PkgRadar

Go modules · proxy.golang.org

filippo.io/mostly-harmless/filippo.fly.dev

Remote Payload

Why PkgRadar flagged v0.0.0-20260620132529-5db2e1dffc6a

SeveritySignalEvidence
mediumRemote Payloadfilippo.io/mostly-harmless/[email protected]/dl.go
mediumRemote Payloadfilippo.io/mostly-harmless/[email protected]/filippo.io/linux-syscall-table/generate.go
mediumRemote Payloadfilippo.io/mostly-harmless/[email protected]/main.go

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260620132529-5db2e1dffc6aReview242026-06-22

Block this in CI

PkgRadar gates filippo.io/mostly-harmless/filippo.fly.dev (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go filippo.io/mostly-harmless/[email protected]
filippo.io/mostly-harmless/filippo.fly.dev — Go modules security scan | PkgRadar