Go modules · proxy.golang.org

github.com/defanglabs/defang/src

Remote Payload, Credential file access

Why PkgRadar flagged v0.0.0-20260729162631-32c6621e2d89

Severity	Signal	Evidence
medium	Remote Payload	—
medium	Credential file access	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260729162631-32c6621e2d89`	Review	47	2026-07-30
`v0.0.0-20260729134142-cda4678b15b2`	Review	47	2026-07-30
`v0.0.0-20260510140053-5e826e48db8e`	Review	47	2026-07-29
`v0.0.0-20260303215741-324faf7b8dec`	Review	52	2026-07-29
`v0.0.0-20260122174447-5f96fd2e17c8`	Review	52	2026-07-29
`v0.0.0-20260617233742-354a68fb6e12`	Review	47	2026-07-29
`v0.0.0-20260511202359-71842bb49ac7`	Review	47	2026-07-29
`v0.0.0-20260407205310-311374c3d6e7`	Review	47	2026-07-27
`v0.0.0-20260725020314-6c303fa3fa3f`	Review	47	2026-07-26
`v0.0.0-20260721164121-2de1e4a7f1de`	Review	47	2026-07-22
`v0.0.0-20260721083338-c47963e234ed`	Review	47	2026-07-22
`v0.0.0-20260721060635-48ca2f57d742`	Review	47	2026-07-22

Block this in CI

PkgRadar gates github.com/defanglabs/defang/src (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/defanglabs/defang/[email protected]