Go modules · proxy.golang.org

github.com/defang-io/defang/src

Remote Payload, Credential file access

Why PkgRadar flagged v0.0.0-20260725020314-6c303fa3fa3f

Severity	Signal	Evidence
medium	Remote Payload	—
medium	Credential file access	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260725020314-6c303fa3fa3f`	Review	47	2026-07-27
`v0.0.0-20260716215446-fc6e14e2d013`	Review	47	2026-07-17
`v0.0.0-20260710183926-9408bcc63d73`	Review	47	2026-07-15
`v0.0.0-20260707220652-b37120575b22`	Review	47	2026-07-08
`v0.0.0-20260706235354-4f4134989017`	Review	47	2026-07-08
`v0.0.0-20260703185853-084448dd633a`	Review	47	2026-07-06
`v0.0.0-20260626210347-a6ec064bd608`	Review	47	2026-06-27
`v0.0.0-20260626204116-16dea8a90857`	Review	47	2026-06-27
`v0.0.0-20260626192929-758c2786db46`	Review	47	2026-06-27
`v0.0.0-20260626182854-ca6bb2f4ce68`	Review	47	2026-06-27
`v0.0.0-20260623165151-01fa5b89411f`	Review	28	2026-06-24
`v0.0.0-20260622191900-23661418b1be`	Review	28	2026-06-24

Block this in CI

PkgRadar gates github.com/defang-io/defang/src (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/defang-io/defang/[email protected]