{
  "spec": {
    "pinnedModules": {
      "github.com/libopenstorage/openstorage": {
        "Version": "v1.0.0",
        "Reason": "portworx csi driver has been deprecated and will be removed - https://github.com/kubernetes/enhancements/issues/2589"
      }
    },
    "unwantedModules": {
      "cloud.google.com/go": "cloud dependency",
      "cloud.google.com/go/bigquery": "cloud dependency",
      "cloud.google.com/go/compute": "cloud dependency",
      "cloud.google.com/go/firestore": "db/datastore clients should not be required",
      "cloud.google.com/go/storage": "cloud dependency",
      "dario.cat/mergo": "see https://github.com/kubernetes/kubernetes/issues/107499",
      "github.com/GoogleCloudPlatform/k8s-cloud-provider": "cloud dependency",
      "github.com/PuerkitoBio/urlesc": "unmaintained, archive mode",
      "github.com/armon/consul-api": "MPL license not in CNCF allowlist",
      "github.com/asaskevich/govalidator": "see https://github.com/kubernetes/kubernetes/issues/128573",
      "github.com/bketelsen/crypt": "unused, crypto",
      "github.com/containerd/cgroups": "standardize on single cgroups library from runc, refer #128157",
      "github.com/davecgh/go-spew": "refer to #103942",
      "github.com/evanphx/json-patch/v5": "refer to https://github.com/kubernetes/kubernetes/pull/91622#issuecomment-637087847",
      "github.com/form3tech-oss/jwt-go": "unmaintained, archive mode",
      "github.com/getsentry/raven-go": "unmaintained, archive mode",
      "github.com/go-bindata/go-bindata": "refer to #99829",
      "github.com/go-kit/kit": "lots of transitive dependencies, see https://github.com/prometheus/common/issues/255",
      "github.com/go-openapi/analysis": "use k8s.io/kube-openapi/pkg/validation/spec",
      "github.com/go-openapi/spec": "use k8s.io/kube-openapi/pkg/validation/spec instead",
      "github.com/go-openapi/strfmt": "use k8s.io/kube-openapi/pkg/validation/strfmt instead",
      "github.com/go-openapi/validate": "use k8s.io/kube-openapi/pkg/validation/validate instead",
      "github.com/gogo/googleapis": "depends on unmaintained github.com/gogo/protobuf",
      "github.com/gogo/protobuf": "unmaintained",
      "github.com/golang/mock": "unmaintained, archive mode",
      "github.com/golang/protobuf": "replace with google.golang.org/protobuf",
      "github.com/golang/groupcache": "unmaintained",
      "github.com/google/gofuzz": "unmaintained, use sigs.k8s.io/randfill",
      "github.com/google/s2a-go": "cloud dependency, unstable",
      "github.com/google/shlex": "unmaintained, archive mode",
      "github.com/googleapis/enterprise-certificate-proxy": "references cloud dependencies",
      "github.com/googleapis/gax-go/v2": "references cloud dependencies",
      "github.com/gorilla/handlers": "unmaintained, archive mode",
      "github.com/gorilla/mux": "unmaintained, archive mode",
      "github.com/gorilla/rpc": "unmaintained, archive mode",
      "github.com/gorilla/schema": "unmaintained, archive mode",
      "github.com/gregjones/httpcache": "unmaintained, archive mode",
      "github.com/grpc-ecosystem/go-grpc-prometheus": "unmaintained, archive mode",
      "github.com/grpc-ecosystem/grpc-gateway": "use github.com/grpc-ecosystem/grpc-gateway/v2",
      "github.com/hashicorp/consul": "MPL license not in CNCF allowlist",
      "github.com/hashicorp/errwrap": "MPL license not in CNCF allowlist",
      "github.com/hashicorp/go-immutable-radix": "MPL license not in CNCF allowlist",
      "github.com/hashicorp/go-multierror": "MPL license not in CNCF allowlist",
      "github.com/hashicorp/go-retryablehttp": "MPL license not in CNCF allowlist",
      "github.com/hashicorp/go-rootcerts": "MPL license not in CNCF allowlist",
      "github.com/hashicorp/go-sockaddr": "MPL license not in CNCF allowlist",
      "github.com/hashicorp/go-uuid": "MPL license not in CNCF allowlist",
      "github.com/hashicorp/golang-lru": "MPL license not in CNCF allowlist",
      "github.com/hashicorp/hcl": "MPL license not in CNCF allowlist",
      "github.com/hashicorp/logutils": "MPL license not in CNCF allowlist",
      "github.com/hashicorp/memberlist": "MPL license not in CNCF allowlist",
      "github.com/hashicorp/serf": "MPL license not in CNCF allowlist",
      "github.com/imdario/mergo": "see https://github.com/kubernetes/kubernetes/issues/107499",
      "github.com/influxdata/influxdb1-client": "db/datastore clients should not be required",
      "github.com/json-iterator/go": "refer to #105030",
      "github.com/klauspost/compress": "unreviewable assembly code, `prometheus/client_golang` should use stdlib instead",
