Go modules · proxy.golang.org

github.com/ava-labs/libevm

Remote Payload, Credential file access, Go Cgo Preamble

Why PkgRadar flagged v1.13.15-0.20260730160415-1e6fd3b652e2

Severity	Signal	Evidence
medium	Remote Payload	—
medium	Remote Payload	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v1.13.15-0.20260730160415-1e6fd3b652e2`	Review	29	2026-07-31
`v1.13.15-0.20260727201655-c9fc6dd2394c`	Review	29	2026-07-28
`v1.13.15-0.20260727180425-50f63c47d9ee`	Review	29	2026-07-28
`v1.13.15-0.20260727164456-1c2e9cc5b59c`	Review	29	2026-07-28
`v1.13.15-0.20260727162219-1a14db1f8416`	Review	29	2026-07-28
`v1.13.15-0.20250610142802-2672fbd7cdfc`	Review	29	2026-07-27
`v1.13.15-0.20260721211439-07a17ef612a7`	Review	29	2026-07-22
`v1.13.15-0.20260721184559-5557c68d296b`	Review	29	2026-07-22
`v1.13.15-0.20260721180523-dbeb5ef1e53a`	Review	29	2026-07-22
`v1.13.15-0.20260720235213-1416f3e7c0b9`	Review	29	2026-07-21
`v1.13.15-0.20260720234530-a81c36693502`	Review	29	2026-07-21
`v1.13.15-0.20260720163803-90e9e9d2a1f5`	Review

Block this in CI

PkgRadar gates github.com/ava-labs/libevm (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/ava-labs/[email protected]