Go modules · proxy.golang.org

github.com/future-architect/vuls

Webhook Exfil Endpoint, Tls Verification Disabled, Remote Payload

Why PkgRadar flagged v0.1.5-0.20160719044608-a60c21323c6b

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.19.8-0.20220714002630-d1a617cfff04`	Review	29	2026-08-31
`v0.15.4-0.20210124000613-83d48ec99076`	Review	29	2026-08-31
`v0.14.1-0.20201225232417-a33cff8f137c`	Review	29	2026-08-31
`v0.14.1-0.20201224213800-53deaee3d789`	Review	29	2026-08-31
`v0.14.2-0.20210106230229-d7a613b71076`	Review	29	2026-08-31
`v0.0.0-20230921065505-80b48fcbaab5`	Review	29	2026-08-30
`v0.1.5-0.20160719044608-a60c21323c6b`	High risk	64	2026-08-29
`v0.0.0-20160727094328-5e9de5d91a75`	High risk	64	2026-08-29
`v0.0.0-20160719095102-c92d2d064af3`	High risk	64	2026-08-29
`v0.40.2-0.20260827025057-6499d0e9ce82`	Review	29	2026-08-28
`v0.40.2-0.20260824085758-8547d1a127f7`	Review	29	2026-08-25
`v0.40.2-0.20260824054721-94f7c315c95b`	Review

Block this in CI

PkgRadar gates github.com/future-architect/vuls (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/future-architect/[email protected]

Prefer zero config? Install the GitHub App and it gates every pull request automatically — no pipeline edits, no API key.