</>PackageGraphPackageGraph

github.com/google/trillian

Go Modulesvv1.7.3

Go module: github.com/google/trillian

Not recommended for new projects

No — github.com/google/trillian should not be adopted for new projects. Depended on by 1 known packages. Pulls in 1366 transitive packages (at least — some of the tree is still being crawled). This package lists no maintainer, exposes a 1366-package audit surface. No license declared — you have no explicit right to use this code.

  • CAdoption: grade C, Fair — worth a look.

    Depended on by 1 known packages.

  • BMaintenance: grade B, Good.

    Last published 163 days ago. 4 releases in the last 2 years.

  • FWeight: grade F, Failing.

    Pulls in 1366 transitive packages (at least — some of the tree is still being crawled).

  • DSupply chain: grade D, Poor — a real concern.

    This package lists no maintainer, exposes a 1366-package audit surface.

  • FLicense: grade F, Failing.

    No license declared — you have no explicit right to use this code.

Grades are computed deterministically from registry metadata collected by PackageGraph — downloads, dependents, publish dates, the resolved dependency tree, maintainer count, and declared licenses. No third-party scores are used.

Install cost

What you actually take on by adding github.com/google/trillian to a project.

207
Direct dependencies

Runtime packages this one declares itself.

1.4K
Total installed

Distinct packages in the full runtime tree, deduplicated the way a package manager would.

6
Tree depth

Longest resolved dependency chain below this package.

Part of this dependency tree has not been crawled yet, so these figures are a lower bound rather than a final total.

Compatibility

Go
No constraint declared

Dependencies

Declared by github.com/google/trillian vv1.7.3. Runtime dependencies are installed with the package; dev dependencies are not.

Runtime (207)

