Our project depends on gopkg.in/validator.v2:v2.0.1. One of its child dependencies, github.com/kr/text:v0.2.0, is end-of-life and requires an upgrade to a maintained version.
Impact:
Using an unmaintained library may expose the project to security vulnerabilities.
Future compatibility with Go modules or other dependencies could break.
Suggested Solution:
Identify a maintained version or alternative for github.com/kr/text.
Update the dependency in go.mod and verify that the project builds successfully.
Run all tests to ensure no breaking changes occur.
References:
Parent library: gopkg.in/validator.v2:v2.0.1
Child EOL library: github.com/kr/text:v0.2.0
Our project depends on gopkg.in/validator.v2:v2.0.1. One of its child dependencies, github.com/kr/text:v0.2.0, is end-of-life and requires an upgrade to a maintained version.
Impact:
Using an unmaintained library may expose the project to security vulnerabilities.
Future compatibility with Go modules or other dependencies could break.
Suggested Solution:
Identify a maintained version or alternative for github.com/kr/text.
Update the dependency in go.mod and verify that the project builds successfully.
Run all tests to ensure no breaking changes occur.
References:
Parent library: gopkg.in/validator.v2:v2.0.1
Child EOL library: github.com/kr/text:v0.2.0