PkgRadar

Go modules · proxy.golang.org

github.com/GoogleCloudPlatform/opentelemetry-operations-collector

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged v0.0.0-20260609194207-11d1f1c861fb

SeveritySignalEvidence
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/googlecloudplatform/opentelemetry-operations-collector@v0.0.0-20260609194207-11d1f1c861fb/cmd/distrogen/main.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260609194207-11d1f1c861fbReview122026-06-10
v0.151.1-0.20260609152759-3c15d52377c6Review122026-06-10
v0.0.0-20260609152759-3c15d52377c6Review122026-06-10
v0.0.0-20260602184055-962fe00b5248Review122026-06-03
v0.0.0-20250425155011-6d5f5760d174Low risk02026-05-30
v0.151.1-0.20260528200829-8c3534f75307Review122026-05-29
v0.0.0-20260528200829-8c3534f75307Review122026-05-29

Block this in CI

PkgRadar gates github.com/GoogleCloudPlatform/opentelemetry-operations-collector (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/GoogleCloudPlatform/opentelemetry-operations-collector@v0.0.0-20260609194207-11d1f1c861fb