23 minutes read
State of EOL
A citable summary of lifecycle risk in Offing's public benchmark corpus: every expected finding at a pinned commit, aggregated by product and release line. The tables below regenerate from the corpus and the last recorded full run; they are a census of that corpus, not a sample of the open-source world.
Findings
Measured on the public corpus of 1618 pinned repositories (10482 expected findings). The last full corpus run was commit dcc9f320 on 2026-11-06 (557 repositories, precision 1, recall 1). Method: Validation. Corpus: benchmarks/public-repositories/. Regenerate with npm run build:coverage after npm run record:corpus-run.
| Measure | Value |
|---|---|
| Repositories | 1618 |
| Expected findings | 10482 |
| Products with findings | 170 |
| Release lines with findings | 246 |
By product
| Product | Findings | Release lines | Repositories |
|---|---|---|---|
| actions/checkout | 2154 | 1 | 584 |
| dockerfile | 965 | 2 | 72 |
| nodejs | 805 | 8 | 209 |
| dotnet | 587 | 10 | 65 |
| terraform | 489 | 4 | 17 |
| actions/upload-artifact | 482 | 1 | 169 |
| actions/setup-node | 308 | 1 | 123 |
| actions/setup-python | 288 | 1 | 119 |
| ruby | 279 | 11 | 71 |
| cmake | 276 | 2 | 30 |
| actions/cache | 275 | 1 | 100 |
| python | 221 | 2 | 140 |
| actions/download-artifact | 189 | 1 | 90 |
| actions/setup-java | 160 | 1 | 70 |
| golang | 156 | 6 | 70 |
| dart | 140 | 3 | 32 |
| library/node | 107 | 2 | 49 |
| powershell | 105 | 5 | 31 |
| softprops/action-gh-release | 105 | 1 | 71 |
| docker/build-push-action | 103 | 1 | 52 |
| docker/login-action | 102 | 1 | 61 |
| library/ubuntu | 99 | 2 | 43 |
| github-actions/set-output | 87 | 1 | 30 |
| android/targetSdk | 80 | 1 | 38 |
| actions/setup-go | 78 | 1 | 25 |
| docker/setup-buildx-action | 77 | 1 | 45 |
| aws-lambda-runtime/nodejs24.x | 74 | 1 | 1 |
| java | 73 | 4 | 22 |
| rust | 65 | 1 | 59 |
| library/python | 60 | 2 | 38 |
| erlang | 58 | 2 | 33 |
| library/alpine | 56 | 1 | 23 |
| xcode | 52 | 2 | 52 |
| sbt | 47 | 1 | 41 |
| actions/github-script | 46 | 1 | 23 |
| azure-pipelines/ubuntu-image | 45 | 2 | 23 |
| docker/setup-qemu-action | 40 | 1 | 29 |
| library/golang | 40 | 1 | 21 |
| deno | 36 | 1 | 35 |
| bun | 35 | 2 | 34 |
| docker/metadata-action | 35 | 1 | 24 |
| library/debian | 34 | 1 | 17 |
| scala | 30 | 2 | 27 |
| elixir | 28 | 2 | 27 |
| kubernetes/extensions/Deployment | 28 | 1 | 9 |
| babel-eslint | 27 | 1 | 26 |
| actions/deploy-pages | 26 | 1 | 26 |
| actions/setup-dotnet | 26 | 1 | 12 |
| atty | 24 | 1 | 23 |
| node-sass | 24 | 2 | 12 |
| php | 24 | 2 | 17 |
| ios | 23 | 1 | 8 |
| aws-lambda-runtime/nodejs14.x | 22 | 1 | 14 |
| library/postgres | 22 | 2 | 15 |
| aws-lambda-runtime/python3.14 | 21 | 1 | 1 |
| next | 21 | 4 | 10 |
| astral-sh/setup-uv | 20 | 1 | 11 |
| kubernetes/extensions/Ingress | 20 | 1 | 14 |
| actions/create-github-app-token | 19 | 1 | 4 |
| postgresql | 18 | 5 | 14 |
| actions/stale | 17 | 1 | 16 |
| @angular/core | 16 | 3 | 5 |
| aws-lambda-runtime/python3.8 | 16 | 1 | 6 |
| azure-pipelines/windows-image | 16 | 1 | 8 |
| library/ruby | 16 | 2 | 10 |
| tempdir | 16 | 1 | 12 |
| kubernetes/rbac.authorization.k8s.io/ClusterRoleBinding | 15 | 1 | 7 |
| swiftmailer/swiftmailer | 15 | 1 | 14 |
| ansi_term | 14 | 1 | 14 |
| doctrine/cache | 14 | 1 | 12 |
| fzaninotto/faker | 14 | 1 | 8 |
| kubernetes/batch/CronJob | 14 | 1 | 6 |
| rails | 14 | 1 | 1 |
| aws-lambda-runtime/provided.al2023 | 12 | 1 | 3 |
| failure | 12 | 1 | 6 |
| helm-repository/stable | 11 | 1 | 4 |
| kubernetes/policy/PodDisruptionBudget | 11 | 1 | 4 |
| actions/configure-pages | 10 | 1 | 10 |
| github.com/golang/protobuf | 10 | 1 | 4 |
| kubernetes/apps/Deployment | 10 | 2 | 3 |
| vue | 10 | 1 | 10 |
| aws-lambda-runtime/nodejs12.x | 9 | 1 | 3 |
| babel-preset-es2015 | 9 | 1 | 9 |
| com.android.billingclient/billing | 9 | 5 | 7 |
| kubernetes/rbac.authorization.k8s.io/ClusterRole | 9 | 1 | 4 |
| kubernetes/storage.k8s.io/StorageClass | 9 | 1 | 3 |
| mysql | 9 | 1 | 6 |
| aws-lambda-runtime/ruby4.0 | 8 | 1 | 1 |
| kubernetes/extensions/DaemonSet | 8 | 1 | 4 |
| kubernetes/policy/PodSecurityPolicy | 8 | 1 | 2 |
| library/redis | 8 | 2 | 4 |
| aws-lambda-runtime/nodejs20.x | 7 | 1 | 6 |
| aws-lambda-runtime/nodejs22.x | 7 | 1 | 3 |
| kubernetes/apiextensions.k8s.io/CustomResourceDefinition | 7 | 1 | 4 |
| kubernetes/autoscaling/HorizontalPodAutoscaler | 6 | 2 | 5 |
| react-native | 6 | 1 | 4 |
| kubernetes/extensions/PodSecurityPolicy | 5 | 1 | 1 |
| kubernetes/rbac.authorization.k8s.io/RoleBinding | 5 | 1 | 3 |
| rollup-plugin-terser | 5 | 1 | 5 |
| django | 4 | 2 | 4 |
| istanbul | 4 | 1 | 4 |
| library/mysql | 4 | 1 | 4 |
| request | 4 | 1 | 4 |
| tslint | 4 | 1 | 4 |
| WindowsAzure.Storage | 4 | 1 | 4 |
| actions/first-interaction | 3 | 1 | 3 |
| actions/labeler | 3 | 1 | 3 |
| aws-lambda-runtime/nodejs16.x | 3 | 1 | 2 |
| aws-lambda-runtime/provided.al2 | 3 | 1 | 2 |
