Go Modules Scraper - Package Versions, Metadata & Dependencies

Extract comprehensive metadata from the Go Module Mirror (proxy.golang.org) for any list of Go modules. This Actor returns all published versions, the latest version with its timestamp, the Go version declared in the latest go.mod, and a complete list of direct dependencies. It is ideal for Go ecosystem research, dependency auditing, license tracking, vulnerability analysis, and keeping an internal software catalog up to date.

The Go Module Mirror is a public, read-only API maintained by Google. It serves version lists, version metadata, and go.mod files without authentication, making this Actor fast, reliable, and cost-effective. No browser rendering or anti-bot workarounds are required.

Use Cases

• Dependency auditing — Pull the latest Go version and direct dependencies for a set of modules to detect outdated or risky transitive dependencies.
• Software cataloging — Build an internal inventory of Go libraries used across your organization with version history and dependency counts.
• Ecosystem research — Measure version velocity, minimum Go version requirements, and dependency graph density across popular open-source modules.
• Vulnerability analysis — Cross-reference module versions and dependencies with security advisory databases.

Input

Field	Type	Required	Description
modulePaths	Array	Yes	List of Go module paths, e.g., github.com/spf13/cobra.
maxVersions	Number	No	Maximum versions recorded per module (default: 100, 0 = unlimited).
includeGoMod	Boolean	No	Fetch latest go.mod to extract Go version and dependencies (default: true).
proxyConfiguration	Object	No	Proxy configuration. Apify proxy is included by default.

Output

The Actor outputs a dataset with one row per module:

{
  "modulePath": "github.com/spf13/cobra",
  "moduleName": "cobra",
  "versionsCount": 24,
  "versions": "v1.9.0, v1.8.0, v1.7.0, ...",
  "latestVersion": "v1.9.0",
  "latestTime": "2025-02-12T14:30:00Z",
  "goVersion": "1.15",
  "dependenciesCount": 3,
  "dependencies": "github.com/cpuguy83/go-md2man/v2, github.com/inconshreveable/mousetrap, github.com/spf13/pflag",
  "sourceUrl": "https://proxy.golang.org/github.com/spf13/cobra",
  "error": ""
}

Pricing

Pay per event: $0.001 per module extracted.

Limitations

• Only public modules available on proxy.golang.org can be fetched. Private modules or modules excluded from the mirror are not supported.
• The Go Module Mirror caches data, so very recent releases may take a few minutes to appear.
• Indirect dependencies are not separated from direct dependencies in the current version.

FAQ

Q: Can I scrape all Go modules? A: No. The Actor processes the module paths you provide. Use it to audit specific libraries rather than crawl the entire ecosystem.

Q: Do I need a proxy? A: Apify proxy is enabled by default and recommended for production runs. Direct requests may work for small tests.

Changelog

• v1.0.0 — Initial release