PkgRadar

Go modules · proxy.golang.org

github.com/DoltHub/dolt

Remote Payload: matched "github.com/dolthub/dolt/releases/download"

Why PkgRadar flagged v2.0.8-0.20260527230043-75273d6390cb+incompatible

SeveritySignalEvidence
mediumRemote Payloadmatched "github.com/dolthub/dolt/releases/download" · github.com/dolthub/[email protected]+incompatible/integration-tests/compatibility/runner.sh
mediumRemote Payloadmatched "curl " · github.com/dolthub/[email protected]+incompatible/integration-tests/mysql-client-tests/mariadb-install.sh

Scanned versions

VersionVerdictScoreScanned (UTC)
v2.1.1+incompatibleLow risk02026-06-03
v2.1.0+incompatibleLow risk02026-06-01
v0.0.0-20260531002422-8c13902c0140Low risk02026-06-01
v2.0.9-0.20260529194637-82e98ffc703e+incompatibleLow risk02026-05-31
v1.39.5Low risk02026-05-31
v2.0.8+incompatibleLow risk02026-05-30
v2.0.8-0.20260527230043-75273d6390cb+incompatibleReview242026-05-29
v2.0.7+incompatibleReview242026-05-29

Block this in CI

PkgRadar gates github.com/DoltHub/dolt (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/DoltHub/[email protected]+incompatible
Start free — 25 scans / moView full evidence