Go modules · proxy.golang.org

github.com/formancehq/payments

Remote Payload, Go Mod Replace Local, Obfuscation Density

Why PkgRadar flagged v0.0.0-20260728093152-4b026b2ad1b0

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260728093152-4b026b2ad1b0`	Review	34	2026-07-30
`v0.0.0-20260721154906-177593f98cb8`	Review	34	2026-07-22
`v0.0.0-20260708150832-e6fe53814ecc`	Review	34	2026-07-09
`v0.0.0-20260703142421-64197ffd8bf6`	Review	34	2026-07-04
`v0.0.0-20260701145302-98a5d283c10d`	Review	34	2026-07-02
`v0.0.0-20260630140714-49635e1afc70`	Review	28	2026-07-01
`v0.0.0-20260629135639-442955eab8ab`	Review	23	2026-06-30
`v0.0.0-20260629091728-db7df4a67adb`	Review	23	2026-06-30
`v0.0.0-20260625154018-5dd83ca4b4c1`	Review	11	2026-06-26
`v0.0.0-20260625141910-4c8235693027`	Review	11	2026-06-26
`v0.0.0-20260624150106-fcba1c022fa6`	Review	9	2026-06-26
`v0.0.0-20260623130832-330d6297ab0f`	Review	7	2026-06-25

Block this in CI

PkgRadar gates github.com/formancehq/payments (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/formancehq/[email protected]