Go modules · proxy.golang.org

github.com/jandedobbeleer/oh-my-posh3/src

Remote Payload, Credential file access

Why PkgRadar flagged v0.0.0-20260724123313-ca2f764101bb

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260724123313-ca2f764101bb`	Review	34	2026-07-26
`v0.0.0-20260721063956-da636e69e93f`	Review	34	2026-07-22
`v0.0.0-20260720165004-7271d249a9c2`	Review	34	2026-07-21
`v0.0.0-20260717115429-161f1d9610f5`	Review	34	2026-07-18
`v0.0.0-20260715070539-99a5a2ed5ace`	Review	34	2026-07-17
`v0.0.0-20260711191342-d193f441bfc1`	Review	34	2026-07-14
`v0.0.0-20260710144337-881ef7967a1a`	Review	34	2026-07-11
`v0.0.0-20260709053622-7b4725691519`	Review	34	2026-07-10
`v0.0.0-20260707132819-8719f8f63c79`	Review	34	2026-07-09
`v0.0.0-20260702151358-17fff5231215`	Review	34	2026-07-03
`v0.0.0-20260626070201-6cbf37ca1429`	Review	23	2026-06-28
`v0.0.0-20260623084902-2e17b2fd6966`	Review	13	2026-06-25

Block this in CI

PkgRadar gates github.com/jandedobbeleer/oh-my-posh3/src (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/jandedobbeleer/oh-my-posh3/[email protected]