Go Module Mirror

The official Go release list: each version with its stability flag and every downloadable file (archive, installer, source) with filename, OS, architecture, size and SHA-256 checksum. Stable releases only by default.

The publish timestamp and VCS origin (repo URL, tag ref and commit hash) for one exact version of a Go module.

The newest version of a Go module known to the mirror, with its publish timestamp and VCS origin (repo URL, ref and commit hash).

The complete catalogue of Go advisories as a flat list of GO-YYYY-NNNN ids, each with its last-modified date and its CVE/GHSA aliases. Roughly 4,700 entries, about 480 KB. No details or affected versions - fetch vuln-record for those.

The complete index of every Go module path that has at least one advisory in the Go vulnerability database, each with the advisory ids affecting it and the version each was fixed in. Roughly 1,400 modules, about 540 KB.

The full OSV-format record for one Go advisory: summary, details, aliases (CVE and GHSA ids), affected module and version ranges, the exact affected packages and symbols, and references.