Package reports

Go vendoring declaration drift

Compare go.mod JSON requirements and replacements with vendor/modules.txt.

Your inputs

Start with an example

Your inputs stay in your browser.

Your result

Example result

How it works

Match exact required module/version pairs with explicit annotations, including indirect requirements. Compare every declared replacement and recorded target, preserving source line numbers and package counts.

Both example requirements have matching explicit annotations, including the indirect b/v2 entry. Its unknown annotation is retained as reserved metadata.

Limits

Single-module Go 1.14+ declarations, modeled from Go 1.25 source with structural checks and per-record target comparison. Up to 10000 headers and 50000 package rows. Unescaped ASCII paths and semantic module versions only. No workspace, local filesystem/main-module replacements, file-byte checks, executing-toolchain test or buildability verdict.