</>PackageGraphPackageGraph

github.com/google/go-tpm-tools

Go Modulesvv0.4.9

Go module: github.com/google/go-tpm-tools

Not recommended for new projects

No — github.com/google/go-tpm-tools should not be adopted for new projects. Depended on by 1 known packages. Pulls in 867 transitive packages (at least — some of the tree is still being crawled). This package lists no maintainer, exposes a 867-package audit surface. No license declared — you have no explicit right to use this code.

  • CAdoption: grade C, Fair — worth a look.

    Depended on by 1 known packages.

  • AMaintenance: grade A, Excellent.

    Last published 48 days ago. 5 releases in the last 2 years.

  • FWeight: grade F, Failing.

    Pulls in 867 transitive packages (at least — some of the tree is still being crawled).

  • DSupply chain: grade D, Poor — a real concern.

    This package lists no maintainer, exposes a 867-package audit surface.

  • FLicense: grade F, Failing.

    No license declared — you have no explicit right to use this code.

Grades are computed deterministically from registry metadata collected by PackageGraph — downloads, dependents, publish dates, the resolved dependency tree, maintainer count, and declared licenses. No third-party scores are used.

Install cost

What you actually take on by adding github.com/google/go-tpm-tools to a project.

17
Direct dependencies

Runtime packages this one declares itself.

867
Total installed

Distinct packages in the full runtime tree, deduplicated the way a package manager would.

6
Tree depth

Longest resolved dependency chain below this package.

Part of this dependency tree has not been crawled yet, so these figures are a lower bound rather than a final total.

Compatibility

Go
No constraint declared

Dependencies

Declared by github.com/google/go-tpm-tools vv0.4.9. Runtime dependencies are installed with the package; dev dependencies are not.

Runtime (17)

github.com/GoogleCloudPlatform/confidential-space/server v0.0.0-20260522213940-e5c6d01a3007github.com/google/certificate-transparency-go v1.1.2github.com/google/go-attestation v0.5.1github.com/google/go-cmp v0.7.0github.com/google/go-configfs-tsm v0.3.3-0.20240919001351-b4b5b84fdcbcgithub.com/google/go-eventlog v0.0.3-0.20260416001248-6807b85eecf0github.com/google/go-sev-guest v0.14.0github.com/google/go-tdx-guest v0.3.2-0.20250814004405-ffb0869e6f4dgithub.com/google/go-tpm v0.9.6github.com/google/go-tspi v0.3.0github.com/google/logger v1.1.1github.com/google/uuid v1.6.0github.com/stretchr/testify v1.9.0go.uber.org/multierr v1.11.0golang.org/x/crypto v0.45.0golang.org/x/sys v0.38.0google.golang.org/protobuf v1.36.11

Used by

Popular packages that depend on github.com/google/go-tpm-tools.

github.com/google/go-tpmGo Modules

Go module: github.com/google/go-tpm

↓ 0/wk◈ 1 dependents

Relationship graph

Dependencies (left) and dependents (right) of github.com/google/go-tpm-tools.

github.com/google…github.com/google…google.golang.org…github.com/google…github.com/google…github.com/stretc…go.uber.org/multi…golang.org/x/cryp…golang.org/x/sysgithub.com/google…
github.com/google/go-tpm-tools dependencies dependents

Frequently installed together

golang.org/x/sysGo Modules

Go module: golang.org/x/sys

↓ 0/wk◈ 308 dependents
github.com/google/go-cmpGo Modules

Go module: github.com/google/go-cmp

↓ 0/wk◈ 106 dependents

Release history

5 releases in the last two years, typically about 43 days apart.

Recent versions of github.com/google/go-tpm-tools
VersionPublishedLicense
v0.4.9latest1 month ago—
v0.4.84 months ago—
v0.4.78 months ago—
v0.4.69 months ago—
v0.4.51 year ago—
v0.4.42 years ago—
v0.4.32 years ago—
v0.4.22 years ago—
v0.4.12 years ago—
v0.4.03 years ago—
v0.3.123 years ago—
v0.3.113 years ago—
v0.3.103 years ago—
v0.3.93 years ago—
v0.3.84 years ago—

Overview

github.com/google/go-tpm-tools is an Go Modules package that go module: github.com/google/go-tpm-tools. It has 1 known dependents in the graph. The latest version is v0.4.9.

Who should use it

Teams working in the Go Modules ecosystem who need go module: github.com/google/go-tpm-tools and value a focused solution.

When not to use it

Consider an alternative if you need to minimize your dependency tree, or if a more actively-maintained option better fits your Go Modules stack.

Pros

  • Actively published to the registry.

Cons

  • Large dependency tree (17 direct dependencies) increases install size and audit surface.
  • No license detected — review usage terms before adopting.

Auto-generated from collected registry metadata. No external claims are inferred.

Frequently asked questions

Should I use github.com/google/go-tpm-tools?

No — github.com/google/go-tpm-tools should not be adopted for new projects. Depended on by 1 known packages. Pulls in 867 transitive packages (at least — some of the tree is still being crawled). This package lists no maintainer, exposes a 867-package audit surface. No license declared — you have no explicit right to use this code.

How do I install github.com/google/go-tpm-tools?

Run `go get github.com/google/go-tpm-tools` to add github.com/google/go-tpm-tools to your Go Modules project.

How many dependencies does github.com/google/go-tpm-tools have?

github.com/google/go-tpm-tools declares 17 direct dependencies and pulls in 867 packages in total once its runtime tree is resolved.

What license is github.com/google/go-tpm-tools released under?

No license was detected in github.com/google/go-tpm-tools's metadata; review the repository before use.

How popular is github.com/google/go-tpm-tools?

Go Modules does not publish download counts. Within PackageGraph's crawl, 1 known packages depend on github.com/google/go-tpm-tools.

Is github.com/google/go-tpm-tools still maintained?

The most recent release of github.com/google/go-tpm-tools (vv0.4.9) was published 1 month ago.