PkgRadar

Go modules · proxy.golang.org

fiatjaf.com/nostrlib

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged v0.0.0-20260604131054-d48b1f7c3359

SeveritySignalEvidence
mediumRemote Payloadmatched "raw.githubusercontent.com" · fiatjaf.com/[email protected]/schema/schema.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260604131054-d48b1f7c3359Review122026-06-07
v0.0.0-20260527015712-05237b346361Review122026-05-31

Block this in CI

PkgRadar gates fiatjaf.com/nostrlib (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go fiatjaf.com/[email protected]
fiatjaf.com/nostrlib — Go modules security scan | PkgRadar