Go modules · proxy.golang.org

github.com/db9-ai/juicefs

Remote Payload, Obfuscation Density, Go Cgo Preamble

Why PkgRadar flagged v1.4.0-dev.0.20260729073058-513639c77e59

Severity	Signal	Evidence
medium	Remote Payload	—
medium	Remote Payload	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v1.4.0-dev.0.20260729073058-513639c77e59`	Review	24	2026-07-31
`v1.4.0-dev.0.20260715035348-7f9b8bbef540`	Review	24	2026-07-16
`v1.4.0-dev.0.20260708161119-eb93166158b4`	Review	24	2026-07-09
`v1.4.0-dev.0.20260708145002-8390f8563e6f`	Review	24	2026-07-09
`v1.4.0-dev.0.20260708135427-f2e64a670704`	Review	24	2026-07-09
`v1.4.0-dev.0.20260708132309-6d9526fcca6b`	Review	24	2026-07-09
`v1.4.0-dev.0.20260708125339-5c17d62a29a5`	Review	24	2026-07-09
`v1.4.0-dev.0.20260708120715-72c28b03099b`	Review	24	2026-07-09
`v1.4.0-dev.0.20260708110511-e5c690a84429`	Review	24	2026-07-09
`v1.4.0-dev.0.20260708102046-19af396f6eac`	Review	24	2026-07-09
`v1.4.0-dev.0.20260708035510-0a18b22e21f1`	Review	24	2026-07-09
`v1.4.0-dev.0.20260701062437-32a56e5dca88`

Block this in CI

PkgRadar gates github.com/db9-ai/juicefs (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/db9-ai/[email protected]