Go modules · proxy.golang.org

github.com/jmpotato/pd

Remote Payload

Why PkgRadar flagged v0.0.0-20260821050134-d9b686cee60b

Severity	Signal
medium	Remote Payload

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260821050134-d9b686cee60b`	Review	12	2026-08-22
`v0.0.0-20260820105723-5d6648e4b040`	Review	12	2026-08-21
`v0.0.0-20260819070454-a0b720772fe5`	Review	12	2026-08-20
`v1.1.0-beta.0.20260729083032-fad3ff991802`	Review	6	2026-08-01
`v0.0.0-20260729083032-fad3ff991802`	Review	6	2026-08-01
`v0.0.0-20260723052714-f7db42521223`	Low risk	0	2026-07-26
`v1.1.0-beta.0.20260713070444-6a2787b4781c`	Low risk	0	2026-07-22
`v0.0.0-20260713070444-6a2787b4781c`	Low risk	0	2026-07-22
`v0.0.0-20260703063321-7f8ee3eaf371`	Low risk	0	2026-07-04
`v0.0.0-20260703054423-29f46b56110e`	Low risk	0	2026-07-04
`v1.1.0-beta.0.20260703042833-1de3200296ab`	Low risk	0	2026-07-04
`v0.0.0-20260703042833-1de3200296ab`	Low risk	0

Block this in CI

PkgRadar gates github.com/jmpotato/pd (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/jmpotato/[email protected]

Prefer zero config? Install the GitHub App and it gates every pull request automatically — no pipeline edits, no API key.