Go modules · proxy.golang.org

github.com/claudiotheobaldo/fyne/v2

Remote Payload, Go Cgo Preamble

Why PkgRadar flagged v2.7.4-0.20260707182937-5732b4762293

Severity	Signal	Evidence
medium	Remote Payload	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v2.7.4-0.20260707182937-5732b4762293`	Review	12	2026-07-08
`v2.7.4-0.20260701013313-bb4ff4c377dd`	Review	4	2026-07-02
`v2.7.4-0.20260701015618-a0ee28d70e6e`	Review	4	2026-07-02
`v2.7.4-0.20260701003209-8cd2eba1e2a4`	Review	4	2026-07-02
`v2.7.4-0.20260630205534-1616b213d5c2`	Review	4	2026-07-01
`v2.7.4-0.20260630204443-822719b40547`	Review	4	2026-07-01
`v2.7.4-0.20260630192206-c58201f1afd1`	Review	4	2026-07-01
`v2.7.4-0.20260630190647-e8a433a4c6d8`	Review	4	2026-07-01
`v2.7.4-0.20260628215026-56b3635f00a3`	Review	2	2026-06-29
`v2.7.4-0.20260625023236-646b6209e15e`	Low risk	0	2026-06-26
`v2.7.4-0.20260624032347-fdddffb5293d`	Low risk	0	2026-06-25
`v2.7.4-0.20260620025347-b130b30c1c23`	Low risk

Block this in CI

PkgRadar gates github.com/claudiotheobaldo/fyne/v2 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/claudiotheobaldo/fyne/[email protected]