| azure-pipelines/macos-image | 3 | 1 | 3 |
| github-actions/set-env | 3 | 1 | 2 |
| hashicorp/setup-terraform | 3 | 1 | 3 |
| kubernetes/extensions/ReplicaSet | 3 | 1 | 2 |
| kubernetes/networking.k8s.io/Ingress | 3 | 1 | 3 |
| kubernetes/rbac.authorization.k8s.io/Role | 3 | 1 | 3 |
| popper.js | 3 | 1 | 3 |
| redis | 3 | 1 | 3 |
| rollup-plugin-babel | 3 | 1 | 3 |
| aws-lambda-runtime/python3.7 | 2 | 1 | 1 |
| crypto-js | 2 | 1 | 2 |
| github-actions/add-path | 2 | 1 | 1 |
| karma-phantomjs-launcher | 2 | 1 | 2 |
| kubernetes/apiregistration.k8s.io/APIService | 2 | 1 | 1 |
| kubernetes/apps/DaemonSet | 2 | 1 | 2 |
| kubernetes/apps/ReplicaSet | 2 | 1 | 1 |
| kubernetes/apps/StatefulSet | 2 | 1 | 2 |
| laravel/framework | 2 | 1 | 1 |
| protractor | 2 | 1 | 2 |
| pycrypto | 2 | 1 | 2 |
| request-promise | 2 | 1 | 2 |
| sensiolabs/security-checker | 2 | 1 | 1 |
| uglify-es | 2 | 1 | 2 |
| @types/dotenv | 1 | 1 | 1 |
| @types/emoji-regex | 1 | 1 | 1 |
| @types/form-data | 1 | 1 | 1 |
| @types/koa-useragent | 1 | 1 | 1 |
| @types/sanitize-filename | 1 | 1 | 1 |
| @types/socket.io-client | 1 | 1 | 1 |
| amazon-eks | 1 | 1 | 1 |
| aws-lambda-runtime/dotnet10 | 1 | 1 | 1 |
| aws-lambda-runtime/go1.x | 1 | 1 | 1 |
| aws-lambda-runtime/java25 | 1 | 1 | 1 |
| aws-lambda-runtime/nodejs10.x | 1 | 1 | 1 |
| aws-lambda-runtime/nodejs18.x | 1 | 1 | 1 |
| aws-lambda-runtime/python3.13 | 1 | 1 | 1 |
| aws-lambda-runtime/ruby2.7 | 1 | 1 | 1 |
| azure-app-service/node | 1 | 1 | 1 |
| cloud.google.com/go/pubsub | 1 | 1 | 1 |
| domexception | 1 | 1 | 1 |
| google-cloud-functions-runtime/nodejs14 | 1 | 1 | 1 |
| google-cloud-functions-runtime/nodejs20 | 1 | 1 | 1 |
| google-cloud-functions-runtime/python37 | 1 | 1 | 1 |
| google-cloud-sql-mysql | 1 | 1 | 1 |
| gulp-util | 1 | 1 | 1 |
| helm-repository/incubator | 1 | 1 | 1 |
| i18next-parser | 1 | 1 | 1 |
| koa-router | 1 | 1 | 1 |
| kubernetes/admissionregistration.k8s.io/MutatingWebhookConfiguration | 1 | 1 | 1 |
| kubernetes/admissionregistration.k8s.io/ValidatingWebhookConfiguration | 1 | 1 | 1 |
| library/zookeeper | 1 | 1 | 1 |
| lodash.isequal | 1 | 1 | 1 |
| mysql/mysql-connector-java | 1 | 1 | 1 |
| natives | 1 | 1 | 1 |
| nose | 1 | 1 | 1 |
| pytest-runner | 1 | 1 | 1 |
| q | 1 | 1 | 1 |
| react-beautiful-dnd | 1 | 1 | 1 |
| socket.io-redis | 1 | 1 | 1 |
| typing | 1 | 1 | 1 |
| zendframework/zend-stdlib | 1 | 1 | 1 |
By product and release line
| Product | Release line | Rule | Event | Findings | Repositories |
|---|---|---|---|---|---|
| actions/checkout | Unsupported actions/checkout runtime | github-actions.checkout.node20 |
end-of-support | 2154 | 584 |
| dockerfile | The Dockerfile legacy "ENV key value" form is deprecated | container.dockerfile.legacy-env-format |
deprecated | 930 | 63 |
| actions/upload-artifact | Retired actions/upload-artifact release | github-actions.upload-artifact.retired |
removed | 482 | 169 |
| terraform | Interpolation-only strings are deprecated | terraform.syntax.interpolation-only |
deprecated | 409 | 12 |
| actions/setup-node | Unsupported actions/setup-node runtime | github-actions.setup-node.node20 |
end-of-support | 308 | 123 |
| actions/setup-python | Unsupported actions/setup-python runtime | github-actions.setup-python.node20 |
end-of-support | 288 | 119 |
| actions/cache | Unsupported actions/cache runtime | github-actions.cache.node20 |
end-of-support | 275 | 100 |
| cmake | CMake policy versions older than 3.5 are removed | cpp.cmake.policy-below-3.5.removed |
removed | 260 | 29 |
| nodejs | Node.js 20 is end-of-life | nodejs.runtime.eol-20 |
end-of-life | 232 | 115 |
| dotnet | .NET 8 is no longer supported | dotnet.runtime.end-of-support-8.0 |
end-of-support | 203 | 27 |
| nodejs | Node.js 22 reaches end-of-life on 2027-04-30 | nodejs.runtime.eol-22 |
scheduled-end-of-life | 197 | 85 |
| actions/download-artifact | Retired actions/download-artifact release | github-actions.download-artifact.retired |
removed | 189 | 90 |
| python | Python 3.9 and older are end-of-life | python.runtime.eol-3.9-and-older |
end-of-life | 162 | 111 |
| actions/setup-java | Unsupported actions/setup-java runtime | github-actions.setup-java.node20 |
end-of-support | 160 | 70 |
| nodejs | Legacy Node.js runtime is end-of-life | nodejs.runtime.legacy |
end-of-life | 138 | 76 |
| dart | Dart 2 and older no longer receive security updates | dart.sdk.end-of-support-2-and-older |
end-of-support | 131 | 27 |
| nodejs | Node.js 18 is end-of-life | nodejs.runtime.eol-18 |
end-of-life | 131 | 84 |
| ruby | Ruby 2.7 is end-of-life | ruby.runtime.eol-2.7 |
end-of-life | 109 | 24 |
| softprops/action-gh-release | Unsupported softprops/action-gh-release runtime | github-actions.action-gh-release.node20 |
end-of-support | 105 | 71 |
| docker/build-push-action | Unsupported docker/build-push-action runtime | github-actions.build-push-action.node20 |
end-of-support | 103 | 52 |