      "github.com/mailru/easyjson": "unmaintained",
      "github.com/miekg/dns": "no dns client/server should be required",
      "github.com/mindprince/gonvml": "depends on nvml.h that does not appear to permit modification, redistribution",
      "github.com/mitchellh/cli": "MPL license not in CNCF allowlist",
      "github.com/mitchellh/gox": "MPL license not in CNCF allowlist",
      "github.com/mndrix/tap-go": "unmaintained",
      "github.com/modern-go/concurrent": "problematic reliance on golang internals, e.g. https://github.com/modern-go/reflect2/issues/24",
      "github.com/modern-go/reflect2": "problematic reliance on golang internals, e.g. https://github.com/modern-go/reflect2/issues/24",
      "github.com/onsi/ginkgo": "Ginkgo has been migrated to V2, refer to #109111",
      "github.com/pkg/errors": "unmaintained, archive mode",
      "github.com/planetscale/vtprotobuf": "avoid using additional proto implementations",
      "github.com/smartystreets/goconvey": "MPL license not in CNCF allowlist",
      "github.com/spf13/viper": "refer to #102598",
      "github.com/xeipuuv/gojsonschema": "unmaintained",
      "go.mongodb.org/mongo-driver": "",
      "go.opencensus.io": "unmaintained, https://github.com/census-instrumentation/opencensus-go archive mode",
      "golang.org/x/exp": "This subrepository holds experimental and deprecated packages",
      "golang.org/x/lint": "unmaintained, archive mode",
      "google.golang.org/api": "cloud dependency",
      "google.golang.org/appengine": "cloud dependency",
      "google.golang.org/genproto": "refer to #113366",
      "gopkg.in/square/go-jose.v2": "obsolete, use gopkg.in/go-jose/go-jose.v2",
      "gopkg.in/evanphx/json-patch.v5": "refer to https://github.com/kubernetes/kubernetes/pull/91622#issuecomment-637087847",
      "gopkg.in/fsnotify.v1": "obsolete, use github.com/fsnotify/fsnotify",
      "gopkg.in/yaml.v2": "prefer sigs.k8s.io/yaml",
      "gopkg.in/yaml.v3": "prefer sigs.k8s.io/yaml/goyaml.v3",
      "k8s.io/klog": "we have switched to klog v2, so avoid klog v1",
      "rsc.io/quote": "refer to #102833",
      "rsc.io/sampler": "refer to #102833"
    }
  },
  "status": {
    "unwantedReferences": {
      "github.com/davecgh/go-spew": [
        "github.com/cyphar/filepath-securejoin",
        "github.com/go-logr/zapr",
        "github.com/go-openapi/jsonpointer",
        "github.com/go-openapi/swag",
        "github.com/go-task/slim-sprig/v3",
        "github.com/google/cadvisor",
        "github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus",
        "github.com/grpc-ecosystem/go-grpc-middleware/v2",
        "github.com/json-iterator/go",
        "github.com/prometheus/common",
        "github.com/sirupsen/logrus",
        "github.com/stretchr/objx",
        "github.com/stretchr/testify",
        "go.etcd.io/bbolt",
        "go.etcd.io/etcd/api/v3",
        "go.etcd.io/etcd/client/pkg/v3",
        "go.etcd.io/etcd/client/v3",
        "go.etcd.io/etcd/pkg/v3",
        "go.etcd.io/etcd/server/v3",
        "go.etcd.io/raft/v3",
        "go.opentelemetry.io/auto/sdk",
        "go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful",
        "go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc",
        "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp",
        "go.opentelemetry.io/otel",
        "go.opentelemetry.io/otel/exporters/otlp/otlptrace",
        "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc",
        "go.opentelemetry.io/otel/metric",
        "go.opentelemetry.io/otel/sdk",
        "go.opentelemetry.io/otel/trace",
        "go.uber.org/goleak",
        "go.uber.org/multierr",
        "go.uber.org/zap",
        "k8s.io/apimachinery",
        "k8s.io/kube-openapi",
        "k8s.io/utils",
        "sigs.k8s.io/kustomize/api",
        "sigs.k8s.io/kustomize/kustomize/v5",
        "sigs.k8s.io/kustomize/kyaml"
      ],
      "github.com/gogo/protobuf": [
        "github.com/containerd/containerd/api",
        "github.com/containerd/errdefs/pkg",
        "github.com/containerd/ttrpc",
        "github.com/containerd/typeurl/v2",
        "github.com/google/cadvisor",
        "go.etcd.io/etcd/api/v3",
        "go.etcd.io/etcd/client/v3",
        "go.etcd.io/etcd/server/v3",
        "go.etcd.io/raft/v3",
        "k8s.io/code-generator"
      ],
      "github.com/golang/groupcache": [
        "go.etcd.io/etcd/server/v3"
      ],
      "github.com/golang/protobuf": [
        "github.com/container-storage-interface/spec",
        "github.com/containerd/containerd/api",
