PkgRadar

Go modules · proxy.golang.org

gitea.dev

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged v1.27.0-dev.0.20260601012343-5c084c883cac

SeveritySignalEvidence
mediumRemote Payloadmatched "raw.githubusercontent.com" · [email protected]/build/generate-emoji.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v1.27.0-dev.0.20260601012343-5c084c883cacReview712026-06-02

Block this in CI

PkgRadar gates gitea.dev (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go [email protected]
gitea.dev — Go modules security scan | PkgRadar