PkgRadar

Go modules · proxy.golang.org

github.com/JanDeDobbeleer/oh-my-posh

Credential file access: matched "AWS_ACCESS_KEY"

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260616190526-40ce7a3ac4a5Review32026-06-17
v29.15.1+incompatibleLow risk02026-06-11
v29.15.0+incompatibleLow risk02026-06-11
v29.14.1-0.20260529145551-0424da2cabca+incompatibleLow risk02026-05-31
v0.0.0-20260529145551-0424da2cabcaLow risk02026-05-31

Block this in CI

PkgRadar gates github.com/JanDeDobbeleer/oh-my-posh (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/JanDeDobbeleer/[email protected]