Go modules · proxy.golang.org

github.com/industrial-asset-hub/asset-link-sdk/v4

Remote Payload

Why PkgRadar flagged v4.1.1-0.20260824060729-f3e487c1d29d

Severity	Signal	Evidence
medium	Remote Payload	—
medium	Remote Payload	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v4.1.1-0.20260824060729-f3e487c1d29d`	Review	24	2026-08-25
`v4.1.1-0.20260821045552-f6137001eff6`	Review	24	2026-08-22
`v4.1.1-0.20260820121919-ccdf93e07a63`	Review	24	2026-08-22
`v4.1.1-0.20260820102556-2642d106eb13`	Review	24	2026-08-21
`v4.1.1-0.20260818124847-b2295a525296`	Review	24	2026-08-20
`v4.1.1-0.20260818051719-e7323ad636e0`	Review	24	2026-08-19
`v4.1.1-0.20260818044644-e4ea496d6829`	Review	24	2026-08-19
`v4.1.1-0.20260812054949-230a4d52c01e`	Review	24	2026-08-13
`v4.1.1-0.20260811125218-9a85f7fe6a86`	Review	24	2026-08-12
`v4.1.1-0.20260806041341-bacdfc1d74a2`	Review	24	2026-08-07
`v4.1.1-0.20260806035141-64880fca80be`	Review	24	2026-08-07
`v4.1.1-0.20260804105714-6b3a0436fe78`	Review

Block this in CI

PkgRadar gates github.com/industrial-asset-hub/asset-link-sdk/v4 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/industrial-asset-hub/asset-link-sdk/[email protected]

Prefer zero config? Install the GitHub App and it gates every pull request automatically — no pipeline edits, no API key.