Go modules · proxy.golang.org

github.com/GoogleCloudPlatform/buildpacks

Remote Payload, Credential file access, Obfuscation Density

Why PkgRadar flagged v0.0.0-20260721171946-2a85c824a6e9

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260721171946-2a85c824a6e9`	Review	29	2026-07-22
`v0.0.0-20260721153618-8c1158de4459`	Review	29	2026-07-22
`v0.0.0-20260721090720-3e4c245421eb`	Review	29	2026-07-22
`v0.0.0-20260720180034-b93002b8e715`	Review	29	2026-07-21
`v0.0.0-20260720131823-411026e48b2f`	Review	29	2026-07-21
`v0.0.0-20260720102318-f5882d16a42e`	Review	29	2026-07-21
`v0.0.0-20260720095100-0a3b9feb9acb`	Review	29	2026-07-21
`v0.0.0-20260717222743-4a3b8cba2d7f`	Review	29	2026-07-19
`v0.0.0-20260716093847-000b7ebb825e`	Review	29	2026-07-17
`v0.0.0-20260716052344-27a94e1d7b3c`	Review	29	2026-07-17
`v0.0.0-20260715055404-089a4d0d9b50`	Review	29	2026-07-16
`v0.0.0-20260714064426-6f96af90f830`	Review	29	2026-07-15

Block this in CI

PkgRadar gates github.com/GoogleCloudPlatform/buildpacks (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/GoogleCloudPlatform/[email protected]