Go modules · proxy.golang.org

github.com/Shopify/agent

Remote Payload

Why PkgRadar flagged v2.0.5-0.20151201054821-ac645570ada1+incompatible

Severity	Signal	Evidence
medium	Remote Payload	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v2.0.5-0.20151201054821-ac645570ada1+incompatible`	Review	12	2026-08-23
`v2.0.5-0.20160903064654-64b44cfe1d41+incompatible`	Review	12	2026-08-23
`v2.0.4-0.20150721011635-e1e5c1b7e761+incompatible`	Low risk	0	2026-08-23
`v2.0.5-0.20160401232858-84cc24a071bc+incompatible`	Review	12	2026-08-23
`v2.0.5-0.20160205062606-acd316a82f8a+incompatible`	Review	12	2026-08-23
`v2.0.5-0.20170404072319-461a9b69b544+incompatible`	Review	12	2026-08-23
`v2.0.5-0.20160302032237-526c1e50fac3+incompatible`	Review	12	2026-08-23
`v2.0.5-0.20150804004523-c663ec32480f+incompatible`	Low risk	0	2026-08-23
`v2.0.5-0.20150730132043-1266e972e098+incompatible`	Low risk	0	2026-08-23
`v2.0.5-0.20150901024030-22ccecdc872f+incompatible`	Low risk	0	2026-08-23
`v0.0.0-20150606204902-a66831c9bbd6`	Low risk

Block this in CI

PkgRadar gates github.com/Shopify/agent (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/Shopify/[email protected]+incompatible

Prefer zero config? Install the GitHub App and it gates every pull request automatically — no pipeline edits, no API key.