Go modules · proxy.golang.org

github.com/kubewharf/katalyst-core

Remote Payload

Why PkgRadar flagged v0.5.51-0.20260730131303-f1e673f4c321

Severity	Signal	Evidence
medium	Remote Payload	—
medium	Remote Payload	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.5.51-0.20260730131303-f1e673f4c321`	Review	24	2026-08-01
`v0.5.51-0.20260723074153-32b6b459a9b8`	Review	24	2026-07-27
`v0.5.50`	Review	24	2026-07-07
`v0.5.50-0.20260701081026-55760946726e`	Review	24	2026-07-02
`v0.5.50-0.20260701063648-ec2b84f0c652`	Review	24	2026-07-02
`v0.5.50-0.20260630062539-3f32f0817fd9`	Review	20	2026-07-01
`v0.5.50-0.20260629095000-7d8acf1e8b17`	Review	20	2026-07-01
`v0.5.49`	Low risk	0	2026-06-11
`v0.5.49-0.20260610135839-ad7ea7260bcd`	Low risk	0	2026-06-11
`v0.5.49-0.20260610095652-fc947adc7227`	Low risk	0	2026-06-11
`v0.5.49-0.20260610065239-2f603f913979`	Low risk	0	2026-06-11
`v0.5.49-0.20260610023622-0f3249c8b7b8`	Low risk	0	2026-06-11

Block this in CI

PkgRadar gates github.com/kubewharf/katalyst-core (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/kubewharf/[email protected]