PkgRadar

Go modules · proxy.golang.org

github.com/growth-cadet/coding-agent-metrics-collector

Credential file access: matched "id_rsa"

Why PkgRadar flagged v0.0.6

SeveritySignalEvidence
mediumCredential file accessmatched "id_rsa" · github.com/growth-cadet/[email protected]/internal/config/config.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.6Review192026-06-03
v0.0.7Review192026-06-03
v0.0.8Review192026-06-03
v0.0.4Review192026-06-03
v0.0.1Review192026-06-03
v0.0.3Review192026-06-03
v0.0.2Review192026-06-03
v0.0.5Review192026-06-03

Block this in CI

PkgRadar gates github.com/growth-cadet/coding-agent-metrics-collector (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/growth-cadet/[email protected]