Go modules · proxy.golang.org

github.com/SonarSource/SonarJS

Credential file access, Obfuscation Density

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20250729075646-fd6c9f5f60ec`	Review	6	2026-08-30
`v0.0.0-20220221141919-5d05b4218b1c`	Low risk	0	2026-08-30
`v0.0.0-20190613160546-49f34eaeaad5`	Low risk	0	2026-08-30
`v0.0.0-20260828153651-e1463ef935af`	Low risk	0	2026-08-29
`v0.0.0-20260828152212-e36f46423cc6`	Low risk	0	2026-08-29
`v0.0.0-20260828123251-1eea9253f87b`	Low risk	0	2026-08-29
`v0.0.0-20260827135442-7ca7a1593c82`	Low risk	0	2026-08-28
`v0.0.0-20260827132027-049d6e489b58`	Low risk	0	2026-08-28
`v0.0.0-20260826082116-7082d740ed25`	Low risk	0	2026-08-28
`v0.0.0-20260824151937-465c5a66d506`	Low risk	0	2026-08-25
`v0.0.0-20230403074005-709ef9e281c3`	Low risk	0	2026-08-24
`v0.0.0-20230331171333-2dd13a25cc4c`	Low risk	0	2026-08-24

Block this in CI

PkgRadar gates github.com/SonarSource/SonarJS (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/SonarSource/[email protected]

Prefer zero config? Install the GitHub App and it gates every pull request automatically — no pipeline edits, no API key.