Go modules · proxy.golang.org

github.com/Moira-Alert/moira

Remote Payload

Why PkgRadar flagged v0.0.0-20230313110051-b8e5fc0412a3

Severity	Signal	Evidence
medium	Remote Payload	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v2.4.1-0.20190412050658-0e3d04c3fa7f+incompatible`	Low risk	0	2026-08-24
`v0.0.0-20260205114237-0b8e660c8f89`	Low risk	0	2026-08-24
`v0.0.0-20260713084555-e9d8981716c3`	Low risk	0	2026-08-24
`v0.0.0-20260514121216-34ec923ad8cd`	Low risk	0	2026-08-24
`v0.0.0-20260224085217-16af1f28a3e7`	Low risk	0	2026-08-24
`v0.0.0-20250219121844-0143b567b5fb`	Low risk	0	2026-08-24
`v2.5.1-0.20191002103641-d4975b406f1a+incompatible`	Low risk	0	2026-08-24
`v0.0.0-20191002103641-d4975b406f1a`	Low risk	0	2026-08-24
`v0.0.0-20260603132412-e576dce1479c`	Low risk	0	2026-08-24
`v0.0.0-20260528084311-22dc60d3d04c`	Low risk	0	2026-08-24
`v0.0.0-20240328080744-7cc7eb490d81`	Low risk	0	2026-08-24
`v0.0.0-20250403134843-6ad5dbedf92f`	Low risk

Block this in CI

PkgRadar gates github.com/Moira-Alert/moira (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/Moira-Alert/[email protected]

Prefer zero config? Install the GitHub App and it gates every pull request automatically — no pipeline edits, no API key.