Is sigs.k8s.io/krew safe to use?

sigs.k8s.io/krew has no known vulnerabilities on the latest version (v0.5.0). DepScope rates its health at 54/100 (high risk).

What is the latest version of sigs.k8s.io/krew?

The latest version of sigs.k8s.io/krew is v0.5.0, released 2026-02-26.

No known vulnerabilities on the latest version of sigs.k8s.io/krew.

No, sigs.k8s.io/krew is actively maintained. Latest release: v0.5.0 (2026-02-26).

DepScope has no curated alternatives for sigs.k8s.io/krew at this time.

sigs.k8s.io/krew is licensed under Apache-2.0.

govv0.5.0

License Apache-2.0permissive18 versions0 deps

/ 100

Health

use with caution

sigs.k8s.io/[email protected] low health (54/100) — consider alternatives

Health breakdown0 – 100

20/25

maintenance

0/20

popularity

25/25

security

9/15

maturity

0/15

community

Vulnerabilities

none known

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/go/sigs.k8s.io/krew

Last updated · 2026-02-26T01:15:32Z