Go modules · proxy.golang.org

github.com/0xsoniclabs/norma

Remote Payload

Why PkgRadar flagged v0.0.0-20260717121746-d812fb02946c

Severity	Signal	Evidence
medium	Remote Payload	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260717121746-d812fb02946c`	Review	12	2026-07-20
`v0.0.0-20260715073230-4804ef6646ea`	Review	12	2026-07-17
`v0.0.0-20260712170424-f413909a6943`	Review	12	2026-07-14
`v0.0.0-20260710061655-0da3be103011`	Review	12	2026-07-12
`v0.0.0-20260707095356-19cb290c22c3`	Review	12	2026-07-08
`v0.0.0-20260706135726-68ecfe76900d`	Review	12	2026-07-07
`v0.0.0-20260703145231-cb96ae9e73b3`	Review	12	2026-07-06
`v0.0.0-20260703082911-c82ed29ddac0`	Review	12	2026-07-04
`v0.0.0-20260630144345-091c9cbf8ef6`	Review	12	2026-07-01
`v0.0.0-20260626115107-9ac0a95f8821`	Review	12	2026-06-27
`v0.0.0-20260626100112-1f475fa74109`	Review	12	2026-06-27
`v0.0.0-20260626064159-cf2ffe0c1e88`	Review	12	2026-06-27

Block this in CI

PkgRadar gates github.com/0xsoniclabs/norma (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/0xsoniclabs/[email protected]