Go modules · proxy.golang.org

github.com/AgentSafe-AI/tooltrust-scanner

Remote Payload

Why PkgRadar flagged v0.3.20-0.20260717231727-1c318cc017ab

Severity	Signal	Evidence
medium	Remote Payload	—
medium	Remote Payload	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.3.20-0.20260717231727-1c318cc017ab`	Review	24	2026-07-18
`v0.3.20-0.20260717214729-b10f13ab5f04`	Review	24	2026-07-18
`v0.3.19`	Review	24	2026-06-22
`v0.3.19-0.20260621052814-f848b278b374`	Review	24	2026-06-22
`v0.3.18`	Review	14	2026-06-17
`v0.3.18-0.20260616053411-c20861b5c82f`	Review	14	2026-06-17
`v0.3.17`	Review	14	2026-06-16
`v0.3.17-0.20260615202621-410efdabc389`	Review	14	2026-06-16
`v0.3.16`	Review	14	2026-06-16
`v0.3.16-0.20260615195250-a8c7136076f6`	Review	14	2026-06-16
`v0.3.16-0.20260615183216-413883801268`	Review	14	2026-06-16
`v0.3.14-0.20260614182544-29dba80614e9`	Review	11	2026-06-15
`v0.3.14-0.20260612235356-44b614d3caa8`	Review

Block this in CI

PkgRadar gates github.com/AgentSafe-AI/tooltrust-scanner (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/AgentSafe-AI/[email protected]