Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Go packages data is old #147

Open
shahar-h opened this issue Dec 24, 2024 · 1 comment
Open

Go packages data is old #147

shahar-h opened this issue Dec 24, 2024 · 1 comment

Comments

@shahar-h
Copy link

I noticed that go packages data is old, so there are many packages with missing versions. I'm using osv-scanner for license scanning, so when updating a package to latest version, in case it's missing on deps.dev the license will not be identified, which causes the scan to fail:

Image

We can add license override to overcome this, but it requires a lot of maintenance effort.
Can you update go packages data more frequently?

Related issues: #120 #146

@crholm
Copy link

crholm commented Feb 7, 2025

Any progress on this?

Eg https://pkg.go.dev/golang.org/x/oauth2 has two versions released since new years, v0.25.0 and v0.26.0

non of them is found at deps.dev at the moment. The latest being v0.24.0

https://deps.dev/go/golang.org%2Fx%2Foauth2

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants