Skip to content

Tracking golang.org/x/crypto Direct Usage #59

@sebrandon1

Description

@sebrandon1

golang.org/x/crypto Direct Usage Report

Last Updated: 2026-02-22 08:44:06 UTC
Package: golang.org/x/crypto
Latest Version: v0.48.0 (view tags)
Status: Actively maintained by the Go team

Summary

  • Total Repositories Scanned: 960
  • Repositories Skipped (forks): 299
  • Repositories Skipped (abandoned - no commits in 6 months): 267
  • Repositories Skipped (no go.mod): 124
  • Repositories Actually Checked: 270
  • Repositories Using x/crypto Directly: 31
  • Usage Percentage: 11.5%

Status Legend

Symbol Meaning
✅ Current Using the latest version of x/crypto
⚠️ Outdated Using an older version, consider updating
✅ Yes (Dependabot) Repository has Dependabot configured
❌ No (Dependabot) Repository does not have Dependabot configured

redhat-best-practices-for-k8s

Repositories Using x/crypto Directly: 1

Repository x/crypto Version Status Dependabot Last Updated Tracking Issue
collector v0.48.0 ✅ Current ✅ Yes 2026-02-16

openshift

Repositories Using x/crypto Directly: 26

Repository x/crypto Version Status Dependabot Last Updated Tracking Issue
origin v0.42.0 ⚠️ Outdated ❌ No 2026-02-21 #30621
ocm-container v0.48.0 ✅ Current ❌ No 2026-02-21
windows-machine-config-operator v0.47.0 ⚠️ Outdated ❌ No 2026-02-21
hypershift v0.47.0 ⚠️ Outdated ✅ Yes 2026-02-20
machine-config-operator v0.43.0 ⚠️ Outdated ❌ No 2026-02-20 #5506
hive v0.45.0 ⚠️ Outdated ❌ No 2026-02-19
image-based-install-operator v0.47.0 ⚠️ Outdated ❌ No 2026-02-19
assisted-service v0.44.0 ⚠️ Outdated ✅ Yes 2026-02-19 #8598
assisted-installer v0.33.1 ⚠️ Outdated ✅ Yes 2026-02-19 #1404
oc v0.45.0 ⚠️ Outdated ❌ No 2026-02-19
oc-mirror v0.41.0 ⚠️ Outdated ✅ Yes 2026-02-19 #1330
cluster-version-operator v0.45.0 ⚠️ Outdated ❌ No 2026-02-19
cluster-baremetal-operator v0.42.0 ⚠️ Outdated ❌ No 2026-02-18 #536
oauth-server v0.42.0 ⚠️ Outdated ❌ No 2026-02-18 #206
configuration-anomaly-detection v0.47.0 ⚠️ Outdated ✅ Yes 2026-02-18
library-go v0.45.0 ⚠️ Outdated ❌ No 2026-02-13
rosa v0.46.0 ⚠️ Outdated ❌ No 2026-02-12
installer v0.43.0 ⚠️ Outdated ❌ No 2026-02-12 #10170
appliance v0.47.0 ⚠️ Outdated ❌ No 2026-02-10
must-gather-operator v0.47.0 ⚠️ Outdated ✅ Yes 2026-02-10
installer-aro-wrapper v0.36.0 ⚠️ Outdated ❌ No 2026-02-09 #377
cluster-api-provider-gcp v0.46.0 ⚠️ Outdated ❌ No 2026-02-02
machine-api-provider-azure v0.43.0 ⚠️ Outdated ❌ No 2026-01-26 #178
image-registry v0.46.0 ⚠️ Outdated ❌ No 2026-01-19
cluster-api-provider-ibmcloud v0.41.0 ⚠️ Outdated ❌ No 2026-01-16 #141
azure-service-operator v0.14.0 ⚠️ Outdated ❌ No 2025-10-01 #15

openshift-kni

Repositories Using x/crypto Directly: 1

Repository x/crypto Version Status Dependabot Last Updated Tracking Issue
lifecycle-agent v0.47.0 ⚠️ Outdated ✅ Yes 2026-02-18

openshift-eng

Repositories Using x/crypto Directly: 1

Repository x/crypto Version Status Dependabot Last Updated Tracking Issue
ship-status-dash v0.43.0 ⚠️ Outdated ❌ No 2026-02-17 #47

crc-org

Repositories Using x/crypto Directly: 2

Repository x/crypto Version Status Dependabot Last Updated Tracking Issue
crc v0.48.0 ✅ Current ✅ Yes 2026-02-19
vfkit v0.48.0 ✅ Current ✅ Yes 2026-02-11

About golang.org/x/crypto

The golang.org/x/crypto package provides supplementary cryptographic primitives for Go programs.

Key Information

  • Status: Actively maintained by the Go team
  • Repository: golang.org/x/crypto
  • Purpose: Provides cryptographic primitives not included in the standard library

Common Use Cases

  • SSH implementations: golang.org/x/crypto/ssh
  • Additional encryption algorithms: golang.org/x/crypto/chacha20poly1305
  • Password hashing: golang.org/x/crypto/bcrypt, golang.org/x/crypto/argon2
  • Cryptographic protocols: golang.org/x/crypto/acme

Why Track This?

This tracking issue helps us:

  1. Understand security-sensitive dependencies across our codebase
  2. Track cryptographic implementations for security reviews
  3. Ensure proper maintenance of crypto-related dependencies
  4. Monitor for security advisories affecting x/crypto

Security Considerations

When using golang.org/x/crypto:

  • Keep the dependency updated to get security fixes
  • Review security advisories for the package
  • Ensure proper usage of cryptographic primitives
  • Follow security best practices for key management

Resources


This issue is automatically updated by the xcrypto-lookup.sh script.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions