Go modules · proxy.golang.org

github.com/0xsoniclabs/sonic

Remote Payload

Why PkgRadar flagged v0.0.0-20240605150829-b27f4daf027a

Severity	Signal	Evidence
medium	Remote Payload	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Scanned (UTC)
`v0.0.0-20260731131108-045c7e5e31a1`	Low risk	2026-08-01
`v0.0.0-20260731092147-1460923f7406`	Low risk	2026-08-01
`v0.0.0-20260730101912-81ce1c4596f1`	Low risk	2026-07-31
`v0.0.0-20260729150446-5ac58819e255`	Low risk	2026-07-30
`v0.0.0-20260729094802-724885dce406`	Low risk	2026-07-30
`v0.0.0-20260729134332-05fe978aeccf`	Low risk	2026-07-30
`v0.0.0-20260728123510-4e46bbab125d`	Low risk	2026-07-29
`v0.0.0-20251202124236-a01abd1edb7c`	Low risk	2026-07-28
`v0.0.0-20260727102013-b92fa52931aa`	Low risk	2026-07-28
`v0.0.0-20260727074332-f4e88a221988`	Low risk	2026-07-28
`v0.0.0-20260727065140-590fbc41e2e9`	Low risk	2026-07-28
`v0.0.0-20260724150836-78cc7d7eae95`	Low risk	2026-07-25

Block this in CI

PkgRadar gates github.com/0xsoniclabs/sonic (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/0xsoniclabs/[email protected]