PkgRadar

Go modules · proxy.golang.org

github.com/hashicorp/Terraform-ls

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged v0.36.0

SeveritySignalEvidence
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/hashicorp/[email protected]/internal/protocol/gen/gen.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.36.0Review122026-06-13
v0.36.5Review122026-06-13
v0.37.0Review122026-06-13
v0.31.2Review122026-06-13
v0.30.0Review122026-06-13
v0.34.0-beta1Review122026-06-13
v0.22.0Review152026-06-13
v0.18.0Review152026-06-13
v0.38.1Review122026-06-13
v0.19.1Review152026-06-13
v0.32.4Review122026-06-13
v0.36.4Review122026-06-13
v0.19.0Review152026-06-13
v0.32.1Review122026-06-13
v0.17.1Review152026-06-13
v0.28.1Review122026-06-13
v0.39.0-beta4Review122026-06-13
v0.25.0Review152026-06-13
v0.31.0-betaReview122026-06-13
v0.34.2Review122026-06-13
v0.9.0Review32026-06-13
v0.27.0Review152026-06-13
v0.36.2Review122026-06-13
v0.4.0Review32026-06-13
v0.4.1Review32026-06-13
v0.5.4Review32026-06-13
v0.34.0Review122026-06-13
v0.31.4Review122026-06-13
v0.5.1Review32026-06-13
v0.25.1Review152026-06-13
v0.14.0Review122026-06-13
v0.35.0-alpha1Review122026-06-13
v0.3.1Review32026-06-13
v0.38.6Review122026-06-13
v0.2.1Review32026-06-13
v0.36.3Review122026-06-13
v0.1.0Low risk02026-06-13
v0.39.0-beta2Review122026-06-13
v0.36.1Review122026-06-13
v0.35.0-beta2Review122026-06-13
v0.16.2Review152026-06-13
v0.39.0-beta1Review122026-06-13
v0.35.0-beta1Review122026-06-13

Block this in CI

PkgRadar gates github.com/hashicorp/Terraform-ls (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/hashicorp/[email protected]
Start free — 25 scans / moView full evidence