
Security News
CVE Volume Surges Past 48,000 in 2025 as WordPress Plugin Ecosystem Drives Growth
CVE disclosures hit a record 48,185 in 2025, driven largely by vulnerabilities in third-party WordPress plugins.
github.com/stellar/go-stellar-sdk
Advanced tools
This repository contains the official Go SDK for Stellar, maintained by the Stellar Development Foundation.
It provides all the tools developers need to build applications that integrate with the Stellar network, including APIs for Horizon and Stellar RPC, as well as foundational utilities and ingestion libraries for working with raw ledger data.
This repo previously served as the Go Monorepo for all SDF Go projects. As of October 2025, it has been refactored to focus exclusively on developer-facing SDK packages. Services that are still maintained have been moved to their own dedicated repositories.
This repo follows Go Module Versioning.
Run the following command inside your Go project.
go get github.com/stellar/go-stellar-sdk@latest
| Package | Description |
|---|---|
| Transaction Builder | Builder for creating Stellar transactions and operations |
| Horizon API Client | Client for querying and submitting transactions via a Horizon instance |
| RPC API Client | Client for interacting with a Stellar RPC instance |
| Ingest SDK | Library for parsing raw ledger data from Captive Core, a Galexie Data Lake, or RPC |
| xdr / strkey | Core network primitives and encoding helpers |
| Processors Library | Reusable data abstractions and ETL-style processors |
The following services have been moved to their own repositories and are no longer built from this SDK:
| Service | New Repository | Description |
|---|---|---|
| Horizon | stellar-horizon | Full-featured API server for querying Stellar network data |
| Galexie | stellar-galexie | Ledger exporter that writes network data to external data stores |
| Friendbot | friendbot | Stellar's test network native asset faucet |
If you build or deploy these services from source, please use their new repositories. Pre-built Debian packages and Docker images continue to be distributed through the same channels.
As of tag stellar-go-2025-10-29_10-56-50, several legacy services have been deprecated and removed. They remain available in Git history for archival or fork purposes.
| Service | Description |
|---|---|
| Ticker | API server providing asset and market statistics |
| Keystore | Encrypted key-management API server |
| Federation Server | Address-lookup service for anchors and financial institutions |
Contributions are welcome! See CONTRIBUTING.md for more details.
The packages in this repository are tested against the two most recent major versions of Go, because only the two most recent major versions of Go receive security updates.
FAQs
Unknown package
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
CVE disclosures hit a record 48,185 in 2025, driven largely by vulnerabilities in third-party WordPress plugins.

Security News
Socket CEO Feross Aboukhadijeh joins Insecure Agents to discuss CVE remediation and why supply chain attacks require a different security approach.

Security News
Tailwind Labs laid off 75% of its engineering team after revenue dropped 80%, as LLMs redirect traffic away from documentation where developers discover paid products.