PkgRadar

Go modules · proxy.golang.org

github.com/aler9/rtsp-simple-server

Remote Payload: matched "github.com/video-dev/hls.js/releases/download"

Why PkgRadar flagged v1.19.0

SeveritySignalEvidence
mediumRemote Payloadmatched "github.com/video-dev/hls.js/releases/download" · github.com/aler9/[email protected]/internal/servers/hls/hlsjsdownloader/main.go
mediumRemote Payloadmatched "github.com/bluenviron/mediamtx-rpicamera/releases/download" · github.com/aler9/[email protected]/internal/staticsources/rpicamera/mtxrpicamdownloader/main.go
mediumRemote Payloadmatched "github.com/bluenviron/mediamtx/releases/download" · github.com/aler9/[email protected]/internal/upgrade/upgrade.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v1.19.0High risk362026-06-04

Block this in CI

PkgRadar gates github.com/aler9/rtsp-simple-server (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/aler9/[email protected]