Go modules · proxy.golang.org

code.cloudfoundry.org/loggregator-agent-release/src

Remote Payload

Why PkgRadar flagged v0.0.0-20260831083514-90154a7f308c

Severity	Signal
medium	Remote Payload ×2

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260831083514-90154a7f308c`	Review	24	2026-09-03
`v0.0.0-20260817083708-329f564e7a9b`	Review	24	2026-08-20
`v0.0.0-20260810083621-b5a91f1ebabe`	Review	24	2026-08-11
`v0.0.0-20260727083617-4a0b3f5a5103`	Review	4	2026-07-28
`v0.0.0-20260720084317-8f54bce796b7`	Low risk	0	2026-07-21
`v0.0.0-20260716000117-154a7c723db3`	Low risk	0	2026-07-17
`v0.0.0-20260715101508-f73b1968e0fd`	Low risk	0	2026-07-16
`v0.0.0-20260710101342-993314a2ed93`	Low risk	0	2026-07-11
`v0.0.0-20260710094801-c3300ca39ddb`	Low risk	0	2026-07-11
`v0.0.0-20260708213818-36d8a9a13b9c`	Low risk	0	2026-07-09
`v0.0.0-20260708013224-99818eda7779`	Low risk	0	2026-07-09
`v0.0.0-20260707010535-5a3220fc0eea`	Low risk	0	2026-07-08

Block this in CI

PkgRadar gates code.cloudfoundry.org/loggregator-agent-release/src (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go code.cloudfoundry.org/loggregator-agent-release/[email protected]

Prefer zero config? Install the GitHub App and it gates every pull request automatically — no pipeline edits, no API key.