Go modules · proxy.golang.org

github.com/gobuffalo/buffalo

Remote Payload

Why PkgRadar flagged v0.9.4-0.20170921133715-743e0e033c8d

Severity	Signal	Evidence
medium	Remote Payload	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.9.4-0.20170921133715-743e0e033c8d`	Review	12	2026-08-23
`v0.10.1-0.20171103183815-046a38c41d93`	Review	12	2026-08-23
`v0.12.1-0.20180620235624-a15bbc6f91ce`	Review	12	2026-08-22
`v0.10.3-0.20171129205731-d007eb610dbd`	Review	12	2026-08-16
`v0.0.0-20180502185607-354657dfd815`	Review	12	2026-08-16
`v0.0.0-20181115153518-7cc85d154d00`	Low risk	0	2026-08-12
`v0.18.5-0.20220325181556-999fb9d40067`	Low risk	0	2026-08-06
`v0.13.1-0.20181018220707-dd17e1e69ef4`	Low risk	0	2026-08-01
`v0.18.6-0.20220419200222-81762174d82a`	Low risk	0	2026-07-28
`v0.10.2-0.20171109214611-5a1c36398020`	Review	12	2026-07-28
`v0.11.1-0.20180303161328-5db746907797`	Review	12	2026-07-26
`v0.11.1-0.20180407195645-5bce869fcadd`	Review

Block this in CI

PkgRadar gates github.com/gobuffalo/buffalo (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/gobuffalo/[email protected]

Prefer zero config? Install the GitHub App and it gates every pull request automatically — no pipeline edits, no API key.