Go modules · proxy.golang.org

github.com/geonet/delta

Go Generate Shell: //go:generate directive shells out to curl/wget/bash — runs during `go generate`.

Why PkgRadar flagged v0.0.0-20260614225359-0cd7143c0b08

Severity	Signal	Evidence
medium	Go Generate Shell	//go:generate directive shells out to curl/wget/bash — runs during `go generate`. · github.com/geonet/[email protected]/internal/stationxml/doc.go
medium	Go Generate Shell	//go:generate directive shells out to curl/wget/bash — runs during `go generate`. · github.com/geonet/[email protected]/meta/set.go
medium	Go Generate Shell	//go:generate directive shells out to curl/wget/bash — runs during `go generate`. · github.com/geonet/[email protected]/tools/sitelogs/main.go

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260614225359-0cd7143c0b08`	Review	45	2026-06-16
`v0.0.0-20260612025149-23d0a0390ef4`	Review	45	2026-06-13
`v0.0.0-20260610041037-95fcb5033f5d`	Review	45	2026-06-11
`v0.0.0-20260608015204-2dc831ffe8dd`	Review	45	2026-06-09
`v0.0.0-20260605010414-bcd728d665c1`	Review	45	2026-06-06
`v0.0.0-20260603001625-1ab83ec52da4`	Review	45	2026-06-04
`v0.0.0-20260528001325-bf6dcc2700f4`	Review	45	2026-05-30

Block this in CI

PkgRadar gates github.com/geonet/delta (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/geonet/[email protected]