Go modules · proxy.golang.org

github.com/fulcrumproject/core

Tls Verification Disabled, Remote Payload

Why PkgRadar flagged v0.0.0-20260722080716-3212fc7d4142

Severity	Signal
medium	Tls Verification Disabled ×2
medium	Remote Payload

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260722080716-3212fc7d4142`	Review	1	2026-07-23
`v0.0.0-20260722073945-59bc47fce235`	Review	1	2026-07-23
`v0.0.0-20260721134824-915a1693ee73`	Review	1	2026-07-23
`v0.0.0-20260708080400-1f0b3c41829c`	Low risk	0	2026-07-21
`v0.0.0-20260703073136-3b22bf19a721`	Low risk	0	2026-07-04
`v0.0.0-20260701080305-2a7a5371c259`	Low risk	0	2026-07-03
`v0.0.0-20260630080120-fcae265a4c27`	Low risk	0	2026-07-01
`v0.0.0-20260630081000-c99bd085f95d`	Low risk	0	2026-07-01
`v0.0.0-20260626070903-0442ac55bdac`	Low risk	0	2026-06-27
`v0.0.0-20260625140630-b80c07e86a90`	Low risk	0	2026-06-26
`v0.0.0-20260625080513-d62431b57cf5`	Low risk	0	2026-06-26
`v0.0.0-20260624152001-68f208fb09d8`	Low risk	0	2026-06-25

Block this in CI

PkgRadar gates github.com/fulcrumproject/core (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/fulcrumproject/[email protected]

Prefer zero config? Install the GitHub App and it gates every pull request automatically — no pipeline edits, no API key.