| docker/login-action | Unsupported docker/login-action runtime | github-actions.login-action.node20 |
end-of-support | 102 | 61 |
| nodejs | Node.js 19 is end-of-life | nodejs.runtime.eol-19 |
end-of-life | 88 | 65 |
| github-actions/set-output | Deprecated GitHub Actions ::set-output command | github-actions.workflow-command.set-output |
deprecated | 87 | 30 |
| library/node | Node.js image release lines 21 and older are end-of-life | container.node.eol-21-and-older |
end-of-life | 87 | 38 |
| ruby | Ruby 3.2 is end-of-life | ruby.runtime.eol-3.2 |
end-of-life | 83 | 18 |
| android/targetSdk | Google Play requires targetSdk 35+ for existing phone and tablet apps | android.target-sdk.existing.default-below-35 |
end-of-support | 80 | 38 |
| actions/setup-go | Unsupported actions/setup-go runtime | github-actions.setup-go.node20 |
end-of-support | 78 | 25 |
| docker/setup-buildx-action | Unsupported docker/setup-buildx-action runtime | github-actions.setup-buildx-action.node20 |
end-of-support | 77 | 45 |
| golang | Go 1.20 and older are no longer supported | go.runtime.end-of-support-1.20-and-older |
end-of-support | 76 | 44 |
| aws-lambda-runtime/nodejs24.x | AWS Lambda Node.js 24 runtime reaches end of life on 2028-04-30 | serverless.aws-lambda.nodejs24.x |
scheduled-end-of-life | 74 | 1 |
| dotnet | .NET 7 is no longer supported | dotnet.runtime.end-of-support-7.0 |
end-of-support | 74 | 11 |
| library/ubuntu | Ubuntu image release lines 20.04 and older are past standard support end-of-life | container.ubuntu.eol-20.04-and-older |
end-of-life | 74 | 33 |
| terraform | The list() and map() functions were removed in Terraform 0.15 | terraform.function.list-map |
removed | 73 | 1 |
| dotnet | .NET 9 is no longer supported | dotnet.runtime.end-of-support-9.0 |
end-of-support | 72 | 8 |
| dotnet | .NET Core 3.1 is no longer supported | dotnet.runtime.end-of-support-3.1 |
end-of-support | 65 | 17 |
| rust | Rust 1.98 and older are no longer supported | rust.toolchain.end-of-support-1.98-and-older |
end-of-support | 65 | 59 |
| python | Python 3.10 and older are end-of-life | python.runtime.eol-3.10-and-older |
end-of-life | 59 | 47 |
| library/alpine | Alpine Linux image release lines 3.20 and older are end-of-life | container.alpine.eol-3.20-and-older |
end-of-life | 56 | 23 |
| powershell | PowerShell 7.0 (LTS) is no longer supported | shell.powershell.end-of-life-7.0 |
end-of-life | 53 | 11 |
| library/python | Python image release lines 3.10 and older are end-of-life | container.python.eol-3.10-and-older |
end-of-life | 52 | 33 |
| dotnet | .NET Core 2.0 is no longer supported | dotnet.runtime.end-of-support-2.0 |
end-of-support | 50 | 4 |
| dotnet | .NET 5 is no longer supported | dotnet.runtime.end-of-support-5.0 |
end-of-support | 50 | 14 |
| dotnet | .NET 6 is no longer supported | dotnet.runtime.end-of-support-6.0 |
end-of-support | 50 | 16 |
| sbt | sbt 0.13 reached end of life | scala.sbt.eol-0.13 |
end-of-life | 47 | 41 |
| actions/github-script | Unsupported actions/github-script runtime | github-actions.github-script.node20 |
end-of-support | 46 | 23 |
| docker/setup-qemu-action | Unsupported docker/setup-qemu-action runtime | github-actions.setup-qemu-action.node20 |
end-of-support | 40 | 29 |
| library/golang | Go image release lines 1.25 and older are end-of-life | container.golang.eol-1.25-and-older |
end-of-life | 40 | 21 |
| deno | Deno 1.x is end-of-life | deno.runtime.eol-1.x |
end-of-life | 36 | 35 |
| docker/metadata-action | Unsupported docker/metadata-action runtime | github-actions.metadata-action.node20 |
end-of-support | 35 | 24 |
| dockerfile | The Dockerfile MAINTAINER instruction is deprecated | container.dockerfile.maintainer |
deprecated | 35 | 17 |
| java | Java 18 to 20 are no longer supported | java.jdk.end-of-support-18-20 |
end-of-support | 35 | 9 |
| library/debian | Debian image release lines 11 and older are end-of-life | container.debian.eol-11-and-older |
end-of-life | 34 | 17 |
| bun | Bun 1.0.x is end-of-life | deno.bun.runtime.eol-1.0 |
end-of-life | 33 | 33 |
| java | Java 12 to 16 are no longer supported | java.jdk.end-of-support-12-16 |
end-of-support | 32 | 8 |
| erlang | Erlang/OTP 26 no longer receives security updates | elixir.erlang.eol-26 |
end-of-life | 31 | 17 |
| golang | Go 1.24 is no longer supported | go.runtime.end-of-support-1.24 |
end-of-support | 30 | 9 |
| powershell | PowerShell 7.2 (LTS) is no longer supported | shell.powershell.end-of-life-7.2 |
end-of-life | 30 | 10 |
| ruby | Ruby 3.1 is end-of-life | ruby.runtime.eol-3.1 |
end-of-life | 30 | 13 |
| xcode | Xcode 15 through 25 are not accepted for App Store uploads | swift.xcode.app-store-15-through-25 |
end-of-support | 29 | 29 |
| kubernetes/extensions/Deployment | Deployment extensions/v1beta1 is no longer served | kubernetes.extensions.deployment.v1beta1.removed |
removed | 28 | 9 |
| scala | Scala 2.11 reached end of life | scala.runtime.eol-2.11 |
