Go modules · proxy.golang.org

github.com/krisarmstrong/stem

Remote Payload, Tls Verification Disabled, Go Cgo Preamble +1 more

Why PkgRadar flagged v0.24.49-0.20260902010136-9976795b9a74

Severity	Signal
medium	Remote Payload ×4
medium	Tls Verification Disabled ×3

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.24.49-0.20260902010136-9976795b9a74`	Review	60	2026-09-03
`v0.24.48`	Review	60	2026-09-03
`v0.24.47`	Review	60	2026-09-01
`v0.24.47-0.20260829123052-54776ed72cff`	Review	60	2026-08-30
`v0.24.47-0.20260829121035-95236acc4743`	Review	60	2026-08-30
`v0.24.46`	Review	60	2026-08-30
`v0.24.46-0.20260829045531-ea55737370a9`	Review	60	2026-08-30
`v0.24.46-0.20260828230218-5b8670a22bdf`	Review	60	2026-08-30
`v0.24.44`	Review	60	2026-08-30
`v0.24.45`	Review	60	2026-08-30
`v0.24.43-0.20260828024737-bebdbd28a0f5`	Review	60	2026-08-29
`v0.24.43-0.20260828021305-3a11db122336`	Review	60	2026-08-29
`v0.24.42`	Review	60	2026-08-29

Block this in CI

PkgRadar gates github.com/krisarmstrong/stem (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/krisarmstrong/[email protected]

Prefer zero config? Install the GitHub App and it gates every pull request automatically — no pipeline edits, no API key.