Go modules · proxy.golang.org

github.com/chainreactors/fingers

Remote Payload, Tls Verification Disabled

Why PkgRadar flagged v1.2.2-0.20260716153113-7848ea1fac20

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v1.2.2-0.20260716153113-7848ea1fac20`	Review	48	2026-07-19
`v1.2.2-0.20260714063144-070758342f45`	Review	48	2026-07-15
`v1.2.2-0.20260714062904-0d1dcd57e0f7`	Review	58	2026-07-15
`v1.2.2-0.20260704073236-3e22b6a528b9`	Review	48	2026-07-05
`v1.2.2-0.20260704073031-b664dbf51d61`	Review	48	2026-07-05
`v1.2.2-0.20260703124922-b8ac7e00cf68`	Review	48	2026-07-04
`v1.2.2-0.20260629103336-467eef72e53e`	Review	28	2026-06-30
`v1.2.2-0.20260629060048-25d52909ff9b`	Review	28	2026-06-30
`v1.2.2-0.20260629043342-2229ee623248`	Review	28	2026-06-30
`v1.2.1-0.20260629043342-2229ee623248`	Review	28	2026-06-30
`v1.2.2-0.20260626162400-454d79efc64d`	Review	23	2026-06-29
`v1.1.1-0.20260127104843-374d0424c86a`	Review

Block this in CI

PkgRadar gates github.com/chainreactors/fingers (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/chainreactors/[email protected]