bitbucket.org/creachadair/shell v0.0.9cel.dev/expr v0.25.1cloud.google.com/go v0.123.0cloud.google.com/go/auth v0.18.2cloud.google.com/go/auth/oauth2adapt v0.2.8cloud.google.com/go/compute/metadata v0.9.0cloud.google.com/go/iam v1.5.3cloud.google.com/go/longrunning v0.8.0cloud.google.com/go/monitoring v1.24.3cloud.google.com/go/profiler v0.4.3cloud.google.com/go/spanner v1.89.0cloud.google.com/go/storage v1.58.0cloud.google.com/go/trace v1.11.7contrib.go.opencensus.io/exporter/stackdriver v0.13.14filippo.io/edwards25519 v1.1.1github.com/GoogleCloudPlatform/grpc-gcp-go/grpcgcp v1.6.0github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.30.0github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric v0.54.0github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping v0.54.0github.com/Masterminds/goutils v1.1.1github.com/Masterminds/semver v1.5.0github.com/Masterminds/sprig v2.22.0+incompatiblegithub.com/Microsoft/go-winio v0.6.2github.com/VividCortex/ewma v1.2.0github.com/apache/beam/sdks/v2 v2.71.0github.com/avast/retry-go/v4 v4.7.0github.com/aws/aws-sdk-go v1.55.5github.com/beorn7/perks v1.0.1github.com/bgentry/speakeasy v0.2.0github.com/bufbuild/protocompile v0.14.1github.com/cenkalti/backoff/v4 v4.3.0github.com/census-instrumentation/opencensus-proto v0.4.1github.com/cespare/xxhash/v2 v2.3.0github.com/cheggaaa/pb/v3 v3.1.6github.com/cncf/xds/go v0.0.0-20251210132809-ee656c7534f5github.com/cockroachdb/cockroach-go/v2 v2.4.3github.com/containerd/errdefs v1.0.0github.com/containerd/errdefs/pkg v0.3.0github.com/coreos/go-semver v0.3.1github.com/coreos/go-systemd/v22 v22.5.0github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33ccgithub.com/distribution/reference v0.6.0github.com/docker/docker v28.5.2+incompatiblegithub.com/docker/go-connections v0.6.0github.com/docker/go-units v0.5.0github.com/dustin/go-humanize v1.0.1github.com/emicklei/go-restful/v3 v3.12.2github.com/envoyproxy/go-control-plane/envoy v1.36.0github.com/envoyproxy/protoc-gen-validate v1.3.0github.com/fatih/color v1.18.0github.com/felixge/httpsnoop v1.0.4github.com/fullstorydev/grpcurl v1.9.3github.com/fxamacker/cbor/v2 v2.9.0github.com/go-jose/go-jose/v4 v4.1.3github.com/go-logr/logr v1.4.3github.com/go-logr/stdr v1.2.2github.com/go-openapi/jsonpointer v0.21.0github.com/go-openapi/jsonreference v0.20.4github.com/go-openapi/swag v0.23.0github.com/go-redis/redis v6.15.9+incompatiblegithub.com/go-sql-driver/mysql v1.9.3github.com/gofrs/flock v0.12.1github.com/gogo/protobuf v1.3.2github.com/golang-cz/devslog v0.0.15github.com/golang-jwt/jwt/v5 v5.2.2github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8github.com/golang/mock v1.7.0-rc.1github.com/golang/protobuf v1.5.4github.com/google/btree v1.1.3github.com/google/gnostic-models v0.7.0github.com/google/go-cmp v0.7.0github.com/google/go-licenses/v2 v2.0.1github.com/google/licenseclassifier/v2 v2.0.0github.com/google/pprof v0.0.0-20250602020802-c6617b811d0egithub.com/google/s2a-go v0.1.9github.com/google/uuid v1.6.0github.com/googleapis/enterprise-certificate-proxy v0.3.14github.com/googleapis/gax-go/v2 v2.18.0github.com/gorilla/websocket v1.5.4-0.20250319132907-e064f32e3674github.com/grpc-ecosystem/go-grpc-middleware v1.4.0github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus v1.0.1github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.1.0github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.1github.com/huandu/xstrings v1.2.0github.com/imdario/mergo v0.3.16github.com/inconshreveable/mousetrap v1.1.0github.com/jackc/chunkreader/v2 v2.0.1github.com/jackc/pgconn v1.14.3github.com/jackc/pgerrcode v0.0.0-20240316143900-6e2875d9b438github.com/jackc/pgio v1.0.0github.com/jackc/pgpassfile v1.0.0github.com/jackc/pgproto3/v2 v2.3.3github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761github.com/jackc/pgtype v1.14.3github.com/jackc/pgx/v4 v4.18.3github.com/jackc/pgx/v5 v5.9.1github.com/jackc/puddle/v2 v2.2.2github.com/jhump/protoreflect v1.17.0github.com/jmespath/go-jmespath v0.4.1-0.20220621161143-b0104c826a24github.com/jonboulle/clockwork v0.5.0github.com/josharian/intern v1.0.0github.com/json-iterator/go v1.1.12github.com/letsencrypt/pkcs11key/v4 v4.0.0github.com/lib/pq v1.12.0github.com/mailru/easyjson v0.7.7github.com/mattn/go-colorable v0.1.14github.com/mattn/go-isatty v0.0.20github.com/mattn/go-runewidth v0.0.16github.com/miekg/pkcs11 v1.1.1github.com/mitchellh/copystructure v1.0.0github.com/mitchellh/reflectwalk v1.0.1github.com/moby/docker-image-spec v1.3.1github.com/moby/sys/atomicwriter v0.1.0github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1ddgithub.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31eegithub.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822github.com/mwitkow/go-proto-validators v0.2.0github.com/olekukonko/tablewriter v0.0.5github.com/onsi/ginkgo v1.16.5github.com/opencontainers/go-digest v1.0.0github.com/opencontainers/image-spec v1.1.1github.com/otiai10/copy v1.14.0github.com/pkg/errors v0.9.1github.com/planetscale/vtprotobuf v0.6.1-0.20240319094008-0393e58bdf10github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2github.com/prometheus/client_golang v1.23.2github.com/prometheus/client_model v0.6.2github.com/prometheus/common v0.66.1github.com/prometheus/procfs v0.16.1github.com/prometheus/prometheus v0.51.0github.com/pseudomuto/protoc-gen-doc v1.5.1github.com/pseudomuto/protokit v0.2.0github.com/rivo/uniseg v0.4.7github.com/sergi/go-diff v1.3.1github.com/sirupsen/logrus v1.9.3github.com/soheilhy/cmux v0.1.5github.com/spf13/cobra v1.10.2github.com/spf13/pflag v1.0.10github.com/spiffe/go-spiffe/v2 v2.6.0github.com/stretchr/testify v1.11.1github.com/tmc/grpc-websocket-proxy v0.0.0-20220101234140-673ab2c3ae75github.com/transparency-dev/merkle v0.0.2github.com/x448/float16 v0.8.4github.com/xiang90/probing v0.0.0-20221125231312-a49e3df8f510go.etcd.io/bbolt v1.4.3go.etcd.io/etcd/api/v3 v3.6.9go.etcd.io/etcd/client/pkg/v3 v3.6.9go.etcd.io/etcd/client/v3 v3.6.9go.etcd.io/etcd/etcdctl/v3 v3.6.9go.etcd.io/etcd/etcdutl/v3 v3.6.9go.etcd.io/etcd/pkg/v3 v3.6.9go.etcd.io/etcd/server/v3 v3.6.9go.etcd.io/etcd/tests/v3 v3.6.9go.etcd.io/etcd/v3 v3.6.9go.etcd.io/gofail v0.2.0go.etcd.io/raft/v3 v3.6.0go.opencensus.io v0.24.0go.opentelemetry.io/auto/sdk v1.2.1go.opentelemetry.io/contrib/detectors/gcp v1.39.0go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.63.0go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.61.0go.opentelemetry.io/otel v1.42.0go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.34.0go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.34.0go.opentelemetry.io/otel/metric v1.42.0go.opentelemetry.io/otel/sdk v1.42.0go.opentelemetry.io/otel/sdk/metric v1.42.0go.opentelemetry.io/otel/trace v1.42.0go.opentelemetry.io/proto/otlp v1.7.1go.uber.org/multierr v1.11.0go.uber.org/zap v1.27.0go.yaml.in/yaml/v2 v2.4.3go.yaml.in/yaml/v3 v3.0.4golang.org/x/crypto v0.49.0golang.org/x/exp v0.0.0-20250106191152-7588d65b2ba8golang.org/x/mod v0.34.0golang.org/x/net v0.52.0golang.org/x/oauth2 v0.36.0golang.org/x/sync v0.20.0golang.org/x/sys v0.42.0golang.org/x/telemetry v0.0.0-20260311193753-579e4da9a98cgolang.org/x/term v0.41.0golang.org/x/text v0.35.0golang.org/x/time v0.15.0golang.org/x/tools v0.43.0google.golang.org/api v0.272.0google.golang.org/genproto v0.0.0-20260217215200-42d3e9bedb6dgoogle.golang.org/genproto/googleapis/api v0.0.0-20260316180232-0b37fe3546d5google.golang.org/genproto/googleapis/rpc v0.0.0-20260316180232-0b37fe3546d5google.golang.org/grpc v1.79.3google.golang.org/grpc/cmd/protoc-gen-go-grpc v1.6.1google.golang.org/protobuf v1.36.11gopkg.in/evanphx/json-patch.v4 v4.13.0gopkg.in/inf.v0 v0.9.1gopkg.in/natefinch/lumberjack.v2 v2.2.1gopkg.in/yaml.v2 v2.4.0gopkg.in/yaml.v3 v3.0.1k8s.io/api v0.35.3k8s.io/apimachinery v0.35.3k8s.io/client-go v0.35.3k8s.io/klog/v2 v2.140.0k8s.io/kube-openapi v0.0.0-20250910181357-589584f1c912k8s.io/utils v0.0.0-20251002143259-bc988d571ff4sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730sigs.k8s.io/randfill v1.0.0sigs.k8s.io/structured-merge-diff/v6 v6.3.0sigs.k8s.io/yaml v1.6.0

