Go modules · proxy.golang.org

github.com/golang/build

Go Generate Shell, Tls Verification Disabled, Remote Payload +2 more

Why PkgRadar flagged v0.0.0-20260630201927-26858f2f44b9

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260730193746-e72aa45f4ca8`	Review	83	2026-07-31
`v0.0.0-20260730181216-138e92c4b106`	Review	83	2026-07-31
`v0.0.0-20260729170316-d6847b4631a4`	Review	83	2026-07-30
`v0.0.0-20260715183034-a43f90886f2e`	Review	83	2026-07-17
`v0.0.0-20260714142937-74861f19d89a`	Review	83	2026-07-15
`v0.0.0-20260709202056-f659df35e95c`	Review	83	2026-07-11
`v0.0.0-20260709135924-5b492775ecd3`	Review	83	2026-07-10
`v0.0.0-20260708222831-c49463d7ff26`	Review	83	2026-07-10
`v0.0.0-20260708183338-e8306c14b708`	Review	83	2026-07-09
`v0.0.0-20260630201927-26858f2f44b9`	High risk	59	2026-07-02
`v0.0.0-20260624144100-34cf1b4f5869`	Review	20	2026-06-25
`v0.0.0-20260624011942-4d580c154901`	Review	20	2026-06-25

Block this in CI

PkgRadar gates github.com/golang/build (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/golang/[email protected]