end-of-life | 28 | 25 |
| babel-eslint | babel-eslint is deprecated | npm.package.babel-eslint.deprecated |
deprecated | 27 | 26 |
| erlang | Erlang/OTP 25 no longer receives security updates | elixir.erlang.eol-25 |
end-of-life | 27 | 17 |
| actions/deploy-pages | Unsupported actions/deploy-pages runtime | github-actions.deploy-pages.node20 |
end-of-support | 26 | 26 |
| actions/setup-dotnet | Unsupported actions/setup-dotnet runtime | github-actions.setup-dotnet.node20 |
end-of-support | 26 | 12 |
| azure-pipelines/ubuntu-image | Azure Pipelines Ubuntu 20.04 hosted image is retired | ci-images.azure-pipelines.ubuntu-20.04 |
removed | 26 | 15 |
| library/ubuntu | Ubuntu image release line 22.04 reaches standard support end-of-life on 2027-06-01 | container.ubuntu.eol-22.04 |
scheduled-end-of-life | 25 | 12 |
| atty | atty is no longer maintained | rust.crate.atty.unmaintained |
deprecated | 24 | 23 |
| ios | iOS and iPadOS app targets below iOS 13 are not accepted for App Store uploads | swift.app-store.ios-below-13 |
end-of-support | 23 | 8 |
| php | PHP 7.4 is end-of-life | php.runtime.eol-7.4 |
end-of-life | 23 | 16 |
| xcode | Xcode older than 15 is not accepted for App Store uploads | swift.xcode.app-store-below-15 |
end-of-support | 23 | 23 |
| aws-lambda-runtime/nodejs14.x | AWS Lambda Node.js 14 runtime is end-of-life | serverless.aws-lambda.nodejs14.x |
end-of-life | 22 | 14 |
| aws-lambda-runtime/python3.14 | AWS Lambda Python 3.14 runtime reaches end of life on 2029-06-30 | serverless.aws-lambda.python3.14 |
scheduled-end-of-life | 21 | 1 |
| astral-sh/setup-uv | Unsupported astral-sh/setup-uv runtime | github-actions.setup-uv.node20 |
end-of-support | 20 | 11 |
| kubernetes/extensions/Ingress | Ingress extensions/v1beta1 is no longer served | kubernetes.extensions.ingress.v1beta1.removed |
removed | 20 | 14 |
| library/node | Node.js image release line 22 reaches end-of-life on 2027-04-30 | container.node.eol-22-and-older |
scheduled-end-of-life | 20 | 12 |
| actions/create-github-app-token | Unsupported actions/create-github-app-token runtime | github-actions.create-github-app-token.node20 |
end-of-support | 19 | 4 |
| azure-pipelines/ubuntu-image | Azure Pipelines Ubuntu 22.04 hosted image is scheduled for removal | ci-images.azure-pipelines.ubuntu-22.04 |
scheduled-end-of-life | 19 | 10 |
| golang | Go 1.25 is no longer supported | go.runtime.end-of-support-1.25 |
end-of-support | 19 | 12 |
| library/postgres | PostgreSQL image major versions 13 and older are end-of-life | container.postgres.eol-13-and-older |
end-of-life | 18 | 13 |
| actions/stale | Unsupported actions/stale runtime | github-actions.stale.node20 |
end-of-support | 17 | 16 |
| powershell | PowerShell 6.x is no longer supported | shell.powershell.end-of-life-6 |
end-of-life | 17 | 9 |
| aws-lambda-runtime/python3.8 | AWS Lambda Python 3.8 runtime is end-of-life | serverless.aws-lambda.python3.8 |
end-of-life | 16 | 6 |
| azure-pipelines/windows-image | Azure Pipelines Windows Server 2019 hosted image is retired | ci-images.azure-pipelines.windows-2019 |
removed | 16 | 8 |
| cmake | CMake policy versions older than 3.10 are deprecated | cpp.cmake.policy-below-3.10.deprecated |
deprecated | 16 | 5 |
| tempdir | tempdir is no longer maintained | rust.crate.tempdir.unmaintained |
deprecated | 16 | 12 |
| elixir | Elixir 1.15 no longer receives security updates | elixir.runtime.eol-1.15 |
end-of-life | 15 | 15 |
| kubernetes/rbac.authorization.k8s.io/ClusterRoleBinding | ClusterRoleBinding rbac.authorization.k8s.io/v1beta1 is no longer served | kubernetes.rbac-authorization-k8s-io.clusterrolebinding.v1beta1.removed |
removed | 15 | 7 |
| library/ruby | Ruby image release lines 3.2 and older are end-of-life | container.ruby.eol-3.2-and-older |
end-of-life | 15 | 10 |
| swiftmailer/swiftmailer | swiftmailer/swiftmailer is abandoned | php.package.swiftmailer.swiftmailer.abandoned |
deprecated | 15 | 14 |
| ansi_term | ansi_term is no longer maintained | rust.crate.ansi-term.unmaintained |
deprecated | 14 | 14 |
| doctrine/cache | doctrine/cache is abandoned | php.package.doctrine.cache.abandoned |
deprecated | 14 | 12 |
| dotnet | .NET Core 3.0 is no longer supported | dotnet.runtime.end-of-support-3.0 |
end-of-support | 14 | 6 |
| fzaninotto/faker | fzaninotto/faker is abandoned | php.package.fzaninotto.faker.abandoned |
deprecated | 14 | 8 |
| kubernetes/batch/CronJob | CronJob batch/v1beta1 is no longer served | kubernetes.batch.cronjob.v1beta1.removed |
removed | 14 | 6 |
| rails | Rails 8.0 security support is scheduled to end | ruby.gem.rails-8.0.scheduled-end-of-life |
scheduled-end-of-life | 14 | 1 |
| ruby | Ruby 2.0.0 is end-of-life | ruby.runtime.eol-2.0.0 |
end-of-life | 14 | 2 |
| ruby | Ruby 2.6 is end-of-life | ruby.runtime.eol-2.6 |
end-of-life | 14 | 7 |
| elixir | Elixir 1.14 no longer receives security updates | elixir.runtime.eol-1.14 |
