Go modules · proxy.golang.org
github.com/clidey/whodb/cli
Remote Payload: matched "github.com/BoundaryML/baml/releases/download"
Why PkgRadar flagged v0.0.0-20260611164326-aff672bb6248
| Severity | Signal | Evidence |
|---|---|---|
| medium | Remote Payload | matched "github.com/BoundaryML/baml/releases/download" · github.com/clidey/whodb/[email protected]/internal/baml/setup.go |
| medium | Go Mod Replace Local | go.mod replace directive redirects to a local filesystem path — non-portable / dev-time only. · github.com/clidey/whodb/[email protected]/go.mod |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
v0.0.0-20260611164326-aff672bb6248 | Review | 32 | 2026-06-13 |
v0.0.0-20260609144700-dab899117815 | Review | 32 | 2026-06-11 |
v0.0.0-20260604142038-069e4a834e6c | Review | 32 | 2026-06-05 |
v0.0.0-20260601220112-8b172f5076c8 | Review | 32 | 2026-06-02 |
v0.0.0-20260601213450-132dd6586edd | Review | 32 | 2026-06-02 |
v0.0.0-20260601210806-a2686df855af | Review | 32 | 2026-06-02 |
v0.0.0-20260601140214-6a513412a578 | Review | 32 | 2026-06-02 |
v0.0.0-20260601125129-962a46c67474 | Review | 32 | 2026-06-02 |
v0.0.0-20260530161349-3fa73144860a | Review | 32 | 2026-05-31 |
v0.0.0-20260528135921-44099a29ea73 | Review | 32 | 2026-05-30 |
v0.0.0-20260527200814-7a40dd6d632a | Review | 32 | 2026-05-29 |
Block this in CI
pkgradar gate --ecosystem go github.com/clidey/whodb/[email protected]