PkgRadar

Go modules · proxy.golang.org

github.com/jandedobbeleer/oh-my-posh

Credential file access: matched "AWS_ACCESS_KEY"

Scanned versions

VersionVerdictScoreScanned (UTC)
v29.16.0+incompatibleReview32026-06-17
v0.0.0-20260616190526-40ce7a3ac4a5Review32026-06-17
v0.0.0-20260610114451-ec0b8b94d274Low risk02026-06-11
v29.15.1+incompatibleLow risk02026-06-11
v0.0.0-20260609195231-33c72f05c16fLow risk02026-06-10
v29.15.0+incompatibleLow risk02026-06-10
v29.14.1-0.20260609000747-7ae38e648cdc+incompatibleLow risk02026-06-10
v0.0.0-20260609000747-7ae38e648cdcLow risk02026-06-10
v29.14.1-0.20260604105257-00aa50da3b72+incompatibleLow risk02026-06-05
v0.0.0-20260604105257-00aa50da3b72Low risk02026-06-05
v29.14.1-0.20260603180617-c6e5f9442e53+incompatibleLow risk02026-06-05
v0.0.0-20260603180617-c6e5f9442e53Low risk02026-06-05
v29.14.1-0.20260601001158-86f59697f2b3+incompatibleLow risk02026-06-02
v0.0.0-20260601001158-86f59697f2b3Low risk02026-06-02
v29.14.1-0.20260529145551-0424da2cabca+incompatibleLow risk02026-05-30

Block this in CI

PkgRadar gates github.com/jandedobbeleer/oh-my-posh (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/jandedobbeleer/[email protected]+incompatible
Start free — 25 scans / moView full evidence