PkgRadar

Go modules · proxy.golang.org

github.com/jbeck018/howlerops

Shell Credential File Read, Remote Payload, Go Mod Replace Local +2 more

Why PkgRadar flagged v0.17.13

SeveritySignalEvidence
highShell Credential File Readgithub.com/jbeck018/[email protected]/internal/apikeys/service.go
highShell Credential File Readgithub.com/jbeck018/[email protected]/internal/auth/service.go
highShell Credential File Readgithub.com/jbeck018/[email protected]/pkg/crypto/keystore.go
highShell Credential File Readgithub.com/jbeck018/[email protected]/pkg/storage/turso/master_key_store.go
highShell Credential File Readgithub.com/jbeck018/[email protected]/pkg/storage/turso/org_envelope_store.go
mediumRemote Payloadgithub.com/jbeck018/[email protected]/internal/ai/ollama_detector.go
mediumRemote Payloadgithub.com/jbeck018/[email protected]/updater.go
mediumGo Mod Replace Localgithub.com/jbeck018/[email protected]/go.mod

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.17.13High risk1342026-06-25
v0.17.9High risk1342026-06-25
v0.17.7High risk1342026-06-25
v0.18.0High risk1342026-06-25
v0.17.10High risk1342026-06-25
v0.17.12High risk1342026-06-25
v0.17.11High risk1342026-06-25
v0.17.15High risk1342026-06-25
v0.17.16High risk1342026-06-25
v0.17.8High risk1342026-06-25
v0.17.14High risk1342026-06-25

Block this in CI

PkgRadar gates github.com/jbeck018/howlerops (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/jbeck018/[email protected]
Start free — 25 scans / moView full evidence
github.com/jbeck018/howlerops — Go modules security scan | PkgRadar