Go modules · proxy.golang.org

github.com/bardusco/whatsmeow

Remote Payload

Why PkgRadar flagged v0.0.1-merge-upstream.20250916.0.20260715002535-8e8c489adefc

Severity	Signal	Evidence
medium	Remote Payload	—
medium	Remote Payload	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.1-merge-upstream.20250916.0.20260715002535-8e8c489adefc`	Review	24	2026-07-15
`v0.0.1-merge-upstream.20250916.0.20260714233705-77ee08677707`	Review	24	2026-07-15
`v0.0.1-merge-upstream.20250916.0.20260714150348-2c462132cbb8`	Review	24	2026-07-15
`v0.0.1-merge-upstream.20250916.0.20260714021855-aced0e408ebe`	Review	24	2026-07-15
`v0.0.1-merge-upstream.20250916.0.20260625000712-e1a54736cd46`	Review	4	2026-07-02

Block this in CI

PkgRadar gates github.com/bardusco/whatsmeow (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/bardusco/whatsmeow@v0.0.1-merge-upstream.20250916.0.20260715002535-8e8c489adefc