PkgRadar

Go modules · proxy.golang.org

github.com/goplus/llgo

Remote Payload: matched "github.com/WebAssembly/wasi-sdk/releases/download"

Why PkgRadar flagged v0.0.0-20260204233643-07b712cdf315

SeveritySignalEvidence
mediumRemote Payloadmatched "github.com/WebAssembly/wasi-sdk/releases/download" · github.com/goplus/[email protected]/internal/crosscompile/crosscompile.go
mediumGo Mod Replace Localgo.mod replace directive redirects to a local filesystem path — non-portable / dev-time only. · github.com/goplus/[email protected]/go.mod

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260204233643-07b712cdf315Review222026-06-16
v0.13.1-0.20260614024325-28e68c139a99Review222026-06-15
v0.0.0-20260614024325-28e68c139a99Review222026-06-15
v0.0.0-20260612093601-be2f45142963Review222026-06-14
v0.13.1-0.20260612093601-be2f45142963Review222026-06-13
v0.0.0-20260612020555-cd89929c430cReview222026-06-13
v0.13.1-0.20260612011246-20c7e5a1a802Review222026-06-13
v0.13.1-0.20260611083349-62b186ffaa20Review222026-06-12
v0.0.0-20260610080239-45f670f55994Review222026-06-12
v0.13.1-0.20260610080239-45f670f55994Review222026-06-11
v0.13.1-0.20260607133044-b3b5b9c8c7f9Review222026-06-08
v0.0.0-20260606080016-44e3c9d265acReview222026-06-08
v0.13.1-0.20260605025324-14a3c6bbfbe1Review222026-06-06
v0.13.1-0.20260604033153-eecba9f4f456Review222026-06-05
v0.0.0-20260604033153-eecba9f4f456Review222026-06-05
v0.0.0-20260603081057-a65b6c7e4aeaReview222026-06-04
v0.13.1-0.20260603081057-a65b6c7e4aeaReview222026-06-04
v0.13.1-0.20260601001843-d0e30346f326Review222026-06-04
v0.0.0-20260601001843-d0e30346f326Review222026-06-04
v0.0.0-20250625151445-f0728c4fe028Review222026-05-31

Block this in CI

PkgRadar gates github.com/goplus/llgo (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/goplus/[email protected]
Start free — 25 scans / moView full evidence