Go modules · proxy.golang.org

github.com/ClickHouse/clickhouse-go/v2

Go Generate Shell

Why PkgRadar flagged v2.0.0-20260421120216-d1f98a054efa

Severity	Signal	Evidence
medium	Go Generate Shell	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v2.0.0-20260421120216-d1f98a054efa`	Review	15	2026-07-20
`v2.0.0-20260123185837-308e8faec381`	Review	15	2026-07-20
`v2.0.0-20260626153319-f0b8c6a8c89a`	Low risk	0	2026-07-19
`v2.0.0-20251101094110-13b67ff996a8`	Review	15	2026-07-19
`v2.0.0-20260211131234-fb9a4fdfbd40`	Review	15	2026-07-19
`v2.43.1-0.20260211131234-fb9a4fdfbd40`	Review	15	2026-07-19
`v2.47.1-0.20260716082423-40b792a9a2b7`	Low risk	0	2026-07-17
`v2.47.1-0.20260714101535-542f4ae0ff23`	Low risk	0	2026-07-15
`v2.47.1-0.20260713140327-055dd12831b5`	Low risk	0	2026-07-15
`v2.47.1-0.20260711234610-d148f090d6d3`	Low risk	0	2026-07-12
`v2.47.1-0.20260710164008-45774f5a0bf4`	Low risk	0	2026-07-12
`v2.47.1-0.20260709150718-0f1f5ea31133`	Low risk	0

Block this in CI

PkgRadar gates github.com/ClickHouse/clickhouse-go/v2 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/ClickHouse/clickhouse-go/[email protected]