2","sha":"02b35646e17e9531818f82291ba0466308c3b0ea","kind":"commit","published_at":"2020-06-09T21:10:09.000Z","download_url":"https://codeload.github.com/hashicorp/go-slug/tar.gz/v0.4.2","html_url":"https://github.com/hashicorp/go-slug/releases/tag/v0.4.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hashicorp/go-slug@v0.4.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.4.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.4.2/manifests","release_url":null},{"name":"v0.4.1","sha":"6f44f1c38242e4477247b818ded808c57e2145bf","kind":"commit","published_at":"2019-11-15T18:03:33.000Z","download_url":"https://codeload.github.com/hashicorp/go-slug/tar.gz/v0.4.1","html_url":"https://github.com/hashicorp/go-slug/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hashicorp/go-slug@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.4.1/manifests","release_url":null},{"name":"v0.4.0","sha":"1aa409aefcbfdbb6309b0567eac2e0530fc9441c","kind":"commit","published_at":"2019-10-17T14:16:20.000Z","download_url":"https://codeload.github.com/hashicorp/go-slug/tar.gz/v0.4.0","html_url":"https://github.com/hashicorp/go-slug/releases/tag/v0.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hashicorp/go-slug@v0.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.4.0/manifests","release_url":null},{"name":"v0.3.1","sha":"3e79299da25dfb2f594601faf9ed38654aca59b1","kind":"commit","published_at":"2019-06-30T11:21:13.000Z","download_url":"https://codeload.github.com/hashicorp/go-slug/tar.gz/v0.3.1","html_url":"https://github.com/hashicorp/go-slug/releases/tag/v0.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hashicorp/go-slug@v0.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.3.1/manifests","release_url":null},{"name":"v0.3.0","sha":"d3fb393c3e270cd56fa17e9600d082ec639e9e8e","kind":"commit","published_at":"2019-04-05T18:29:05.000Z","download_url":"https://codeload.github.com/hashicorp/go-slug/tar.gz/v0.3.0","html_url":"https://github.com/hashicorp/go-slug/releases/tag/v0.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hashicorp/go-slug@v0.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.3.0/manifests","release_url":null},{"name":"v0.2.0","sha":"98c6f0ec89d1cf8f4e487810d666ce3c0b6d4b44","kind":"commit","published_at":"2018-11-30T17:20:08.000Z","download_url":"https://codeload.github.com/hashicorp/go-slug/tar.gz/v0.2.0","html_url":"https://github.com/hashicorp/go-slug/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hashicorp/go-slug@v0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.2.0/manifests","release_url":null},{"name":"v0.1.0","sha":"cc9d70694ef317c2e6443e20b7927363d69c8b1e","kind":"commit","published_at":"2018-07-12T07:59:31.000Z","download_url":"https://codeload.github.com/hashicorp/go-slug/tar.gz/v0.1.0","html_url":"https://github.com/hashicorp/go-slug/releases/tag/v0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hashicorp/go-slug@v0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/tags/v0.1.0/manifests","release_url":null}]},"repo_metadata_updated_at":"2026-10-23T14:14:02.094Z","dependent_packages_count":173,"downloads":null,"downloads_period":null,"dependent_repos_count":1609,"rankings":{"downloads":null,"dependent_repos_count":0.20136860102250845,"dependent_packages_count":0.2978512382975898,"stargazers_count":8.536327269105637,"forks_count":6.178104873514375,"docker_downloads_count":0.14264906048735143,"average":3.0712602084854925},"purl":"pkg:golang/github.com/hashicorp/go-slug","advisories":[{"uuid":"GSA_kwCzR0hTQS13cGZwLWNtNDktOW05cc4ABDoW","url":"https://github.com/advisories/GHSA-wpfp-cm49-9m9q","title":"HashiCorp go-slug Vulnerable to Zip Slip Attack","description":"## Summary\nHashiCorp’s go-slug library is vulnerable to a zip-slip style attack when a non-existing user-provided path is extracted from the tar entry. This vulnerability, identified as CVE-2025-0377, is fixed in go-slug 0.16.3.\n\n## Background\nHashiCorp’s go-slug shared library offers functions for packing and unpacking Terraform Enterprise compatible slugs. Slugs are gzip compressed tar files containing Terraform configuration files.\n\n## Details\nWhen go-slug performs an extraction, the filename/extraction path is taken from the tar entry via the header.Name. It was discovered that the unpacking step improperly validated paths, potentially leading to path traversal, allowing an attacker to write an arbitrary file during extraction.\n\n## Remediation\nConsumers of the go-slug shared library should evaluate the risk associated with this issue in the context of their go-slug usage and upgrade go-slug to 0.16.3 or later.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2025-01-21T18:31:07.