end-of-life | 13 | 13 |
| next | Next.js 15 is out of support | npm.package.next.15.support-end |
end-of-support | 13 | 4 |
| @angular/core | @angular/core v20 reaches end of life on 2026-11-28 | npm.package.angular.core.v20.scheduled-end-of-life |
scheduled-end-of-life | 12 | 1 |
| aws-lambda-runtime/provided.al2023 | AWS Lambda OS-only runtime provided.al2023 runtime reaches end of life on 2029-06-30 | serverless.aws-lambda.provided.al2023 |
scheduled-end-of-life | 12 | 3 |
| failure | failure is no longer maintained | rust.crate.failure.unmaintained |
deprecated | 12 | 6 |
| golang | Go 1.22 is no longer supported | go.runtime.end-of-support-1.22 |
end-of-support | 12 | 8 |
| node-sass | node-sass is deprecated | npm.package.node-sass.deprecated |
deprecated | 12 | 12 |
| node-sass | Node Sass is end-of-life | npm.package.node-sass.eol |
end-of-life | 12 | 12 |
| golang | Go 1.23 is no longer supported | go.runtime.end-of-support-1.23 |
end-of-support | 11 | 6 |
| helm-repository/stable | Helm stable chart repository is end of life | kubernetes.helm.repository.stable.end-of-life |
end-of-life | 11 | 4 |
| kubernetes/policy/PodDisruptionBudget | PodDisruptionBudget policy/v1beta1 is no longer served | kubernetes.policy.poddisruptionbudget.v1beta1.removed |
removed | 11 | 4 |
| actions/configure-pages | Unsupported actions/configure-pages runtime | github-actions.configure-pages.node20 |
end-of-support | 10 | 10 |
| github.com/golang/protobuf | github.com/golang/protobuf is deprecated | go.module.github.com.golang.protobuf.deprecated |
deprecated | 10 | 4 |
| ruby | Ruby 2.5 is end-of-life | ruby.runtime.eol-2.5 |
end-of-life | 10 | 6 |
| vue | Vue 2 is end-of-life | npm.package.vue.eol-2 |
end-of-life | 10 | 10 |
| aws-lambda-runtime/nodejs12.x | AWS Lambda Node.js 12 runtime is end-of-life | serverless.aws-lambda.nodejs12.x |
end-of-life | 9 | 3 |
| babel-preset-es2015 | babel-preset-es2015 is deprecated | npm.package.babel-preset-es2015.deprecated |
deprecated | 9 | 9 |
| kubernetes/rbac.authorization.k8s.io/ClusterRole | ClusterRole rbac.authorization.k8s.io/v1beta1 is no longer served | kubernetes.rbac-authorization-k8s-io.clusterrole.v1beta1.removed |
removed | 9 | 4 |
| kubernetes/storage.k8s.io/StorageClass | StorageClass storage.k8s.io/v1beta1 is no longer served | kubernetes.storage-k8s-io.storageclass.v1beta1.removed |
removed | 9 | 3 |
| mysql | MySQL 5.7 is end-of-life | database.mysql.end-of-life-5.7 |
end-of-life | 9 | 6 |
| ruby | Ruby 3.0 is end-of-life | ruby.runtime.eol-3.0 |
end-of-life | 9 | 8 |
| aws-lambda-runtime/ruby4.0 | AWS Lambda Ruby 4.0 runtime reaches end of life on 2029-03-31 | serverless.aws-lambda.ruby4.0 |
scheduled-end-of-life | 8 | 1 |
| dart | Dart 3.8 no longer receives security updates | dart.sdk.end-of-support-3.8 |
end-of-support | 8 | 4 |
| golang | Go 1.21 is no longer supported | go.runtime.end-of-support-1.21 |
end-of-support | 8 | 6 |
| kubernetes/apps/Deployment | Deployment apps/v1beta1 is no longer served | kubernetes.apps.deployment.v1beta1.removed |
removed | 8 | 2 |
| kubernetes/extensions/DaemonSet | DaemonSet extensions/v1beta1 is no longer served | kubernetes.extensions.daemonset.v1beta1.removed |
removed | 8 | 4 |
| kubernetes/policy/PodSecurityPolicy | PodSecurityPolicy policy/v1beta1 is no longer served | kubernetes.policy.podsecuritypolicy.v1beta1.removed |
removed | 8 | 2 |
| library/python | Python image release line 3.11 reaches end-of-life on 2027-10-31 | container.python.eol-3.11-and-older |
scheduled-end-of-life | 8 | 5 |
| nodejs | Node.js 21 is end-of-life | nodejs.runtime.eol-21 |
end-of-life | 8 | 2 |
| nodejs | Node.js 25 is end-of-life | nodejs.runtime.eol-25 |
end-of-life | 8 | 4 |
| aws-lambda-runtime/nodejs20.x | AWS Lambda Node.js 20 runtime is end-of-life | serverless.aws-lambda.nodejs20.x |
end-of-life | 7 | 6 |
| aws-lambda-runtime/nodejs22.x | AWS Lambda Node.js 22 runtime reaches end of life on 2027-04-30 | serverless.aws-lambda.nodejs22.x |
scheduled-end-of-life | 7 | 3 |
| kubernetes/apiextensions.k8s.io/CustomResourceDefinition | CustomResourceDefinition apiextensions.k8s.io/v1beta1 is no longer served | kubernetes.apiextensions-k8s-io.customresourcedefinition.v1beta1.removed |
removed | 7 | 4 |
| library/redis | Redis image release lines 6.0 and older are end-of-life | container.redis.eol-6.0-and-older |
end-of-life | 7 | 3 |
| postgresql | PostgreSQL 13 is no longer a supported major version | database.postgresql.end-of-life-13 |
end-of-life | 7 | 7 |
| react-native | React Native 0.77 through 0.84 are unsupported | npm.package.react-native.0.77-to-0.84.end-of-support |
end-of-support | 6 | 4 |
| ruby | Ruby 2.3 is end-of-life | ruby.runtime.eol-2.3 |
end-of-life | 6 | 3 |
| com.android.billingclient/billing | Google Play Billing Library 8 reaches its new-app and update deadline on 2027-08-31 | android.play-billing.version-8 |
