Dependencies · microsoft/codeql · GitHub
Skip to content

Insights: microsoft/codeql

Dependency graph

Loading
3,991 Total

Filter by ecosystem

  • github.com/davecgh/go-spew v1.1.1 Transitive
    Show dependency options

    View transitive paths

    You can view transitive paths for packages within supported ecosystems. Learn more

    Go · go/extractor/go.mod · Detected by dependabot on Jun 01, 2026 · ISC

    Paths for github.com/davecgh/go-spew v1.1.1

    Paths for github.com/davecgh/go-spew v1.1.1
    Showing 1 path. Export SBOM to view all paths. Learn more about SBOMS.

      Transitive

    • github.com/stretchr/testify v1.11.1 github.com/davecgh/go-spew v1.1.1
  • github.com/pmezard/go-difflib v1.0.0 Transitive
    Show dependency options
    Go · go/extractor/go.mod · Detected by dependabot on Jun 01, 2026 · BSD-3-Clause

    Paths for github.com/pmezard/go-difflib v1.0.0

    Paths for github.com/pmezard/go-difflib v1.0.0
    Showing 1 path. Export SBOM to view all paths. Learn more about SBOMS.

      Transitive

    • github.com/stretchr/testify v1.11.1 github.com/pmezard/go-difflib v1.0.0
  • github.com/stretchr/testify v1.11.1 Direct
    Show dependency options
    Go · go/extractor/go.mod · Detected by dependabot on Jun 01, 2026 · MIT

    Paths for github.com/stretchr/testify v1.11.1

    Paths for github.com/stretchr/testify v1.11.1
    Showing 0 paths. Export SBOM to view all paths. Learn more about SBOMS.

      Transitive

  • golang.org/x/mod v0.36.0 Direct
    Show dependency options
    Go · go/extractor/go.mod · Detected by dependabot on Jun 01, 2026 · BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang

    Paths for golang.org/x/mod v0.36.0

    Paths for golang.org/x/mod v0.36.0
    Showing 3 paths. Export SBOM to view all paths. Learn more about SBOMS.

      Direct

    • golang.org/x/mod v0.36.0

      Transitive

    • golang.org/x/tools v0.45.0 ... golang.org/x/mod v0.36.0
    • golang.org/x/mod v0.36.0 ... golang.org/x/mod v0.36.0
    • golang.org/x/tools v0.45.0 golang.org/x/mod v0.36.0
  • golang.org/x/sync v0.20.0 Transitive
    Show dependency options
    Go · go/extractor/go.mod · Detected by dependabot on Jun 01, 2026 · BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang

    Paths for golang.org/x/sync v0.20.0

    Paths for golang.org/x/sync v0.20.0
    Showing 3 paths. Export SBOM to view all paths. Learn more about SBOMS.

      Transitive

    • golang.org/x/tools v0.45.0 golang.org/x/sync v0.20.0
    • golang.org/x/mod v0.36.0 ... golang.org/x/sync v0.20.0
    • golang.org/x/tools v0.45.0 ... golang.org/x/sync v0.20.0
  • golang.org/x/tools v0.45.0 Direct
    Show dependency options
    Go · go/extractor/go.mod · Detected by dependabot on Jun 01, 2026 · BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang

    Paths for golang.org/x/tools v0.45.0

    Paths for golang.org/x/tools v0.45.0
    Showing 3 paths. Export SBOM to view all paths. Learn more about SBOMS.

      Direct

    • golang.org/x/tools v0.45.0

      Transitive

    • golang.org/x/mod v0.36.0 golang.org/x/tools v0.45.0
    • golang.org/x/mod v0.36.0 ... golang.org/x/tools v0.45.0
    • golang.org/x/tools v0.45.0 ... golang.org/x/tools v0.45.0
  • gopkg.in/yaml.v3 v3.0.1 Transitive
    Show dependency options
    Go · go/extractor/go.mod · Detected by dependabot on Jun 01, 2026 · Apache-2.0

    Paths for gopkg.in/yaml.v3 v3.0.1

    Paths for gopkg.in/yaml.v3 v3.0.1
    Showing 1 path. Export SBOM to view all paths. Learn more about SBOMS.

      Transitive

    • github.com/stretchr/testify v1.11.1 gopkg.in/yaml.v3 v3.0.1
  • github.com/nonexistent/test v0.0.0-20200203000000-0000000000000 Direct
    Show dependency options
    Go · go/ql/test/library-tests/semmle/go/dataflow/ExternalTaintFlow/go.mod · Detected by dependabot on Feb 23, 2026

    Paths for github.com/nonexistent/test v0.0.0-20200203000000-0000000000000

    Paths for github.com/nonexistent/test v0.0.0-20200203000000-0000000000000
    Showing 0 paths. Export SBOM to view all paths. Learn more about SBOMS.

