Go modules · proxy.golang.org

github.com/google/go-github/tools

Remote Payload, Go Mod Replace Local

Why PkgRadar flagged v0.0.0-20260728185857-34349a88bac3

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260728185857-34349a88bac3`	Review	34	2026-07-30
`v0.0.0-20260725235956-7de90cf05e93`	Review	34	2026-07-27
`v0.0.0-20260721212153-e5f31b26e0f8`	Review	34	2026-07-22
`v0.0.0-20260721112151-9549a7a99ad6`	Review	34	2026-07-22
`v0.0.0-20260718130855-227adb57e024`	Review	34	2026-07-19
`v0.0.0-20260717142249-8d7ad2d65ad7`	Review	34	2026-07-18
`v0.0.0-20260716220005-bf1261baf729`	Review	34	2026-07-18
`v0.0.0-20260716154740-c8254104acc3`	Review	34	2026-07-17
`v0.0.0-20260715112558-d0c2d216de4a`	Review	34	2026-07-16
`v0.0.0-20260710152937-c0e23235476f`	Review	34	2026-07-12
`v0.0.0-20260708183525-da81e1715e88`	Review	34	2026-07-10
`v0.0.0-20260707153851-90a1849a9f5e`	Review	34	2026-07-09

Block this in CI

PkgRadar gates github.com/google/go-github/tools (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/google/go-github/[email protected]