gopkg.in/yaml.v2Go

Verdict

Looks abandoned

gopkg.in/yaml.v2 appears abandoned — its repository has been archived, no commits for 17 months. 119 of 297 open issues have had no reply. Plan a migration rather than waiting for a fix.

health 10/100

Why this verdict?

abandoned — No commits for over 365 days with unanswered issues piling up — or the registry marks it deprecated, or the repository is archived.

repository archived

Judged today from signal heuristics. How each verdict is decided

latest v2.4.0
stars 7,017
checked today
registry ↗
repository ↗

Vulnerabilities, end of life and next steps

Check a specific version for known advisories, documented mitigations and evidence-backed earlier-version options. Maintenance health is separate from vulnerability status.

Review remediation options →

Maintenance trends

Loading historical repository activity…

Signals · last 4 checks

Commits 90d

Open issues

297

Unanswered

119

Contributors

State history 2

When	Change
2026-09-06	unknown → abandoned
2026-09-04	first verdict: unknown

Badge

Drop this in your README. It re-renders itself as the verdict changes.

[![maintenance](https://isitdeadyet.dev/badge/go/gopkg.in/yaml.v2.svg)](https://isitdeadyet.dev/go/gopkg.in/yaml.v2)

Watch it

Get told when gopkg.in/yaml.v2 changes state, changes licence, or is deprecated — instead of finding out during an incident.

Free for up to 25 packages. Signing in is a link sent to your email — there is no password to choose.