Go modules · proxy.golang.org

github.com/datadog/dd-trace-go/v2

Go Generate Shell, Remote Payload, Go Init Exec In Body

Why PkgRadar flagged v2.11.0-dev.0.20260729125338-355b942431b5

Severity	Signal	Evidence
medium	Go Generate Shell	—
medium	Remote Payload	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v2.11.0-dev.0.20260729125338-355b942431b5`	Review	27	2026-07-30
`v2.11.0-dev.1`	Review	27	2026-07-30
`v2.11.0-dev.0.20260729095633-0c4e9d4cc050`	Review	27	2026-07-30
`v2.11.0-dev.0.20260729080700-616f9b553eef`	Review	27	2026-07-30
`v2.11.0-dev.0.20260728174731-72b644837656`	Review	27	2026-07-29
`v2.11.0-dev.0.20260728164912-e4d7a27f33d1`	Review	27	2026-07-29
`v2.11.0-dev.0.20260728154216-365304d4fd11`	Review	27	2026-07-29
`v2.11.0-dev.0.20260728150224-768c14399c12`	Review	27	2026-07-29
`v2.11.0-dev.0.20260728140803-5acd0af88f07`	Review	27	2026-07-29
`v2.11.0-dev.0.20260728095038-9873869e42f4`	Review	27	2026-07-29
`v2.11.0-dev.0.20260728082746-402c57eeef3f`	Review	27	2026-07-29
`v2.11.0-dev.0.20260727193533-ce59bd9804c8`

Block this in CI

PkgRadar gates github.com/datadog/dd-trace-go/v2 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/datadog/dd-trace-go/[email protected]