Go modules · proxy.golang.org

github.com/cmsgov/bcda-app

Remote Payload, Obfuscation Density

Why PkgRadar flagged v0.0.0-20260901172851-eb27a9e8ef7e

Severity	Signal
medium	Remote Payload

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260901172851-eb27a9e8ef7e`	Review	12	2026-09-02
`v0.0.0-20260821190215-35f8adcbde41`	Review	12	2026-08-22
`v0.0.0-20260820220140-2be11fd71fe3`	Review	12	2026-08-22
`v0.0.0-20260820161327-831655a0d281`	Review	12	2026-08-21
`v0.0.0-20260819204341-0e13f78b3327`	Review	12	2026-08-21
`v0.0.0-20260818205250-69b95b1963b3`	Review	12	2026-08-20
`v0.0.0-20260817182700-1b89a6ae484e`	Review	12	2026-08-18
`v0.0.0-20260812200538-92c1c4b57604`	Review	12	2026-08-13
`v0.0.0-20260811205220-c3d7a6b91f64`	Review	12	2026-08-13
`v0.0.0-20260811153359-ce8f99015c9b`	Review	12	2026-08-12
`v0.0.0-20260811120520-30ec414a544a`	Review	12	2026-08-12
`v0.0.0-20260810174713-119cda5b0a12`	Review	12	2026-08-11

Block this in CI

PkgRadar gates github.com/cmsgov/bcda-app (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/cmsgov/[email protected]

Prefer zero config? Install the GitHub App and it gates every pull request automatically — no pipeline edits, no API key.