Go modules · proxy.golang.org

github.com/jongio/azd-app/cli

Remote Payload, Credential file access, Obfuscation Density

Why PkgRadar flagged v0.0.0-20260712201936-37e07e77fe0b

Severity	Signal	Evidence
medium	Remote Payload	—
medium	Remote Payload	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260712201936-37e07e77fe0b`	Review	39	2026-07-13
`v0.0.0-20260711195728-dd00a474d77f`	Review	39	2026-07-13
`v0.0.0-20260709195541-07ef07b263b9`	Review	39	2026-07-11
`v0.0.0-20260703200033-1ccc9edbe6df`	Review	39	2026-07-05
`v0.0.0-20260629202352-2ce4fd0b4882`	Review	39	2026-06-30
`v0.0.0-20260628204205-181c68a0f78e`	Review	39	2026-06-29
`v0.0.0-20260626200229-74e960c5994d`	Review	39	2026-06-27
`v0.0.0-20260626062727-a9a62df3694e`	Review	39	2026-06-27
`v0.0.0-20260626033830-04ee089b1461`	Review	39	2026-06-27
`v0.0.0-20260625221815-bf85d52ed1c6`	Review	39	2026-06-26
`v0.0.0-20260619142946-98195f6e8596`	Review	39	2026-06-20
`v0.0.0-20260619023245-6b04785bb959`	Review	39	2026-06-20

Block this in CI

PkgRadar gates github.com/jongio/azd-app/cli (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/jongio/azd-app/[email protected]