Go modules · proxy.golang.org

github.com/certusone/wormhole/wormchain

Remote Payload, Obfuscation Density

Why PkgRadar flagged v0.0.0-20260717134301-e3e9e69686b6

Severity	Signal	Evidence
medium	Remote Payload	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260717134301-e3e9e69686b6`	Review	12	2026-07-19
`v0.0.0-20260716152753-558782675604`	Review	12	2026-07-18
`v0.0.0-20260715101616-a7dbc306e6e4`	Review	12	2026-07-16
`v0.0.0-20260714145732-f893f6f869e7`	Review	12	2026-07-15
`v0.0.0-20260714055644-73c2348e4498`	Review	12	2026-07-15
`v0.0.0-20260710193838-c5e1f791e0a8`	Review	12	2026-07-11
`v0.0.0-20260703135722-87111a68721d`	Review	12	2026-07-05
`v0.0.0-20260701164446-2e014e694845`	Review	12	2026-07-03
`v0.0.0-20240422203118-ddf5ba159c36`	Review	5	2026-06-28
`v0.0.0-20260626170323-5406b6a35f06`	Review	5	2026-06-27
`v0.0.0-20260623063409-3888993f80d9`	Review	2	2026-06-25
`v0.0.0-20260619151628-dadcdf3d0160`	Review	1	2026-06-22

Block this in CI

PkgRadar gates github.com/certusone/wormhole/wormchain (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/certusone/wormhole/[email protected]