Is golang.org/x/sync safe to use?

golang.org/x/sync has no known vulnerabilities on the latest version (v0.20.0). DepScope rates its health at 57/100 (high risk).

What is the latest version of golang.org/x/sync?

The latest version of golang.org/x/sync is v0.20.0, released 2026-02-23.

Does golang.org/x/sync have known vulnerabilities?

No known vulnerabilities on the latest version of golang.org/x/sync.

Is golang.org/x/sync deprecated?

No, golang.org/x/sync is actively maintained. Latest release: v0.20.0 (2026-02-23).

What are alternatives to golang.org/x/sync?

DepScope has no curated alternatives for golang.org/x/sync at this time.

What license does golang.org/x/sync use?

golang.org/x/sync is licensed under BSD-3-Clause.

golang.org/x/sync

govv0.20.0

License BSD-3-Clausepermissive20 versions0 deps

golang/sync

/ 100

Health

use with caution

golang.org/x/[email protected] low health (57/100) — consider alternatives

Moderate health score (57/100) — verify manually

Health breakdown0 – 100

20/25

maintenance

0/20

popularity

25/25

security

9/15

maturity

3/15

community

Vulnerabilities

none known

OSS Scorecard

OpenSSF security posture score

3.8/10

weak

Maintainer trust

Active maintainers (3m)

3

Contributors (12m)

9

Primary author dominance

20%

GitHub stars

918

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/go/golang.org/x/sync

Last updated · 2026-02-23T18:54:42Z