scheduled-end-of-life | 5 | 3 |
| dotnet | .NET Core 2.1 is no longer supported | dotnet.runtime.end-of-support-2.1 |
end-of-support | 5 | 3 |
| kubernetes/extensions/PodSecurityPolicy | PodSecurityPolicy extensions/v1beta1 is no longer served | kubernetes.extensions.podsecuritypolicy.v1beta1.removed |
removed | 5 | 1 |
| kubernetes/rbac.authorization.k8s.io/RoleBinding | RoleBinding rbac.authorization.k8s.io/v1beta1 is no longer served | kubernetes.rbac-authorization-k8s-io.rolebinding.v1beta1.removed |
removed | 5 | 3 |
| next | Next.js 14 is out of support | npm.package.next.14.support-end |
end-of-support | 5 | 4 |
| rollup-plugin-terser | rollup-plugin-terser is deprecated | npm.package.rollup-plugin-terser.deprecated |
deprecated | 5 | 5 |
| dotnet | .NET Core 2.2 is no longer supported | dotnet.runtime.end-of-support-2.2 |
end-of-support | 4 | 2 |
| istanbul | istanbul is deprecated | npm.package.istanbul.deprecated |
deprecated | 4 | 4 |
| java | Java 22 to 24 are no longer supported | java.jdk.end-of-support-22-24 |
end-of-support | 4 | 4 |
| kubernetes/autoscaling/HorizontalPodAutoscaler | HorizontalPodAutoscaler autoscaling/v2beta2 is no longer served | kubernetes.autoscaling.horizontalpodautoscaler.v2beta2.removed |
removed | 4 | 3 |
| library/mysql | MySQL image release lines 8.0 and older are past end-of-life | container.mysql.eol-8.0-and-older |
end-of-life | 4 | 4 |
| library/postgres | PostgreSQL image release line 14 reaches end-of-life on 2026-11-12 | container.postgres.eol-14-and-older |
scheduled-end-of-life | 4 | 4 |
| powershell | PowerShell 7.1 is no longer supported | shell.powershell.end-of-life-7.1 |
end-of-life | 4 | 3 |
| request | request is deprecated | npm.package.request.deprecated |
deprecated | 4 | 4 |
| terraform | Terraform CLI 1.13 is no longer a supported release line | terraform.cli.end-of-support-1.13 |
end-of-support | 4 | 3 |
| tslint | tslint is deprecated | npm.package.tslint.deprecated |
deprecated | 4 | 4 |
| WindowsAzure.Storage | WindowsAzure.Storage is deprecated on NuGet | dotnet.package.windowsazure-storage.deprecated |
deprecated | 4 | 4 |
| actions/first-interaction | Unsupported actions/first-interaction runtime | github-actions.first-interaction.node20 |
end-of-support | 3 | 3 |
| actions/labeler | Unsupported actions/labeler runtime | github-actions.labeler.node20 |
end-of-support | 3 | 3 |
| aws-lambda-runtime/nodejs16.x | AWS Lambda Node.js 16 runtime is end-of-life | serverless.aws-lambda.nodejs16.x |
end-of-life | 3 | 2 |
| aws-lambda-runtime/provided.al2 | AWS Lambda OS-only runtime provided.al2 runtime is end-of-life | serverless.aws-lambda.provided.al2 |
end-of-life | 3 | 2 |
| azure-pipelines/macos-image | Azure Pipelines macOS 14 Sonoma hosted image is scheduled for removal on 2026-11-23 | ci-images.azure-pipelines.macos-14 |
scheduled-end-of-life | 3 | 3 |
| django | Django 4.2 LTS is end-of-life | python.package.django-4.2.eol |
end-of-life | 3 | 3 |
| github-actions/set-env | Removed GitHub Actions ::set-env command | github-actions.workflow-command.set-env |
removed | 3 | 2 |
| hashicorp/setup-terraform | Unsupported hashicorp/setup-terraform runtime | github-actions.setup-terraform.node20 |
end-of-support | 3 | 3 |
| kubernetes/extensions/ReplicaSet | ReplicaSet extensions/v1beta1 is no longer served | kubernetes.extensions.replicaset.v1beta1.removed |
removed | 3 | 2 |
| kubernetes/networking.k8s.io/Ingress | Ingress networking.k8s.io/v1beta1 is no longer served | kubernetes.networking-k8s-io.ingress.v1beta1.removed |
removed | 3 | 3 |
| kubernetes/rbac.authorization.k8s.io/Role | Role rbac.authorization.k8s.io/v1beta1 is no longer served | kubernetes.rbac-authorization-k8s-io.role.v1beta1.removed |
removed | 3 | 3 |
| nodejs | Node.js 23 is end-of-life | nodejs.runtime.eol-23 |
end-of-life | 3 | 3 |
| popper.js | popper.js is deprecated | npm.package.popper.js.deprecated |
deprecated | 3 | 3 |
| postgresql | PostgreSQL 11 is no longer a supported major version | database.postgresql.end-of-life-11 |
end-of-life | 3 | 3 |
| postgresql | PostgreSQL 12 is no longer a supported major version | database.postgresql.end-of-life-12 |
end-of-life | 3 | 3 |
| postgresql | PostgreSQL 14 reaches the end of its support on 2026-11-12 | database.postgresql.end-of-life-14 |
scheduled-end-of-life | 3 | 3 |
| redis | Redis 7.0 is end-of-life | database.redis.end-of-life-7.0 |
end-of-life | 3 | 3 |
| rollup-plugin-babel | rollup-plugin-babel is deprecated | npm.package.rollup-plugin-babel.deprecated |
deprecated | 3 | 3 |
| terraform | Terraform CLI 1.12 is no longer a supported release line | terraform.cli.end-of-support-1.12 |
end-of-support | 3 | 2 |
| @angular/core | @angular/core v18 and older are no longer supported | npm.package.angular.core.v18-and-older.end-of-support |
end-of-support | 2 | 2 |
| @angular/core | @angular/core v19 is no longer supported | npm.package.angular.core.v19.end-of-support |
