Go modules · proxy.golang.org

github.com/itmisx/deepx-code

Remote Payload

Why PkgRadar flagged v0.2.107-0.20260806083843-ae8f16dbde7f

Severity	Signal
medium	Remote Payload ×9

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.2.107-0.20260806083843-ae8f16dbde7f`	Review	24	2026-08-07
`v0.2.106`	Review	24	2026-08-07
`v0.2.104`	Review	24	2026-08-05
`v0.2.105`	Review	24	2026-08-05
`v0.2.100`	Review	14	2026-07-30
`v0.2.99`	Review	14	2026-07-30
`v0.2.98`	Review	14	2026-07-30
`v0.2.103`	Review	11	2026-07-30
`v0.2.102`	Review	7	2026-07-27
`v0.2.102-0.20260725104100-00e93d77051c`	Review	4	2026-07-26
`v0.2.101`	Review	4	2026-07-26
`v0.2.92`	Low risk	0	2026-07-20
`v0.2.93`	Low risk	0	2026-07-20
`v0.2.97`	Low risk	0	2026-07-20
`v0.2.96`	Low risk

Block this in CI

PkgRadar gates github.com/itmisx/deepx-code (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/itmisx/[email protected]

Prefer zero config? Install the GitHub App and it gates every pull request automatically — no pipeline edits, no API key.