Historical public dependency inventory

The public summary as JSON. These are the same reviewed fields shown in Read.

{
  "schemaVersion": 1,
  "publicSummaryVersion": "2026-09-30",
  "classification": "PUBLIC",
  "title": "Historical public dependency inventory",
  "summary": "This inventory lists Go modules and recorded versions for release v0.1.3. It provides dependency transparency; it is not a certified software bill of materials, a vulnerability assessment or evidence about the dependencies in the current deployment. The inventory does not record a collection date. Its scope remains the named historical release. A newer inventory would describe a different release and is not represented by this record.",
  "date": "No single overall test date recorded; see individual results.",
  "scope": "Historical evidence; the scope and environment are described in the recorded result.",
  "result": "This inventory lists Go modules and recorded versions for release v0.1.3. It provides dependency transparency; it is not a certified software bill of materials, a vulnerability assessment or evidence about the dependencies in the current deployment. The inventory does not record a collection date. Its scope remains the named historical release. A newer inventory would describe a different release and is not represented by this record.",
  "sections": [
    {
      "title": "Complete historical dependency inventory",
      "items": [
        {
          "id": "dependency-1",
          "title": "keepstate.ai/ks",
          "text": "Version not recorded"
        },
        {
          "id": "dependency-2",
          "title": "[redacted-host]/dustin/go-humanize",
          "text": "v1.0.1"
        },
        {
          "id": "dependency-3",
          "title": "[redacted-host]/google/pprof",
          "text": "v0.0.0-20240409012703-83162a5b38cd"
        },
        {
          "id": "dependency-4",
          "title": "[redacted-host]/google/uuid",
          "text": "v1.6.0"
        },
        {
          "id": "dependency-5",
          "title": "[redacted-host]/klauspost/compress",
          "text": "v1.19.1"
        },
        {
          "id": "dependency-6",
          "title": "[redacted-host]/mattn/go-isatty",
          "text": "v0.0.20"
        },
        {
          "id": "dependency-7",
          "title": "[redacted-host]/ncruces/go-strftime",
          "text": "v0.1.9"
        },
        {
          "id": "dependency-8",
          "title": "[redacted-host]/remyoudompheng/bigfft",
          "text": "v0.0.0-20230129092748-24d4a6f8daec"
        },
        {
          "id": "dependency-9",
          "title": "golang.org/x/mod",
          "text": "v0.16.0"
        },
        {
          "id": "dependency-10",
          "title": "golang.org/x/sys",
          "text": "v0.22.0"
        },
        {
          "id": "dependency-11",
          "title": "golang.org/x/tools",
          "text": "v0.19.0"
        },
        {
          "id": "dependency-12",
          "title": "modernc.org/cc/v4",
          "text": "v4.21.4"
        },
        {
          "id": "dependency-13",
          "title": "modernc.org/ccgo/v4",
          "text": "v4.19.2"
        },
        {
          "id": "dependency-14",
          "title": "modernc.org/fileutil",
          "text": "v1.3.0"
        },
        {
          "id": "dependency-15",
          "title": "modernc.org/gc/v2",
          "text": "v2.4.1"
        },
        {
          "id": "dependency-16",
          "title": "modernc.org/libc",
          "text": "v1.55.3"
        },
        {
          "id": "dependency-17",
          "title": "modernc.org/mathutil",
          "text": "v1.6.0"
        },
        {
          "id": "dependency-18",
          "title": "modernc.org/memory",
          "text": "v1.8.0"
        },
        {
          "id": "dependency-19",
          "title": "modernc.org/opt",
          "text": "v0.1.3"
        },
        {
          "id": "dependency-20",
          "title": "modernc.org/sortutil",
          "text": "v1.2.0"
        },
        {
          "id": "dependency-21",
          "title": "modernc.org/sqlite",
          "text": "v1.34.5"
        },
        {
          "id": "dependency-22",
          "title": "modernc.org/strutil",
          "text": "v1.2.0"
        },
        {
          "id": "dependency-23",
          "title": "modernc.org/token",
          "text": "v1.1.0"
        }
      ]
    },
    {
      "title": "Retained public inventory and provenance",
      "items": [
        {
          "id": "retained-inventory",
          "title": "The unchanged reviewed public JSON",
          "text": "Go module inventory for v0.1.3; an honest dependency list, not a certified SBOM. It does not establish the dependency versions of the current deployment.",
          "href": "/evidence/f/e0391f19ffc6c23a/module-inventory-public.json"
        },
        {
          "id": "inventory-derivation",
          "title": "Derivation record",
          "text": "Derived from module-inventory.json. Original inventory SHA-256: 9d9e9168a23ccc8fa360f7ceac426bbbe6481cde31a68392edb66eae1c02bd35."
        }
      ]
    },
    {
      "title": "Host-name redaction history",
      "items": [
        {
          "id": "inventory-redaction-1",
          "title": "modules.1.path",
          "text": "module host string removed under the hosted-only ruling; owner/name, version, and hash identify the module"
        },
        {
          "id": "inventory-redaction-2",
          "title": "modules.2.path",
          "text": "module host string removed under the hosted-only ruling; owner/name, version, and hash identify the module"
        },
        {
          "id": "inventory-redaction-3",
          "title": "modules.3.path",
          "text": "module host string removed under the hosted-only ruling; owner/name, version, and hash identify the module"
        },
        {
          "id": "inventory-redaction-4",
          "title": "modules.4.path",
          "text": "module host string removed under the hosted-only ruling; owner/name, version, and hash identify the module"
        },
        {
          "id": "inventory-redaction-5",
          "title": "modules.5.path",
          "text": "module host string removed under the hosted-only ruling; owner/name, version, and hash identify the module"
        },
        {
          "id": "inventory-redaction-6",
          "title": "modules.6.path",
          "text": "module host string removed under the hosted-only ruling; owner/name, version, and hash identify the module"
        },
        {
          "id": "inventory-redaction-7",
          "title": "modules.7.path",
          "text": "module host string removed under the hosted-only ruling; owner/name, version, and hash identify the module"
        }
      ]
    }
  ],
  "currentDeployment": "Not independently verified by this historical evidence.",
  "canonical": "/evidence/module-inventory-public"
}

Download this public summary

This derivative has its own digest. It is not the original transcript or a new test. Historical original records are preserved privately.

Download public JSON →

SHA-256 aae6815f67b8762e570ac9cdd8552e0a86fdd005dce6e8d8c46358a85204a326