end-of-support | 2 | 2 |
| aws-lambda-runtime/python3.7 | AWS Lambda Python 3.7 runtime is end-of-life | serverless.aws-lambda.python3.7 |
end-of-life | 2 | 1 |
| bun | Bun 0.x pre-release is end-of-life | deno.bun.runtime.eol-0.x |
end-of-life | 2 | 2 |
| crypto-js | crypto-js is deprecated | npm.package.crypto-js.deprecated |
deprecated | 2 | 2 |
| github-actions/add-path | Removed GitHub Actions ::add-path command | github-actions.workflow-command.add-path |
removed | 2 | 1 |
| java | Java 9 and 10 are no longer supported | java.jdk.end-of-support-9-10 |
end-of-support | 2 | 1 |
| karma-phantomjs-launcher | karma-phantomjs-launcher is deprecated | npm.package.karma-phantomjs-launcher.deprecated |
deprecated | 2 | 2 |
| kubernetes/apiregistration.k8s.io/APIService | APIService apiregistration.k8s.io/v1beta1 is no longer served | kubernetes.apiregistration-k8s-io.apiservice.v1beta1.removed |
removed | 2 | 1 |
| kubernetes/apps/DaemonSet | DaemonSet apps/v1beta2 is no longer served | kubernetes.apps.daemonset.v1beta2.removed |
removed | 2 | 2 |
| kubernetes/apps/Deployment | Deployment apps/v1beta2 is no longer served | kubernetes.apps.deployment.v1beta2.removed |
removed | 2 | 2 |
| kubernetes/apps/ReplicaSet | ReplicaSet apps/v1beta2 is no longer served | kubernetes.apps.replicaset.v1beta2.removed |
removed | 2 | 1 |
| kubernetes/apps/StatefulSet | StatefulSet apps/v1beta1 is no longer served | kubernetes.apps.statefulset.v1beta1.removed |
removed | 2 | 2 |
| kubernetes/autoscaling/HorizontalPodAutoscaler | HorizontalPodAutoscaler autoscaling/v2beta1 is no longer served | kubernetes.autoscaling.horizontalpodautoscaler.v2beta1.removed |
removed | 2 | 2 |
| laravel/framework | Laravel 11 is no longer supported | php.package.laravel.framework-11.end-of-support |
end-of-support | 2 | 1 |
| next | Next.js 12 is out of support | npm.package.next.12.support-end |
end-of-support | 2 | 2 |
| postgresql | PostgreSQL 10 is no longer a supported major version | database.postgresql.end-of-life-10 |
end-of-life | 2 | 2 |
| protractor | Protractor is deprecated | npm.package.protractor.deprecated |
deprecated | 2 | 2 |
| pycrypto | PyCrypto is obsolete and vulnerable | python.package.pycrypto.obsolete |
end-of-life | 2 | 2 |
| request-promise | request-promise is deprecated | npm.package.request-promise.deprecated |
deprecated | 2 | 2 |
| ruby | Ruby 2.1 is end-of-life | ruby.runtime.eol-2.1 |
end-of-life | 2 | 2 |
| scala | Scala 3.0–3.2 no longer receive patches | scala.runtime.eos-3.0-3.2 |
end-of-support | 2 | 2 |
| sensiolabs/security-checker | sensiolabs/security-checker is abandoned | php.package.sensiolabs.security-checker.abandoned |
deprecated | 2 | 1 |
| uglify-es | uglify-es is deprecated | npm.package.uglify-es.deprecated |
deprecated | 2 | 2 |
| @types/dotenv | @types/dotenv is deprecated | npm.package.types.dotenv.deprecated |
deprecated | 1 | 1 |
| @types/emoji-regex | @types/emoji-regex is deprecated | npm.package.types.emoji-regex.deprecated |
deprecated | 1 | 1 |
| @types/form-data | @types/form-data is deprecated | npm.package.types.form-data.deprecated |
deprecated | 1 | 1 |
| @types/koa-useragent | @types/koa-useragent is deprecated | npm.package.types.koa-useragent.deprecated |
deprecated | 1 | 1 |
| @types/sanitize-filename | @types/sanitize-filename is deprecated | npm.package.types.sanitize-filename.deprecated |
deprecated | 1 | 1 |
| @types/socket.io-client | @types/socket.io-client is deprecated | npm.package.types.socket.io-client.deprecated |
deprecated | 1 | 1 |
| amazon-eks | Amazon EKS 1.30 and earlier are past end of extended support | terraform.eks.end-of-life-1.30-and-older |
end-of-life | 1 | 1 |
| aws-lambda-runtime/dotnet10 | AWS Lambda .NET 10 runtime reaches end of life on 2028-11-14 | serverless.aws-lambda.dotnet10 |
scheduled-end-of-life | 1 | 1 |
| aws-lambda-runtime/go1.x | AWS Lambda Go 1.x runtime is end-of-life | serverless.aws-lambda.go1.x |
end-of-life | 1 | 1 |
| aws-lambda-runtime/java25 | AWS Lambda Java 25 runtime reaches end of life on 2029-06-30 | serverless.aws-lambda.java25 |
scheduled-end-of-life | 1 | 1 |
| aws-lambda-runtime/nodejs10.x | AWS Lambda Node.js 10 runtime is end-of-life | serverless.aws-lambda.nodejs10.x |
end-of-life | 1 | 1 |
| aws-lambda-runtime/nodejs18.x | AWS Lambda Node.js 18 runtime is end-of-life | serverless.aws-lambda.nodejs18.x |
end-of-life | 1 | 1 |
| aws-lambda-runtime/python3.13 | AWS Lambda Python 3.13 runtime reaches end of life on 2029-06-30 | serverless.aws-lambda.python3.13 |
scheduled-end-of-life | 1 | 1 |
| aws-lambda-runtime/ruby2.7 | AWS Lambda Ruby 2.7 runtime is end-of-life | serverless.aws-lambda.ruby2.7 |
end-of-life | 1 | 1 |
| azure-app-service/node | App Service Node.js stacks older than 18 are no longer supported | serverless.azure-app-service.node-below-18 |
end-of-life | 1 | 1 |
