An open API service providing package, version and dependency metadata of many open source software ecosystems and registries.

Top 0.8% on proxy.golang.org
Top 0.1% dependent packages on proxy.golang.org
Top 0.1% dependent repos on proxy.golang.org
Top 2.0% forks on proxy.golang.org
Top 0.1% docker downloads on proxy.golang.org

proxy.golang.org : github.com/hashicorp/go-getter

getter is a package for downloading files or directories from a variety of protocols. getter is unique in its ability to download both directories and files. It also detects certain source strings to be protocol-specific URLs. For example, "github.com/hashicorp/go-getter" would turn into a Git URL and use the Git protocol. Protocols and detectors are extensible. To get started, see Client.

Registry - Source - Documentation - JSON
purl: pkg:golang/github.com/hashicorp/go-getter
License: MPL-2.0
Latest release: 6 months ago
First release: over 6 years ago
Namespace: github.com/hashicorp
Dependent packages: 3,705
Dependent repositories: 6,872
Stars: 1,714 on GitHub
Forks: 252 on GitHub
Docker dependents: 2,092
Docker downloads: 1,013,834,594
Total Commits: 438
Committers: 78
Average commits per author: 5.615
Development Distribution Score (DDS): 0.735
More commit stats: commits.ecosyste.ms
See more repository details: repos.ecosyste.ms
Last synced: about 23 hours ago

High
GSA_kwCzR0hTQS0yOHIyLXE2bTgtOWhweM4AArN7
HashiCorp go-getter unsafe downloads could lead to asymmetric resource exhaustion
Ecosystems: go
Packages: github.com/hashicorp/go-getter/gcs/v2, github.com/hashicorp/go-getter/s3/v2, github.com/hashicorp/go-getter/v2, github.com/hashicorp/go-getter
Source: github
Published: about 3 years ago
High
GSA_kwCzR0hTQS1janI0LWZ2NmMtZjNtds4AArN5
HashiCorp go-getter unsafe downloads could lead to arbitrary host access
Ecosystems: go
Packages: github.com/hashicorp/go-getter/gcs/v2, github.com/hashicorp/go-getter/s3/v2, github.com/hashicorp/go-getter/v2, github.com/hashicorp/go-getter
Source: github
Published: about 3 years ago
High
GSA_kwCzR0hTQS14ZmhwLWpmOHAtbWg1d84AA9WW
HashiCorp go-getter Vulnerable to Code Execution On Git Update Via Git Config Manipulation
Ecosystems: go
Packages: github.com/hashicorp/go-getter
Source: github
Published: about 1 year ago
Critical
GSA_kwCzR0hTQS1xNjRoLTM5aHYtNGNmN84AA7KO
HashiCorp go-getter Vulnerable to Argument Injection When Fetching Remote Default Git Branches
Ecosystems: go
Packages: github.com/hashicorp/go-getter
Source: github
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS0yN3JxLTQ5NDMtcWN3cM1Bgg
Insertion of Sensitive Information into Log File in Hashicorp go-getter
Ecosystems: go
Packages: github.com/hashicorp/go-getter
Source: github
Published: about 3 years ago
Critical
GSA_kwCzR0hTQS14MjRnLTl3N3YtdnByaM4AArN3
HashiCorp go-getter command injection
Ecosystems: go
Packages: github.com/hashicorp/go-getter/gcs/v2, github.com/hashicorp/go-getter/s3/v2, github.com/hashicorp/go-getter/v2, github.com/hashicorp/go-getter
Source: github
Published: about 3 years ago
Moderate
GSA_kwCzR0hTQS1qcHhqLTJqdmctNmp2Oc4AAxsJ
Data Amplification in HashiCorp go-getter
Ecosystems: go
Packages: github.com/hashicorp/go-getter/v2, github.com/hashicorp/go-getter
Source: github
Published: over 2 years ago
High
GSA_kwCzR0hTQS1mY2dnLXJ2d2ctanY1OM4AArNo
HashiCorp go-getter unsafe downloads
Ecosystems: go
Packages: github.com/hashicorp/go-getter/gcs/v2, github.com/hashicorp/go-getter/s3/v2, github.com/hashicorp/go-getter/v2, github.com/hashicorp/go-getter
Source: github
Published: about 3 years ago