        "github.com/containerd/ttrpc",
        "github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus",
        "go.etcd.io/etcd/api/v3",
        "go.etcd.io/etcd/client/v3",
        "go.etcd.io/etcd/server/v3",
        "go.etcd.io/raft/v3",
        "google.golang.org/grpc",
        "google.golang.org/protobuf",
        "sigs.k8s.io/apiserver-network-proxy/konnectivity-client"
      ],
      "github.com/google/gofuzz": [
        "github.com/json-iterator/go"
      ],
      "github.com/gregjones/httpcache": [
        "k8s.io/client-go"
      ],
      "github.com/grpc-ecosystem/go-grpc-prometheus": [
        "k8s.io/apiserver"
      ],
      "github.com/json-iterator/go": [
        "github.com/prometheus/client_golang",
        "go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful",
        "k8s.io/kube-openapi",
        "sigs.k8s.io/structured-merge-diff/v6"
      ],
      "github.com/klauspost/compress": [
        "github.com/prometheus/client_golang",
        "go.etcd.io/etcd/client/v3",
        "go.etcd.io/etcd/server/v3"
      ],
      "github.com/mailru/easyjson": [
        "github.com/go-openapi/jsonpointer",
        "github.com/go-openapi/swag",
        "k8s.io/kube-openapi",
        "sigs.k8s.io/kustomize/api",
        "sigs.k8s.io/kustomize/kustomize/v5",
        "sigs.k8s.io/kustomize/kyaml"
      ],
      "github.com/modern-go/concurrent": [
        "github.com/json-iterator/go",
        "github.com/prometheus/client_golang",
        "go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful",
        "k8s.io/kube-openapi",
        "sigs.k8s.io/structured-merge-diff/v6"
      ],
      "github.com/modern-go/reflect2": [
        "github.com/json-iterator/go",
        "github.com/prometheus/client_golang",
        "go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful",
        "k8s.io/kube-openapi",
        "sigs.k8s.io/structured-merge-diff/v6"
      ],
      "github.com/pkg/errors": [
        "github.com/Microsoft/hnslib",
        "github.com/google/cadvisor",
        "sigs.k8s.io/kustomize/api",
        "sigs.k8s.io/kustomize/kustomize/v5"
      ],
      "github.com/planetscale/vtprotobuf": [
        "google.golang.org/grpc"
      ],
      "golang.org/x/exp": [
        "github.com/antlr4-go/antlr/v4",
        "github.com/google/cel-go",
        "github.com/grpc-ecosystem/go-grpc-middleware/v2"
      ],
      "gopkg.in/yaml.v3": [
        "github.com/containerd/containerd/api",
        "github.com/coreos/go-semver",
        "github.com/cyphar/filepath-securejoin",
        "github.com/go-logr/zapr",
        "github.com/go-openapi/jsonpointer",
        "github.com/go-openapi/swag",
        "github.com/go-task/slim-sprig/v3",
        "github.com/google/cadvisor",
        "github.com/google/cel-go",
        "github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus",
        "github.com/grpc-ecosystem/go-grpc-middleware/v2",
        "github.com/grpc-ecosystem/grpc-gateway/v2",
        "github.com/prometheus/common",
        "github.com/spf13/cobra",
        "github.com/stretchr/objx",
        "github.com/stretchr/testify",
        "go.etcd.io/bbolt",
        "go.etcd.io/etcd/api/v3",
        "go.etcd.io/etcd/client/pkg/v3",
        "go.etcd.io/etcd/client/v3",
        "go.etcd.io/etcd/pkg/v3",
        "go.etcd.io/etcd/server/v3",
        "go.etcd.io/raft/v3",
        "go.opentelemetry.io/auto/sdk",
        "go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful",
        "go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc",
        "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp",
        "go.opentelemetry.io/otel",
        "go.opentelemetry.io/otel/exporters/otlp/otlptrace",
        "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc",
        "go.opentelemetry.io/otel/metric",
        "go.opentelemetry.io/otel/sdk",
        "go.opentelemetry.io/otel/trace",
        "go.uber.org/goleak",
        "go.uber.org/multierr",
        "go.uber.org/zap",
        "k8s.io/kube-openapi",
        "sigs.k8s.io/kustomize/api",
        "sigs.k8s.io/kustomize/kustomize/v5",
        "sigs.k8s.io/kustomize/kyaml"
      ]
    },
    "unwantedVendored": [
      "github.com/davecgh/go-spew",
      "github.com/gogo/protobuf",
      "github.com/golang/protobuf",
      "github.com/gregjones/httpcache",
      "github.com/grpc-ecosystem/go-grpc-prometheus",
      "github.com/json-iterator/go",
      "github.com/mailru/easyjson",
      "github.com/modern-go/concurrent",
      "github.com/modern-go/reflect2",
      "github.com/pkg/errors",
      "golang.org/x/exp",
      "gopkg.in/yaml.v3"
    ]
  }
}