| cloud.google.com/go/pubsub | cloud.google.com/go/pubsub is deprecated | go.module.cloud.google.com.go.pubsub.deprecated |
deprecated | 1 | 1 |
| com.android.billingclient/billing | Google Play Billing Library 5 is past its deprecation deadline | android.play-billing.version-5 |
deprecated | 1 | 1 |
| com.android.billingclient/billing | Google Play Billing Library 6 is past its deprecation deadline | android.play-billing.version-6 |
deprecated | 1 | 1 |
| com.android.billingclient/billing | Google Play Billing Library 7 is past its deprecation deadline | android.play-billing.version-7 |
deprecated | 1 | 1 |
| com.android.billingclient/billing | Google Play Billing Library 9 reaches its new-app and update deadline on 2028-08-31 | android.play-billing.version-9 |
scheduled-end-of-life | 1 | 1 |
| dart | Dart 3.11 no longer receives security updates | dart.sdk.end-of-support-3.11 |
end-of-support | 1 | 1 |
| django | Django 2.2 LTS is end-of-life | python.package.django-2.2.eol |
end-of-life | 1 | 1 |
| domexception | domexception is deprecated | npm.package.domexception.deprecated |
deprecated | 1 | 1 |
| google-cloud-functions-runtime/nodejs14 | Google Cloud Functions Node.js 14 runtime is end-of-life | serverless.google-cloud-functions.nodejs14 |
end-of-life | 1 | 1 |
| google-cloud-functions-runtime/nodejs20 | Google Cloud Functions Node.js 20 runtime is end-of-life | serverless.google-cloud-functions.nodejs20 |
end-of-life | 1 | 1 |
| google-cloud-functions-runtime/python37 | Google Cloud Functions Python 3.7 runtime is end-of-life | serverless.google-cloud-functions.python37 |
end-of-life | 1 | 1 |
| google-cloud-sql-mysql | Cloud SQL for MySQL 5.6 and 5.7 are in extended support | database.google-cloud-sql-mysql.extended-support-5.6-to-5.7 |
end-of-support | 1 | 1 |
| gulp-util | gulp-util is deprecated | npm.package.gulp-util.deprecated |
deprecated | 1 | 1 |
| helm-repository/incubator | Helm incubator chart repository is end of life | kubernetes.helm.repository.incubator.end-of-life |
end-of-life | 1 | 1 |
| i18next-parser | i18next-parser is deprecated | npm.package.i18next-parser.deprecated |
deprecated | 1 | 1 |
| koa-router | koa-router is deprecated | npm.package.koa-router.deprecated |
deprecated | 1 | 1 |
| kubernetes/admissionregistration.k8s.io/MutatingWebhookConfiguration | MutatingWebhookConfiguration admissionregistration.k8s.io/v1beta1 is no longer served | kubernetes.admissionregistration-k8s-io.mutatingwebhookconfiguration.v1beta1.removed |
removed | 1 | 1 |
| kubernetes/admissionregistration.k8s.io/ValidatingWebhookConfiguration | ValidatingWebhookConfiguration admissionregistration.k8s.io/v1beta1 is no longer served | kubernetes.admissionregistration-k8s-io.validatingwebhookconfiguration.v1beta1.removed |
removed | 1 | 1 |
| library/redis | Redis image release line 6.2 reaches end-of-life on 2027-04-01 | container.redis.eol-6.2-and-older |
scheduled-end-of-life | 1 | 1 |
| library/ruby | Ruby image release line 3.3 reaches end-of-life on 2027-03-31 | container.ruby.eol-3.3-and-older |
scheduled-end-of-life | 1 | 1 |
| library/zookeeper | Apache ZooKeeper image release lines 3.7 and older are end-of-life | container.zookeeper.eol-3.7-and-older |
end-of-life | 1 | 1 |
| lodash.isequal | lodash.isequal is deprecated | npm.package.lodash-isequal.deprecated |
deprecated | 1 | 1 |
| mysql/mysql-connector-java | mysql has moved to com.mysql | java.maven.mysql.mysql-connector-java.relocated |
deprecated | 1 | 1 |
| natives | natives is deprecated | npm.package.natives.deprecated |
deprecated | 1 | 1 |
| next | Next.js 13 is out of support | npm.package.next.13.support-end |
end-of-support | 1 | 1 |
| nose | nose is maintenance-only | python.package.nose.maintenance-only |
deprecated | 1 | 1 |
| php | PHP 7.3 is end-of-life | php.runtime.eol-7.3 |
end-of-life | 1 | 1 |
| powershell | PowerShell 7.3 is no longer supported | shell.powershell.end-of-life-7.3 |
end-of-life | 1 | 1 |
| pytest-runner | pytest-runner is deprecated | python.package.pytest-runner.deprecated |
deprecated | 1 | 1 |
| q | q is deprecated | npm.package.q.deprecated |
deprecated | 1 | 1 |
| react-beautiful-dnd | react-beautiful-dnd is deprecated | npm.package.react-beautiful-dnd.deprecated |
deprecated | 1 | 1 |
| ruby | Ruby 2.2 is end-of-life | ruby.runtime.eol-2.2 |
end-of-life | 1 | 1 |
| ruby | Ruby 2.4 is end-of-life | ruby.runtime.eol-2.4 |
end-of-life | 1 | 1 |
| socket.io-redis | socket.io-redis is deprecated | npm.package.socket.io-redis.deprecated |
deprecated | 1 | 1 |
| typing | typing is archived on PyPI | python.package.typing.archived |
end-of-life | 1 | 1 |
| zendframework/zend-stdlib | zendframework/zend-stdlib is abandoned | php.package.zendframework.zend-stdlib.abandoned |
deprecated | 1 | 1 |
Limits
Counts come from expected findings in benchmarks/public-repositories/, joined to bundled rules in registry/. Scans never use the network. A product with no corpus finding does not appear here.