Go modules · proxy.golang.org

github.com/Te-River/Gensokyo-NewQQ

Remote Payload, Go Mod Replace Local, Obfuscation Density

Why PkgRadar flagged v0.0.0-20260726144528-e7efa02f24ce

Severity	Signal	Evidence
medium	Remote Payload	—
medium	Go Mod Replace Local	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260726144528-e7efa02f24ce`	Review	18	2026-07-27
`v0.0.0-20260720065936-3578fdaa13ac`	Review	4	2026-07-21
`v0.0.0-20260720063220-2e12db23c962`	Review	4	2026-07-21
`v0.0.0-20260720033721-0b73926e91cb`	Review	4	2026-07-21
`v0.0.0-20260712052221-3dd7998b30d3`	Low risk	0	2026-07-13
`v0.0.0-20260711163500-7c1bf5b3dd4b`	Low risk	0	2026-07-12

Block this in CI

PkgRadar gates github.com/Te-River/Gensokyo-NewQQ (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/Te-River/[email protected]

Prefer zero config? Install the GitHub App and it gates every pull request automatically — no pipeline edits, no API key.