PkgRadar

Go modules · proxy.golang.org

github.com/99designs/gqlgen

Go Generate Shell: //go:generate directive shells out to curl/wget/bash — runs during `go generate`.

Why PkgRadar flagged v0.17.92-0.20260611141749-a8c3585d0d06

SeveritySignalEvidence
mediumGo Generate Shell//go:generate directive shells out to curl/wget/bash — runs during `go generate`. · github.com/99designs/[email protected]/main.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.17.92-0.20260611141749-a8c3585d0d06Review152026-06-12
v0.17.91-0.20260611023449-837d8a742d95Review152026-06-12
v0.17.88-0.20260308234857-c978f689b8c0Review152026-06-12
v0.0.0-20260610202510-7ab1571ae6a1Review152026-06-11
v0.17.91-0.20260610153706-f06fcae7a397Review152026-06-11
v0.17.91-0.20260610124217-9f8f94f56623Review152026-06-11
v0.0.0-20260610124217-9f8f94f56623Review152026-06-11
v0.17.91-0.20260604233759-c1fa6352afacReview152026-06-06
v0.0.0-20260604233759-c1fa6352afacReview152026-06-06
v0.17.91-0.20260603122835-e9f372efb5a4Review152026-06-04
v0.0.0-20260602105742-8888c7c06b31Review152026-06-03
v0.17.91-0.20260531010912-8a12bb6d84abReview152026-06-01
v0.0.0-20260531010912-8a12bb6d84abReview152026-06-01
v0.17.91-0.20260530120850-c57f69d9be5cReview152026-05-31
v0.0.0-20260530120850-c57f69d9be5cReview152026-05-31
v0.17.91-0.20260529111646-c1067cb9fdc0Review152026-05-30

Block this in CI

PkgRadar gates github.com/99designs/gqlgen (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/99designs/[email protected]
Start free — 25 scans / moView full evidence