Go modules · proxy.golang.org

github.com/gravitl/netmaker

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged v0.17.2-0.20230213174816-7f9552b04d96

Severity	Signal	Evidence
medium	Remote Payload	matched "raw.githubusercontent.com" · github.com/gravitl/[email protected]/auth/templates.go

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v1.6.1-0.20260618055954-43bc37254d7f`	Low risk	0	2026-06-19
`v1.6.1-0.20260615115423-8c71fcbb31aa`	Low risk	0	2026-06-19
`v0.17.2-0.20230213174816-7f9552b04d96`	Review	12	2026-06-19
`v1.5.2-0.20260612030258-57f4076ac06a`	Low risk	0	2026-06-17
`v1.6.0`	Low risk	0	2026-06-13
`v1.5.2-0.20260606055337-79ccbfbc939e`	Low risk	0	2026-06-10
`v1.5.2-0.20260601093845-006dfdced61c`	Low risk	0	2026-06-02
`v1.5.2-0.20260601131500-3bd7666aa461`	Low risk	0	2026-06-02
`v1.5.2-0.20260601081057-316df944e0e8`	Low risk	0	2026-06-02
`v1.5.2-0.20260531031124-20060c100071`	Low risk	0	2026-06-01

Block this in CI

PkgRadar gates github.com/gravitl/netmaker (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/gravitl/[email protected]