Go modules · proxy.golang.org

github.com/alexellis/bazaar

Remote Payload, Tls Verification Disabled

Why PkgRadar flagged v0.0.0-20260804100438-90bfd8bd172c

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260804100438-90bfd8bd172c`	Review	36	2026-08-06
`v0.0.0-20260727111750-07f5fc020042`	Review	36	2026-08-02
`v0.0.0-20260710120849-8a55d8878fd2`	Review	36	2026-07-12
`v0.0.0-20260707135826-4dba73c19eb0`	Review	36	2026-07-09
`v0.0.0-20260705064915-a22b9d07a2e7`	Review	21	2026-07-07
`v0.0.0-20260702201522-7d913f20eeaf`	Review	11	2026-07-04
`v0.0.0-20260630115349-15dcd3c06fd8`	Review	7	2026-07-01
`v0.0.0-20260626193734-4ef70d02fd26`	Review	3	2026-06-28
`v0.0.0-20260622143341-bc10e6ee8007`	Low risk	0	2026-06-26
`v0.0.0-20260622112544-4f05c030d93e`	Low risk	0	2026-06-23

Block this in CI

PkgRadar gates github.com/alexellis/bazaar (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/alexellis/[email protected]