Go modules · proxy.golang.org

github.com/dever-package/bot

Remote Payload, Tls Verification Disabled

Why PkgRadar flagged v0.1.1-0.20260728125810-79f8cc58e5bd

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.1.1-0.20260728125810-79f8cc58e5bd`	Review	36	2026-07-29
`v0.1.1-0.20260726230457-3864c8f9572f`	Review	36	2026-07-29
`v0.1.1-0.20260727083405-8d4a62d43661`	Review	36	2026-07-28
`v0.1.1-0.20260623045142-1fcf721ae0ce`	Review	36	2026-07-28
`v0.1.1-0.20260627004937-9a2feb6b4ec6`	Review	36	2026-07-06
`v0.1.0`	Low risk	0	2026-06-20
`v0.0.0-20260619014456-9f43d3d9a9f2`	Low risk	0	2026-06-20

Block this in CI

PkgRadar gates github.com/dever-package/bot (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/dever-package/[email protected]