Tracking golang.org/x/crypto Direct Usage #59
Description
golang.org/x/crypto Direct Usage Report
Last Updated: 2026-01-29 06:41:34 UTC
Package: golang.org/x/crypto
Latest Version: v0.47.0 (view tags)
Status: Actively maintained by the Go team
Summary
- Total Repositories Scanned: 886
- Repositories Skipped (forks): 287
- Repositories Skipped (abandoned - no commits in 6 months): 252
- Repositories Skipped (no go.mod): 93
- Repositories Actually Checked: 254
- Repositories Using x/crypto Directly: 26
- Usage Percentage: 10.2%
Status Legend
| Symbol | Meaning |
|---|---|
| ✅ Current | Using the latest version of x/crypto |
| Using an older version, consider updating | |
| ✅ Yes (Dependabot) | Repository has Dependabot configured |
| ❌ No (Dependabot) | Repository does not have Dependabot configured |
redhat-best-practices-for-k8s
Repositories Using x/crypto Directly: 1
| Repository | x/crypto Version | Status | Dependabot | Last Updated | Tracking Issue |
|---|---|---|---|---|---|
collector |
v0.47.0 |
✅ Current | ✅ Yes | 2026-01-27 | — |
openshift
Repositories Using x/crypto Directly: 24
| Repository | x/crypto Version | Status | Dependabot | Last Updated | Tracking Issue |
|---|---|---|---|---|---|
windows-machine-config-operator |
v0.47.0 |
✅ Current | ❌ No | 2026-01-29 | — |
oc |
v0.45.0 |
❌ No | 2026-01-29 | — | |
machine-config-operator |
v0.43.0 |
❌ No | 2026-01-29 | #5506 | |
configuration-anomaly-detection |
v0.47.0 |
✅ Current | ✅ Yes | 2026-01-28 | — |
hypershift |
v0.47.0 |
✅ Current | ✅ Yes | 2026-01-28 | — |
installer |
v0.43.0 |
❌ No | 2026-01-28 | #10170 | |
oc-mirror |
v0.41.0 |
✅ Yes | 2026-01-28 | #1330 | |
library-go |
v0.45.0 |
❌ No | 2026-01-28 | — | |
assisted-service |
v0.44.0 |
✅ Yes | 2026-01-28 | #8598 | |
cluster-version-operator |
v0.45.0 |
❌ No | 2026-01-28 | — | |
origin |
v0.42.0 |
❌ No | 2026-01-27 | #30621 | |
hive |
v0.45.0 |
❌ No | 2026-01-27 | — | |
appliance |
v0.46.0 |
❌ No | 2026-01-27 | — | |
machine-api-provider-azure |
v0.43.0 |
❌ No | 2026-01-26 | #178 | |
assisted-installer |
v0.33.1 |
✅ Yes | 2026-01-25 | #1404 | |
rosa |
v0.46.0 |
❌ No | 2026-01-22 | — | |
image-registry |
v0.46.0 |
❌ No | 2026-01-19 | — | |
image-based-install-operator |
v0.42.0 |
❌ No | 2026-01-18 | #443 | |
cluster-api-provider-gcp |
v0.43.0 |
❌ No | 2026-01-16 | #256 | |
cluster-api-provider-ibmcloud |
v0.41.0 |
❌ No | 2026-01-16 | #141 | |
cluster-baremetal-operator |
v0.42.0 |
❌ No | 2025-12-23 | #536 | |
oauth-server |
v0.36.0 |
❌ No | 2025-12-01 | #206 | |
installer-aro-wrapper |
v0.36.0 |
❌ No | 2025-11-26 | #377 | |
azure-service-operator |
v0.14.0 |
❌ No | 2025-10-01 | #15 |
openshift-kni
Repositories Using x/crypto Directly: 1
| Repository | x/crypto Version | Status | Dependabot | Last Updated | Tracking Issue |
|---|---|---|---|---|---|
lifecycle-agent |
v0.47.0 |
✅ Current | ✅ Yes | 2026-01-28 | — |
About golang.org/x/crypto
The golang.org/x/crypto package provides supplementary cryptographic primitives for Go programs.
Key Information
- Status: Actively maintained by the Go team
- Repository: golang.org/x/crypto
- Purpose: Provides cryptographic primitives not included in the standard library
Common Use Cases
- SSH implementations:
golang.org/x/crypto/ssh - Additional encryption algorithms:
golang.org/x/crypto/chacha20poly1305 - Password hashing:
golang.org/x/crypto/bcrypt,golang.org/x/crypto/argon2 - Cryptographic protocols:
golang.org/x/crypto/acme
Why Track This?
This tracking issue helps us:
- Understand security-sensitive dependencies across our codebase
- Track cryptographic implementations for security reviews
- Ensure proper maintenance of crypto-related dependencies
- Monitor for security advisories affecting x/crypto
Security Considerations
When using golang.org/x/crypto:
- Keep the dependency updated to get security fixes
- Review security advisories for the package
- Ensure proper usage of cryptographic primitives
- Follow security best practices for key management
Resources
This issue is automatically updated by the xcrypto-lookup.sh script.