Go modules · proxy.golang.org

github.com/libgit2/git2go

Remote Payload, Go Cgo Preamble

Why PkgRadar flagged v0.0.0-20130305200555-439f7acf2865

Severity	Signal	Evidence
medium	Remote Payload	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20130305195304-b1d50b70ea8c`	Low risk	0	2026-07-19
`v0.0.0-20130305200031-1926f913b37e`	Low risk	0	2026-07-19
`v0.0.0-20130305200555-439f7acf2865`	Review	12	2026-07-19
`v0.0.0-20130305204755-93ab5a1c3e81`	Review	12	2026-07-19
`v0.0.0-20130305211458-dd2ad2bf6b6f`	Review	12	2026-07-19
`v0.0.0-20130305221807-dce75a897479`	Review	12	2026-07-19
`v0.0.0-20130305222549-2885e3fe0cc4`	Review	12	2026-07-19
`v0.0.0-20130306004753-d43561fbf711`	Review	12	2026-07-19
`v0.0.0-20130306005940-9b6d570748ae`	Review	12	2026-07-19
`v0.0.0-20130306121053-33f4594e9c0c`	Review	12	2026-07-19
`v0.0.0-20130306123953-23ba0f1e6dbf`	Review	12	2026-07-19
`v0.0.0-20130306154816-bdfd8736bc8c`	Review	12	2026-07-19

Block this in CI

PkgRadar gates github.com/libgit2/git2go (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/libgit2/[email protected]