Go modules · proxy.golang.org

github.com/fedspendingtransparency/usaspending-api

Credential file access

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260901173411-1692d484b38c`	Review	3	2026-09-02
`v0.0.0-20170815225243-cad1cd4c43cf`	Low risk	0	2026-08-30
`v0.0.0-20170816032932-2ae1bb097ce0`	Low risk	0	2026-08-29
`v0.0.0-20170821195514-9219c0ef25aa`	Low risk	0	2026-08-29
`v0.0.0-20170816204530-d61ae1562bdf`	Low risk	0	2026-08-29
`v0.0.0-20170816175119-04b7f893e1d0`	Low risk	0	2026-08-29
`v0.0.0-20170517202310-933a1b3258c2`	Low risk	0	2026-08-29
`v0.0.0-20170614235839-cd5782f21ef5`	Low risk	0	2026-08-29
`v0.0.0-20170809175524-0823a2cc3fa3`	Low risk	0	2026-08-29
`v0.0.0-20170811050940-55ee4fb16278`	Low risk	0	2026-08-29
`v0.0.0-20250828191148-7260f55e6be6`	Low risk	0	2026-08-28
`v0.0.0-20250828205717-4a8560a204e1`	Low risk	0	2026-08-28

Block this in CI

PkgRadar gates github.com/fedspendingtransparency/usaspending-api (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/fedspendingtransparency/[email protected]

Prefer zero config? Install the GitHub App and it gates every pull request automatically — no pipeline edits, no API key.