Go modules · proxy.golang.org

github.com/cmsgov/bcda-app

Remote Payload, Obfuscation Density

Why PkgRadar flagged v0.0.0-20260717151419-0857d63e23f9

Severity	Signal	Evidence
medium	Remote Payload	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260717151419-0857d63e23f9`	Review	12	2026-07-18
`v0.0.0-20260716214834-92fe22b1c0ad`	Review	12	2026-07-17
`v0.0.0-20260716171855-112dfc7a4208`	Review	12	2026-07-17
`v0.0.0-20260714220232-68c65fed8cbf`	Review	12	2026-07-15
`v0.0.0-20260713205013-91d4fbc4e5dc`	Review	12	2026-07-14
`v0.0.0-20260713184458-5751cbb35d09`	Review	12	2026-07-14
`v0.0.0-20260713190745-969ef7b62336`	Review	12	2026-07-14
`v0.0.0-20260713171800-826356fff942`	Review	12	2026-07-14
`v0.0.0-20260710180828-0930a2e5d3e1`	Review	12	2026-07-11
`v0.0.0-20260710170006-611256e31682`	Review	12	2026-07-11
`v0.0.0-20260709180132-ee4d86a5b284`	Review	12	2026-07-11
`v0.0.0-20260708193008-8b2e5df6a55d`	Review	12	2026-07-09

Block this in CI

PkgRadar gates github.com/cmsgov/bcda-app (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/cmsgov/[email protected]