Go modules · proxy.golang.org

github.com/conforma/cli

Remote Payload

Why PkgRadar flagged v0.0.0-20260826110614-f712ec1e38ad

Severity	Signal	Evidence
medium	Remote Payload	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260826110614-f712ec1e38ad`	Review	12	2026-08-29
`v0.0.0-20260824140523-fa2d487b0b80`	Review	12	2026-08-25
`v0.0.0-20260819135913-a18338416237`	Review	12	2026-08-21
`v0.9.115`	Review	12	2026-08-20
`v0.0.0-20260818213015-35d5e2a65958`	Review	12	2026-08-20
`v0.9.112`	Review	12	2026-08-20
`v0.0.0-20260814161807-48d96db64756`	Review	12	2026-08-18
`v0.9.108`	Review	12	2026-08-15
`v0.9.107`	Review	12	2026-08-14
`v0.9.106`	Review	12	2026-08-14
`v0.9.105`	Review	12	2026-08-13
`v0.9.103`	Review	12	2026-08-12
`v0.0.0-20260810115516-1ea841a59f46`	Review	12	2026-08-12
`v0.9.102`	Review

Block this in CI

PkgRadar gates github.com/conforma/cli (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/conforma/[email protected]

Prefer zero config? Install the GitHub App and it gates every pull request automatically — no pipeline edits, no API key.