Used by

Popular packages that depend on github.com/google/trillian.

Relationship graph

Dependencies (left) and dependents (right) of github.com/google/trillian.

Frequently installed together

Release history

3 releases in the last two years, typically about 106 days apart.

Recent versions of github.com/google/trillian
VersionPublishedLicense
v1.7.3latest5 months ago
v1.7.21 year ago
v1.7.11 year ago
v1.7.01 year ago
v1.6.12 years ago
v1.6.02 years ago
v1.5.32 years ago
v1.5.23 years ago
v1.5.13 years ago
v1.5.04 years ago
v1.4.24 years ago
v1.4.14 years ago
v1.4.05 years ago
v1.3.135 years ago
v1.3.125 years ago

Overview

github.com/google/trillian is an Go Modules package that go module: github.com/google/trillian. It has 1 known dependents in the graph. The latest version is v1.7.3.

Who should use it

Teams working in the Go Modules ecosystem who need go module: github.com/google/trillian and value a focused solution.

When not to use it

Consider an alternative if you need to minimize your dependency tree, or if a more actively-maintained option better fits your Go Modules stack.

Pros

  • Actively published to the registry.

Cons

  • Large dependency tree (207 direct dependencies) increases install size and audit surface.
  • No license detected — review usage terms before adopting.

Auto-generated from collected registry metadata. No external claims are inferred.

Frequently asked questions

Should I use github.com/google/trillian?

No — github.com/google/trillian should not be adopted for new projects. Depended on by 1 known packages. Pulls in 1366 transitive packages (at least — some of the tree is still being crawled). This package lists no maintainer, exposes a 1366-package audit surface. No license declared — you have no explicit right to use this code.

How do I install github.com/google/trillian?

Run `go get github.com/google/trillian` to add github.com/google/trillian to your Go Modules project.

How many dependencies does github.com/google/trillian have?

github.com/google/trillian declares 207 direct dependencies and pulls in 1366 packages in total once its runtime tree is resolved.

What license is github.com/google/trillian released under?

No license was detected in github.com/google/trillian's metadata; review the repository before use.

How popular is github.com/google/trillian?

Go Modules does not publish download counts. Within PackageGraph's crawl, 1 known packages depend on github.com/google/trillian.

Is github.com/google/trillian still maintained?

The most recent release of github.com/google/trillian (vv1.7.3) was published 5 months ago.