Go modules · proxy.golang.org

github.com/getplumber/plumber

Remote Payload

Why PkgRadar flagged v0.4.9-0.20260716153447-cca202e5bcaa

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.4.9-0.20260716153447-cca202e5bcaa`	Review	24	2026-07-18
`v0.4.8`	Review	24	2026-07-18
`v0.4.0`	Review	24	2026-07-16
`v0.3.101`	Review	24	2026-07-16
`v0.4.1`	Review	24	2026-07-16
`v0.4.4-0.20260714103936-3e7d69331894`	Review	24	2026-07-16
`v0.4.3`	Review	24	2026-07-16
`v0.4.3-0.20260710155005-2276ce66e45b`	Review	24	2026-07-12
`v0.4.2`	Review	24	2026-07-12
`v0.3.101-0.20260709114800-3baf582fea1f`	Review	24	2026-07-10
`v0.3.100`	Review	24	2026-07-10
`v0.3.100-0.20260708194948-8f851d55f1c9`	Review	24	2026-07-09
`v0.3.87`	Review	24	2026-07-09
`v0.3.93`	Review	24

Block this in CI

PkgRadar gates github.com/getplumber/plumber (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/getplumber/[email protected]