Go modules · proxy.golang.org

github.com/alexellis/arkade

Remote Payload, Tls Verification Disabled, Credential file access

Why PkgRadar flagged v0.0.0-20230103094740-032001c3b18f

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20230103094740-032001c3b18f`	Review	41	2026-08-02
`v0.0.0-20260727111750-07f5fc020042`	Review	36	2026-07-28
`v0.0.0-20201128174217-72b0737d30e8`	Review	24	2026-07-17
`v0.0.0-20260522124323-294d1a4321b6`	Review	46	2026-07-17
`v0.0.0-20260209184729-6569094d2556`	Review	36	2026-07-17
`v0.0.0-20260710120849-8a55d8878fd2`	Review	36	2026-07-11
`v0.0.0-20260709105838-3bdd4e44555f`	Review	36	2026-07-10
`v0.0.0-20260707135826-4dba73c19eb0`	Review	36	2026-07-08
`v0.0.0-20260705064915-a22b9d07a2e7`	Review	36	2026-07-06
`v0.0.0-20260703112659-9f8a75e27c8b`	Review	36	2026-07-04
`v0.0.0-20260702201522-7d913f20eeaf`	Review	36	2026-07-03
`v0.0.0-20260630115349-15dcd3c06fd8`	Review	25	2026-07-01

Block this in CI

PkgRadar gates github.com/alexellis/arkade (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/alexellis/[email protected]