A command-line tool to scan all dependencies of a given Go project and check if those dependencies are actively maintained and if the used versions are up to date.
-
Scans all dependencies of a Go project
-
Checks if dependencies are actively maintained
-
Identifies outdated dependency versions
-
Provides detailed dependency status report
Scan the current project:
govital scanScan a specific project:
govital scan --project-path /path/to/projectConfigure when dependencies are considered inactive (default: 30 days):
govital scan --stale-threshold 180By default, only direct dependencies are scanned. To include indirect (transitive) dependencies:
govital scan --include-indirectThis is useful for analyzing the full dependency tree but can be slower for large projects.
Control the number of parallel workers for faster scanning (default: 4):
# Use 8 workers for faster scanning on powerful hardware
govital scan --workers 8
# Use 1 worker to minimize resource usage
govital scan --workers 1Parallel scanning significantly improves performance on projects with many dependencies.
-
Scan multiple projects e.g. from Github organization or Gitlab group
-
Build Docker images with Govital pre-installed for CI/CD integration
-
Expose results as Prometheus metrics for monitoring