All 117 Dependencies
Every package Unkey depends on, ranked by repo health score.
Unkey is a self-hostable API infrastructure platform built in Go, covering the pieces most teams end up hand-rolling when they ship an API: key issuance and fast global verification, rate limiting that stays consistent across regions, per-key permissions and RBAC, a traffic gateway, and usage analytics backed by ClickHouse.
The codebase is organized as a set of internal services rather than a monolith — a gateway component handles routing and traffic shaping, a permissions/auth service enforces RBAC, a control-plane service manages deployments, and a vault service handles secret storage, all communicating over gRPC defined through Protocol Buffers. This mirrors how Unkey's own hosted cloud runs the same code, just distributed differently.
Most of the repository is AGPLv3-licensed, with the exception of packages under `packages/` which carry their own individual licenses (several are permissively licensed SDKs meant for reuse). Unkey also runs a paid hosted cloud version with usage-based pricing starting around $5/month plus a custom enterprise tier, but the self-hosted path uses the same open-source code.