Compare software

govulncheck vs Nancy: catalog facts
govulncheck	Nancy
Free Free and open source under the BSD-3-Clause license.	Free Free and open source under the Apache 2.0 licence.
Windows, macOS, Linux, Command line	Windows, Command line
Reachability analysis cuts down on irrelevant vulnerability reports Scans either source code or compiled binaries	Focused on Go module dependencies Easy to add to CI pipelines
Only covers Go code Queries the online Go vulnerability database by default	Only covers Go projects Relies on Sonatype's online vulnerability data
Downloadable app	Downloadable app
Open source	Open source
License: BSD-3-Clause	License: Apache-2.0
No account needed	Not stated if an account is needed
Not stated if it works offline	Needs internet
Official website Full listing and sources Checked October 2, 2026	Official website Full listing and sources Checked October 2, 2026

Catalog facts only. Anything “not stated” is unconfirmed. Check full listings for details.