PkgRadar

Go modules · proxy.golang.org

github.com/envoyproxy/gateway

Go Generate Shell: //go:generate directive shells out to curl/wget/bash — runs during `go generate`.

Why PkgRadar flagged v1.9.0-rc.0.0.20260615175534-00320fbf29a0

SeveritySignalEvidence
mediumGo Generate Shell//go:generate directive shells out to curl/wget/bash — runs during `go generate`. · github.com/envoyproxy/[email protected]/internal/xds/extensions/extensions.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v1.9.0-rc.0.0.20260615175534-00320fbf29a0Review152026-06-16
v0.0.0-20260615175534-00320fbf29a0Review152026-06-16
v1.9.0-rc.0.0.20260614121440-332081c50f81Review152026-06-15
v0.0.0-20260614121440-332081c50f81Review152026-06-15
v0.0.0-20260614064202-f2c0921c6a44Review152026-06-15
v1.9.0-rc.0.0.20260612074931-6578a6d0ae92Review152026-06-13
v0.0.0-20260612074931-6578a6d0ae92Review152026-06-13
v0.0.0-20260416212959-097611e4ec6fReview152026-06-12
v0.0.0-20260608071943-6373c860a5e9Review152026-06-09
v1.9.0-rc.0.0.20260605165345-f65dbc1bb505Review152026-06-07
v1.7.4Review152026-06-06
v1.8.1Review152026-06-06
v1.9.0-rc.0.0.20260605061237-15ff72eea454Review152026-06-06
v0.0.0-20260605061237-15ff72eea454Review152026-06-06
v0.0.0-20260605044530-b9d4c59eaec7Review152026-06-06
v1.9.0-rc.0.0.20260605044530-b9d4c59eaec7Review152026-06-06
v0.0.0-20260605042139-96e2b750868aReview152026-06-06
v0.0.0-20260603133239-5266322dde87Review152026-06-04
v1.9.0-rc.0.0.20260602151602-9a7ddda536beReview152026-06-03
v0.0.0-20260602151602-9a7ddda536beReview152026-06-03
v1.9.0-rc.0.0.20260531020803-3ab110e76778Review152026-06-01
v0.0.0-20260531020803-3ab110e76778Review152026-06-01
v1.9.0-rc.0.0.20260530023710-8d3cfb4540a8Review152026-05-31
v0.0.0-20260530023710-8d3cfb4540a8Review152026-05-31
v1.9.0-rc.0.0.20260529110730-0edf51a12b9fReview152026-05-30
v0.0.0-20260529110730-0edf51a12b9fReview152026-05-30
v1.9.0-rc.0.0.20260528091414-ccffbc494fa3Review152026-05-29
v0.0.0-20260528091414-ccffbc494fa3Review152026-05-29

Block this in CI

PkgRadar gates github.com/envoyproxy/gateway (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/envoyproxy/[email protected]