Go modules · proxy.golang.org

github.com/geogboe/boxy

Tls Verification Disabled

Why PkgRadar flagged v0.1.41

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.1.41`	Review	48	2026-08-22
`v0.1.41-0.20260821205955-851942c49c88`	Review	48	2026-08-22
`v0.1.41-0.20260821195727-fb499970f4b0`	Review	48	2026-08-22
`v0.1.41-0.20260821195507-4538f5689790`	Review	48	2026-08-22
`v0.1.40`	Review	48	2026-08-22
`v0.1.39`	Review	48	2026-08-15
`v0.1.37`	Review	48	2026-08-14
`v0.1.35`	Review	48	2026-08-14
`v0.1.34`	Review	48	2026-08-13
`v0.1.33`	Review	36	2026-08-12
`v0.1.32`	Review	24	2026-08-11
`v0.1.31`	Review	24	2026-08-07
`v0.1.30`	Review	24	2026-08-07
`v0.1.29`	Low risk	0	2026-07-11
`v0.1.28`	Low risk

Block this in CI

PkgRadar gates github.com/geogboe/boxy (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/geogboe/[email protected]

Prefer zero config? Install the GitHub App and it gates every pull request automatically — no pipeline edits, no API key.