PkgRadar

Go modules · proxy.golang.org

code.cloudfoundry.org/locket

Go Generate Shell: //go:generate directive shells out to curl/wget/bash — runs during `go generate`.

Why PkgRadar flagged v0.1.0

SeveritySignalEvidence
mediumGo Generate Shell//go:generate directive shells out to curl/wget/bash — runs during `go generate`. · code.cloudfoundry.org/[email protected]/models/models.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.1.0Review152026-06-11
v0.0.0-20170525212652-532e0602bbddReview152026-06-07
v0.0.0-20170830213959-d7c1861de02eReview152026-06-07
v0.0.0-20171130215921-052dc91cec4cReview152026-06-07
v0.0.0-20171117200718-d5233d1b8b80Review152026-06-07
v0.0.0-20161101181622-9a5b73d37376Low risk02026-06-07
v0.0.0-20180329192600-ab2fc77e1386Review152026-06-07
v0.0.0-20180118195014-5564bbcef36fReview152026-06-06
v0.0.0-20260602143356-23bea5865010Review152026-06-03
v0.0.0-20260602000911-8966ce40fa65Review152026-06-03
v0.0.0-20260601194813-bc79a1f2612bReview152026-06-02

Block this in CI

PkgRadar gates code.cloudfoundry.org/locket (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go code.cloudfoundry.org/[email protected]
Start free — 25 scans / moView full evidence