Go modules · proxy.golang.org

github.com/google/go-github

Remote Payload

Why PkgRadar flagged v0.0.0-20171031161751-996760c56486

Severity	Signal	Evidence
medium	Remote Payload	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20171031161751-996760c56486`	Review	12	2026-07-15
`v2.0.1-0.20161129195452-7baedea38fd1+incompatible`	Review	12	2026-07-10
`v0.0.0-20160204014056-05bd5edbd588`	Low risk	0	2026-07-10
`v7.0.1-0.20170512175250-4a42a1def4af+incompatible`	Review	12	2026-07-09
`v8.0.1-0.20170718214501-d4206f97f4cb+incompatible`	Review	12	2026-07-09
`v3.0.1-0.20170220210542-23d6cb9cacb5+incompatible`	Review	12	2026-07-06
`v0.0.0-20160331222554-4403af9a2a0f`	Review	8	2026-06-25
`v0.0.0-20160824204242-a59a35745f99`	Review	4	2026-06-19
`v0.0.0-20161103162928-54943985871d`	Low risk	0	2026-06-11
`v0.0.0-20150511213514-9eb187bac4eb`	Low risk	0	2026-06-09

Block this in CI

PkgRadar gates github.com/google/go-github (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/google/[email protected]