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2025-0377","https://discuss.hashicorp.com/t/hcsec-2025-01-hashicorp-go-slug-vulnerable-to-zip-slip-attack","https://github.com/advisories/GHSA-wpfp-cm49-9m9q"],"source_kind":"github","identifiers":["GHSA-wpfp-cm49-9m9q","CVE-2025-0377"],"repository_url":null,"blast_radius":0.0,"created_at":"2025-01-21T21:08:51.935Z","updated_at":"2026-10-31T02:08:29.157Z","epss_percentage":0.00677,"epss_percentile":0.52159,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS13cGZwLWNtNDktOW05cc4ABDoW","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS13cGZwLWNtNDktOW05cc4ABDoW","packages":[{"ecosystem":"go","package_name":"github.com/hashicorp/go-slug","versions":[{"first_patched_version":"0.16.3","vulnerable_version_range":"\u003c 0.16.3"}],"purl":"pkg:go/github.com%2Fhashicorp%2Fgo-slug"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS13cGZwLWNtNDktOW05cc4ABDoW/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS0yZzVqLTV4OTUtcjZocs4AAxdO","url":"https://github.com/advisories/GHSA-2g5j-5x95-r6hr","title":"Unsafe tar unpacking in HashiCorp go-slug","description":"HashiCorp go-slug before 0.5.0 does not address attempts at directory traversal involving ../ and symlinks.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2023-02-06T23:16:16.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2020-29529","https://github.com/hashicorp/go-slug/pull/12","https://github.com/hashicorp/go-slug/commit/28cafc59c8da6126a3ae94dfa84181df4073454f","https://github.com/hashicorp/go-slug/commit/764785bc4cbb9e600ad1cf1a6bd21b535c182983","https://github.com/hashicorp/go-slug/compare/v0.4.3...v0.5.0","https://github.com/hashicorp/go-slug/releases/tag/v0.5.0","https://pkg.go.dev/vuln/GO-2021-0094","https://securitylab.github.com/advisories/GHSL-2020-262-zipslip-go-slug","https://github.com/advisories/GHSA-2g5j-5x95-r6hr"],"source_kind":"github","identifiers":["GHSA-2g5j-5x95-r6hr","CVE-2020-29529"],"repository_url":"https://github.com/hashicorp/go-slug","blast_radius":0.0,"created_at":"2023-02-07T00:03:00.581Z","updated_at":"2026-10-31T02:14:32.967Z","epss_percentage":0.02817,"epss_percentile":0.86504,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0yZzVqLTV4OTUtcjZocs4AAxdO","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS0yZzVqLTV4OTUtcjZocs4AAxdO","packages":[{"ecosystem":"go","package_name":"github.com/hashicorp/go-slug","versions":[{"first_patched_version":"0.5.0","vulnerable_version_range":"\u003c 0.5.0"}],"purl":"pkg:go/github.com%2Fhashicorp%2Fgo-slug"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0yZzVqLTV4OTUtcjZocs4AAxdO/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/hashicorp/go-slug","docker_dependents_count":1122,"docker_downloads_count":733284147,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/hashicorp/go-slug","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/hashicorp/go-slug/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-10-01T12:42:29.182Z","issues_count":10,"pull_requests_count":140,"avg_time_to_close_issue":44034228.333333336,"avg_time_to_close_pull_request":3296228.285714286,"issues_closed_count":3,"pull_requests_closed_count":112,"pull_request_authors_count":42,"issue_authors_count":9,"avg_comments_per_issue":1.1,"avg_comments_per_pull_request":0.6,"merged_pull_requests_count":79,"bot_issues_count":0,"bot_pull_requests_count":43,"past_year_issues_count":2,"past_year_pull_requests_count":13,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":811265.0,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":8,"past_year_pull_request_authors_count":9,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.5384615384615384,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":5,"past_year_merged_pull_requests_count":4,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-slug/issues","maintainers":[{"login":"liamcervante","count":7,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/liamcervante"},{"login":"ryanuber","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ryanuber"},{"login":"dduzgun-security","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dduzgun-security"},{"login":"alisdair","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alisdair"},{"login":"notchairmk","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/notchairmk"},{"login":"apparentlymart","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/apparentlymart"},{"login":"nasareeny","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nasareeny"},{"login":"radditude","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/radditude"},{"login":"USA-RedDragon","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/USA-RedDragon"},{"login":"jbardin","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jbardin"},{"login":"CreatorHead","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/CreatorHead"},{"login":"radeksimko","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/radeksimko"},{"login":"ggambetti","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ggambetti"}],"active_maintainers":[{"login":"CreatorHead","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/CreatorHead"},{"login":"nasareeny","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nasareeny"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fhashicorp%2Fgo-slug/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fhashicorp%2Fgo-slug/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fhashicorp%2Fgo-slug/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fhashicorp%2Fgo-slug/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fhashicorp%2Fgo-slug/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fhashicorp%2Fgo-slug/codemeta","maintainers":[]}