Go modules · proxy.golang.org

github.com/lindgrenj6/sources-api-go

Credential file access

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260831132119-8bf256ce952b`	Review	8	2026-09-02
`v0.0.0-20260826131449-14cb0f06d900`	Review	8	2026-08-31
`v0.0.0-20260820163814-d6d8745ada85`	Review	8	2026-08-21
`v0.0.0-20260716123344-8805a21e01d5`	Low risk	0	2026-07-18
`v0.0.0-20260714155203-3d7ae8c62f9d`	Low risk	0	2026-07-16
`v0.0.0-20260709152812-18211bc64948`	Low risk	0	2026-07-11
`v0.0.0-20260626181917-78d21cc6afe0`	Low risk	0	2026-06-27
`v0.0.0-20260623125016-ec107b9ace2a`	Low risk	0	2026-06-24
`v0.0.0-20260612133913-746b93bea3ae`	Low risk	0	2026-06-14
`v0.0.0-20260608174419-9208f0540fc4`	Low risk	0	2026-06-11
`v0.0.0-20260601154515-2abf2acd4e9c`	Low risk	0	2026-06-04

Verdict reflects the highest-severity signal, not just the additive score: a single high-severity finding outranks a higher score made up of lower-severity ones, so a lower-scored version can still carry the stronger verdict.

Block this in CI

PkgRadar gates github.com/lindgrenj6/sources-api-go (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/lindgrenj6/[email protected]

Prefer zero config? Install the GitHub App and it gates every pull request automatically — no pipeline edits, no API key.

Start free — 25 scans / mo View full evidence