Go modules · proxy.golang.org

git.golaxy.org/scaffold

Remote Payload

Why PkgRadar flagged v0.2.9-0.20260727111909-194c26f87cd2

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.2.9-0.20260727111909-194c26f87cd2`	Review	24	2026-07-28
`v0.2.9-0.20260727110315-e50079bc0feb`	Review	24	2026-07-28
`v0.2.9-0.20260727103154-044e75414651`	Review	24	2026-07-28
`v0.2.9-0.20260727084440-4d6dd03f3542`	Review	24	2026-07-28
`v0.2.9-0.20260727083656-43b353002ccd`	Review	24	2026-07-28
`v0.2.9-0.20260727080336-3fb56cbcce0e`	Review	24	2026-07-28
`v0.2.9-0.20260602101800-4e8a9e494d30`	Review	1	2026-06-18
`v0.2.9-0.20260530115209-5fd75c384a96`	Review	1	2026-06-18

Block this in CI

PkgRadar gates git.golaxy.org/scaffold (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go git.golaxy.org/[email protected]