Go modules · proxy.golang.org

github.com/GoogleCloudPlatform/prometheus

Remote Payload, Obfuscation Density

Why PkgRadar flagged v0.0.0-20260806153034-3f3316d7cf6f

Severity	Signal
medium	Remote Payload

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260806153034-3f3316d7cf6f`	Review	12	2026-08-07
`v0.0.0-20260806140406-0d57b29ab20a`	Review	12	2026-08-07
`v0.0.0-20260806105717-8a99986d8ea1`	Review	12	2026-08-07
`v0.0.0-20260804161738-a1320e2c8c6f`	Review	12	2026-08-06
`v0.0.0-20260728183508-0f7081999e2b`	Review	4	2026-07-29
`v0.0.0-20260727213039-0b06e00a32e3`	Review	3	2026-07-28
`v0.0.0-20260727181847-bf5a337b4bc3`	Review	3	2026-07-28
`v0.0.0-20260716135511-8ee1fd4fac90`	Low risk	0	2026-07-17
`v0.0.0-20260715155045-9d5191587bbb`	Low risk	0	2026-07-16
`v0.0.0-20260715154826-acffc7554fc2`	Low risk	0	2026-07-16
`v0.0.0-20260713135005-85abb8bbbcac`	Low risk	0	2026-07-15
`v0.0.0-20260710135557-fdc8019f4b7e`	Low risk	0	2026-07-13

Block this in CI

PkgRadar gates github.com/GoogleCloudPlatform/prometheus (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/GoogleCloudPlatform/[email protected]

Prefer zero config? Install the GitHub App and it gates every pull request automatically — no pipeline edits, no API key.