Go modules · proxy.golang.org

github.com/jjuanrivvera/lemon-squeezy-cli

Remote Payload

Why PkgRadar flagged v0.3.2-0.20260805173419-f149d36abbbf

Severity	Signal	Evidence
medium	Remote Payload	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.3.2-0.20260805173419-f149d36abbbf`	Review	12	2026-08-06
`v0.3.2`	Review	12	2026-08-06
`v0.3.2-0.20260805173126-71eba0b0fecb`	Review	12	2026-08-06
`v0.3.1`	Review	12	2026-07-31
`v0.3.1-0.20260715173151-f0f94a35617f`	Review	12	2026-07-16
`v0.3.0`	Review	12	2026-07-16
`v0.2.5-0.20260714154828-4b87ab95185f`	Review	10	2026-07-15
`v0.2.5-0.20260714145442-e749bade850b`	Review	10	2026-07-15
`v0.2.5-0.20260714041942-3be685ba3989`	Review	8	2026-07-15
`v0.2.5-0.20260713201502-2e225537b07e`	Review	8	2026-07-14
`v0.2.5-0.20260713175610-6a6c59826c3e`	Review	8	2026-07-14
`v0.2.5-0.20260713174916-99929c535c1e`	Review	8	2026-07-14
`v0.2.5-0.20260713153046-da104d9adfb1`

Block this in CI

PkgRadar gates github.com/jjuanrivvera/lemon-squeezy-cli (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/jjuanrivvera/[email protected]