Compare software

Nancy vs govulncheck: catalog facts
Nancygovulncheck
Free

Free and open source under the Apache 2.0 licence.

Free

Free and open source under the BSD-3-Clause license.

Windows, Command line Windows, macOS, Linux, Command line
  • Focused on Go module dependencies
  • Easy to add to CI pipelines
  • Reachability analysis cuts down on irrelevant vulnerability reports
  • Scans either source code or compiled binaries
  • Only covers Go projects
  • Relies on Sonatype's online vulnerability data
  • Only covers Go code
  • Queries the online Go vulnerability database by default
Downloadable app Downloadable app
Open source Open source
License: Apache-2.0 License: BSD-3-Clause
Not stated if an account is needed No account needed
Needs internet Not stated if it works offline

Checked October 2, 2026

Checked October 2, 2026

Catalog facts only. Anything “not stated” is unconfirmed. Check full listings for details.