Go modules · proxy.golang.org

github.com/hecatehq/hecate

Remote Payload

Why PkgRadar flagged v0.3.0-alpha.1.0.20260714160259-054cad8ca4b3

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.3.0-alpha.1.0.20260714160259-054cad8ca4b3`	Review	24	2026-07-16
`v0.3.0-alpha.1`	Review	24	2026-07-16
`v0.2.0-alpha.4.0.20260625083728-2f2143458773`	Review	9	2026-06-26
`v0.2.0-alpha.2`	Review	9	2026-06-26
`v0.2.0-alpha.3`	Review	9	2026-06-26
`v0.2.0-alpha.4`	Review	9	2026-06-26
`v0.1.0-alpha.39.0.20260530193656-a68441f6b84b`	Review	1	2026-06-18
`v0.1.0-alpha.43`	Review	1	2026-06-18
`v0.1.0-alpha.39.0.20260603010456-aea9520ec296`	Review	1	2026-06-18
`v0.1.0-alpha.45`	Review	1	2026-06-18
`v0.1.0-alpha.39.0.20260601183335-d2b629ebe0fa`	Review	1	2026-06-18

Block this in CI

PkgRadar gates github.com/hecatehq/hecate (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/hecatehq/[email protected]