Dependency change
confirmed
2026-08-12 04:18 UTC
hashicorp/vault
read from this repository’s dependency manifest.
Dependencies added
0
Major version moves
0
Manifest
go.mod
Dependencies removed
12
Removed
github.com/cyphar/filepath-securejoin, github.com/emirpasic/gods, github.com/go-git/gcfg, github.com/go-git/go-billy/v5, github.com/go-git/go-git/v5, github.com/jbenet/go-context
hashicorp/vault removed 12 dependencies from its go.mod file, including github.com/cyphar/filepath-securejoin and github.com/emirpasic/gods.
Written from the readings above
How to read this
hashicorp/vault changed its go.mod: 12 removed.
Every figure above is published as JSON at
the bundle it came from ,
and the reading it came from can be checked at the source link.
417 repositories are checked every 4 hours. The watchlist is
curated and partial — it is chosen by hand and is not a survey of open source.
Fork activity is compared against each repository's own trailing baseline. A repository needs
14 days of history before any comparison is made; until then its counts are
shown raw and marked forming.
This data is not real-time. Every figure links to its source so it can be checked directly.
The underlying bundles are published at /data/index.json .
Every reading is committed to a public repository as it is taken. That makes the history the
record: a figure published on a date cannot be changed afterwards without the change itself being
visible. Nothing here is a database somebody can quietly edit — see
the commit log .
The most recent run was partial. 205 collector errors were recorded; the sections above show what was collected.
The only official channels
Anything not on this list is not us. This list is served from
sighttrue.com, which is the one address nobody else can publish from, and it is also a file:
/data/official.json . Check the address here rather than in a screenshot — a screenshot is the one place it can be changed.