Go modules · proxy.golang.org

github.com/agentsafe-ai/tooltrust-scanner

Remote Payload

Why PkgRadar flagged v0.3.20-0.20260726040243-5e3678d2cd2c

Severity	Signal	Evidence
medium	Remote Payload	—
medium	Remote Payload	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.3.20-0.20260726040243-5e3678d2cd2c`	Review	24	2026-07-27
`v0.3.20-0.20260717231727-1c318cc017ab`	Review	24	2026-07-18
`v0.3.20-0.20260717214729-b10f13ab5f04`	Review	24	2026-07-18
`v0.3.19`	Review	3	2026-06-22
`v0.3.19-0.20260621052814-f848b278b374`	Review	3	2026-06-22
`v0.3.18`	Low risk	0	2026-06-17
`v0.3.17`	Low risk	0	2026-06-16
`v0.3.17-0.20260615202621-410efdabc389`	Low risk	0	2026-06-16
`v0.3.16`	Low risk	0	2026-06-16
`v0.3.16-0.20260615195250-a8c7136076f6`	Low risk	0	2026-06-16
`v0.3.16-0.20260615183216-413883801268`	Low risk	0	2026-06-16
`v0.3.14-0.20260614182544-29dba80614e9`	Low risk	0	2026-06-15
`v0.3.14-0.20260612235356-44b614d3caa8`	Low risk

Block this in CI

PkgRadar gates github.com/agentsafe-ai/tooltrust-scanner (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/agentsafe-ai/[email protected]