      Transitive

  • github.com/nonexistent/test v0.0.0-20200203000000-0000000000000 Direct
    Show dependency options
    Go · go/ql/test/library-tests/semmle/go/dataflow/ExternalValueFlow/go.mod · Detected by dependabot on Feb 23, 2026

    Paths for github.com/nonexistent/test v0.0.0-20200203000000-0000000000000

    Paths for github.com/nonexistent/test v0.0.0-20200203000000-0000000000000
    Showing 0 paths. Export SBOM to view all paths. Learn more about SBOMS.

      Transitive

  • golang.org/x/net v0.0.0-20201010224723-4f7140c49acb Direct
    Show dependency options
    Go · go/ql/test/library-tests/semmle/go/frameworks/StdlibTaintFlow/go.mod · Detected by dependabot on Feb 23, 2026 · BSD-3-Clause AND LicenseRef-github-NOASSERTION

    Paths for golang.org/x/net v0.0.0-20201010224723-4f7140c49acb

    Paths for golang.org/x/net v0.0.0-20201010224723-4f7140c49acb
    Showing 0 paths. Export SBOM to view all paths. Learn more about SBOMS.

      Transitive

  • Show dependency options
    Go · go/ql/test/query-tests/Security/CWE-1004/go.mod · Detected by dependabot on Dec 15, 2025 · MIT

    Paths for github.com/gin-gonic/gin v1.7.1

    Paths for github.com/gin-gonic/gin v1.7.1
    Showing 0 paths. Export SBOM to view all paths. Learn more about SBOMS.

      Transitive

  • golang.org/x/crypto v0.43.0 Direct
    Show dependency options
    Go · go/ql/test/query-tests/Security/CWE-327/go.mod · Detected by dependabot on Dec 15, 2025 · BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang

    Paths for golang.org/x/crypto v0.43.0

    Paths for golang.org/x/crypto v0.43.0
    Showing 0 paths. Export SBOM to view all paths. Learn more about SBOMS.

      Transitive

  • Show dependency options
    Go · go/ql/test/query-tests/Security/CWE-614/go.mod · Detected by dependabot on Dec 15, 2025 · MIT

    Paths for github.com/gin-gonic/gin v1.7.1

    Paths for github.com/gin-gonic/gin v1.7.1
    Showing 0 paths. Export SBOM to view all paths. Learn more about SBOMS.

      Transitive

  • Show dependency options
    npm · javascript/extractor/lib/typescript/package-lock.json · Detected automatically on Sep 23, 2025 · MIT

    Paths for @types/node 24.3.1

    Paths for @types/node 24.3.1
    Showing 0 paths. Export SBOM to view all paths. Learn more about SBOMS.

      Transitive

  • Show dependency options
    npm · javascript/extractor/lib/typescript/package-lock.json · Detected automatically on Sep 23, 2025 · Apache-2.0

    Paths for typescript 5.9.2

    Paths for typescript 5.9.2
    Showing 0 paths. Export SBOM to view all paths. Learn more about SBOMS.

      Transitive

  • Show dependency options
    npm · javascript/extractor/lib/typescript/package-lock.json · Detected automatically on Sep 23, 2025 · MIT

    Paths for undici-types 7.10.0

    Paths for undici-types 7.10.0
    Showing 1 path. Export SBOM to view all paths. Learn more about SBOMS.

      Transitive

    • @types/node 24.3.1 undici-types 7.10.0
  • Show dependency options
    npm · javascript/ql/test/ApiGraphs/async-await/package.json · Detected automatically on Sep 06, 2025

    Paths for fs-extra *

    Paths for fs-extra *
    Showing 0 paths. Export SBOM to view all paths. Learn more about SBOMS.

      Transitive

  • Show dependency options
    npm · javascript/ql/test/ApiGraphs/bound-args/package.json · Detected automatically on Sep 06, 2025

    Paths for foo *

    Paths for foo *
    Showing 0 paths. Export SBOM to view all paths. Learn more about SBOMS.

      Transitive

  • Show dependency options
    npm · javascript/ql/test/ApiGraphs/cyclic/package.json · Detected automatically on Sep 06, 2025

    Paths for foo *

    Paths for foo *
    Showing 0 paths. Export SBOM to view all paths. Learn more about SBOMS.

      Transitive

  • Show dependency options
    npm · javascript/ql/test/ApiGraphs/dynamic-prop-read/package.json · Detected automatically on Sep 06, 2025

    Paths for classes *

    Paths for classes *
    Showing 0 paths. Export SBOM to view all paths. Learn more about SBOMS.

      Transitive

ProTip! Supported ecosystems will have transitivity labels on their packages.