PkgRadar

Go modules · proxy.golang.org

github.com/ethpandaops/panda

Remote Payload

Why PkgRadar flagged v0.37.0

SeveritySignalEvidence
mediumRemote Payload

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.37.0Review122026-06-30
v0.37.0-rc.0Review122026-06-30
v0.36.2-rc.0Low risk02026-06-24
v0.36.1-rc.0Low risk02026-06-23
v0.36.0Low risk02026-06-20
v0.36.0-rc.0Low risk02026-06-20
v0.35.0Low risk02026-06-19
v0.35.0-rc.0Low risk02026-06-19
v0.34.0Low risk02026-06-18
v0.34.0-rc.0Low risk02026-06-18
v0.33.0Low risk02026-06-16
v0.33.0-rc.5Low risk02026-06-16
v0.33.0-rc.4Low risk02026-06-14
v0.33.0-rc.3Low risk02026-06-13
v0.33.0-rc.2Low risk02026-06-13
v0.33.0-rc.0Low risk02026-06-12
v0.32.0-rc.1Low risk02026-06-12
v0.30.0Low risk02026-06-12
v0.28.0Low risk02026-06-12
v0.29.0Low risk02026-06-12
v0.31.0Low risk02026-06-12
v0.26.0Low risk02026-06-12
v0.32.0-rc.0Low risk02026-06-12

Block this in CI

PkgRadar gates github.com/ethpandaops/panda (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/ethpandaops/[email protected]
github.com/ethpandaops/panda — Go modules security scan | PkgRadar