Go modules · proxy.golang.org

github.com/damonto/telmo

Go Generate Shell

Why PkgRadar flagged v1.0.7-0.20251104114102-eaf2a0eeed0e

Severity	Signal	Evidence
medium	Go Generate Shell	—
medium	Go Generate Shell	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v1.0.7-0.20251104114102-eaf2a0eeed0e`	Review	30	2026-08-20
`v1.0.7-0.20250918043129-f1fa2659ee71`	Review	30	2026-08-20
`v1.0.7-0.20250917092049-85c15094b4f2`	Review	30	2026-08-20
`v1.0.7-0.20250904062809-f59c250eeace`	Review	30	2026-08-20
`v1.0.7-0.20250813161655-20746b97a0dc`	Review	30	2026-08-20
`v1.0.7-0.20250813015715-d420172b1a33`	Review	30	2026-08-20
`v1.0.7-0.20260111092916-ccac6f638de8`	Review	30	2026-08-20
`v1.0.7-0.20250802110825-e1b2f1ca2d44`	Review	30	2026-08-20
`v1.0.7-0.20250328031721-2e2e826b4e60`	Review	30	2026-08-20
`v1.0.7-0.20250309133141-d62128ff3ee2`	Review	30	2026-08-20
`v1.0.7-0.20240819105907-dab3d22ac32f`	Review	27	2026-08-20
`v1.0.7-0.20240621075139-79b0bbe061b3`	Review

Block this in CI

PkgRadar gates github.com/damonto/telmo (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/damonto/[email protected]

Prefer zero config? Install the GitHub App and it gates every pull request automatically — no pipeline edits, no API key.