Go modules · proxy.golang.org

github.com/jandedobbeleer/oh-my-posh/src

Remote Payload, Credential file access

Why PkgRadar flagged v0.0.0-20260727000712-79eda3d8c7f7

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260727000712-79eda3d8c7f7`	Review	34	2026-07-28
`v0.0.0-20260724123313-ca2f764101bb`	Review	34	2026-07-25
`v0.0.0-20260721063956-da636e69e93f`	Review	34	2026-07-22
`v0.0.0-20260721000750-f0d656934ac6`	Review	34	2026-07-21
`v0.0.0-20230922010717-44c9a3cf589b`	Review	34	2026-07-21
`v0.0.0-20260720165004-7271d249a9c2`	Review	34	2026-07-21
`v0.0.0-20260719080937-b81a4a246395`	Review	34	2026-07-20
`v0.0.0-20260718185638-302c3df9c4c1`	Review	34	2026-07-19
`v0.0.0-20260717115429-161f1d9610f5`	Review	34	2026-07-18
`v0.0.0-20260716050012-439202c88190`	Review	34	2026-07-17
`v0.0.0-20260715070539-99a5a2ed5ace`	Review	34	2026-07-16
`v0.0.0-20260715043156-a0b0908aa599`	Review	34	2026-07-16

Block this in CI

PkgRadar gates github.com/jandedobbeleer/oh-my-posh/src (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/jandedobbeleer/oh-my-posh/[email protected]