Go modules · proxy.golang.org

github.com/bishopfox/joro

Tls Verification Disabled, Remote Payload, Go Mod Replace Local +2 more

Why PkgRadar flagged v0.0.0-20260811223824-1f110f8725a6

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260811223824-1f110f8725a6`	Review	73	2026-08-12
`v0.0.0-20260805175628-899b0327f99d`	Review	73	2026-08-06
`v0.0.0-20260803193838-58a37a18f921`	Review	73	2026-08-04
`v0.0.0-20260801044300-d32a04b5a0ae`	Review	73	2026-08-02
`v0.0.0-20260727202738-dd98f31e0fcd`	Review	70	2026-07-28
`v0.0.0-20260727163635-80c30ac84a6a`	Review	70	2026-07-28
`v0.0.0-20260727145823-53e444cdd37d`	Review	70	2026-07-28
`v0.0.0-20260717210748-9d07e0574049`	Review	46	2026-07-18
`v0.0.0-20260710220548-a6f257272177`	Review	28	2026-07-12
`v0.0.0-20260601151442-871936f95d6f`	Review	43	2026-07-12
`v0.0.0-20260709222107-41e53ca8c00c`	Review	23	2026-07-11
`v0.0.0-20260708225901-275bd4929d8e`	Review	19	2026-07-10

Block this in CI

PkgRadar gates github.com/bishopfox/joro (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/bishopfox/[email protected]