Go modules · proxy.golang.org

github.com/autonomy/dianemo

Remote Payload, Tls Verification Disabled, Credential file access

Why PkgRadar flagged v1.14.0-alpha.2.0.20260710090217-057d554d2f54

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v1.14.0-alpha.2.0.20260710090217-057d554d2f54`	Review	63	2026-07-12
`v1.13.6`	Review	87	2026-07-12
`v1.14.0-alpha.2.0.20260626184638-45497bd5b315`	Review	25	2026-06-28
`v1.14.0-alpha.2`	Review	25	2026-06-28
`v1.14.0-alpha.1.0.20260619173127-bd2d6242a3b0`	Review	14	2026-06-23
`v1.12.9`	Review	26	2026-06-23
`v1.14.0-alpha.1.0.20260609144349-0c02a5a07411`	Low risk	0	2026-06-10
`v1.13.4`	Low risk	0	2026-06-10
`v1.14.0-alpha.1.0.20260601164100-5177c50e2ea5`	Low risk	0	2026-06-03
`v1.14.0-alpha.1`	Low risk	0	2026-06-03

Block this in CI

PkgRadar gates github.com/autonomy/dianemo (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/autonomy/[email protected]