Go modules · proxy.golang.org

github.com/coopnorge/mage

Remote Payload, Credential file access

Why PkgRadar flagged v0.33.0

Severity	Signal	Evidence
medium	Remote Payload	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.33.0`	Review	15	2026-08-01
`v0.32.0`	Review	15	2026-07-31
`v0.31.1-0.20260728095226-9ab20bdeb82d`	Review	15	2026-07-29
`v0.31.0`	Review	15	2026-07-29
`v0.30.1-0.20260727134911-8b064f0ef5eb`	Review	15	2026-07-28
`v0.30.1-0.20260727133104-cbca5f7ab065`	Review	15	2026-07-28
`v0.30.0`	Review	15	2026-07-28
`v0.29.1`	Review	15	2026-07-22
`v0.29.0`	Review	15	2026-07-18
`v0.28.4-0.20260717094839-791a0fa37382`	Review	15	2026-07-18
`v0.28.4-0.20260717094447-314d22844374`	Review	15	2026-07-18
`v0.28.4-0.20260717092106-e52cc36ffac5`	Review	15	2026-07-18
`v0.28.4-0.20260717093855-b9b9ace0a092`	Review	15	2026-07-18

Block this in CI

PkgRadar gates github.com/coopnorge/mage (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/coopnorge/[email protected]