PkgRadar

Go modules · proxy.golang.org

github.com/luxfi/consensus

Shell Credential File Read

Why PkgRadar flagged v1.25.19

SeveritySignalEvidence
highShell Credential File Readgithub.com/luxfi/[email protected]/context/context.go
highShell Credential File Readgithub.com/luxfi/[email protected]/runtime/runtime.go

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

VersionVerdictScoreScanned (UTC)
v1.25.19High risk502026-06-25
v1.25.18High risk502026-06-25
v1.25.21High risk502026-06-25
v1.25.17High risk502026-06-25
v1.25.17-0.20260607062656-4508637697a4Low risk02026-06-08
v1.25.16Low risk02026-06-08
v1.25.15Low risk02026-06-07
v1.25.10Low risk02026-06-03
v1.25.12Low risk02026-06-03
v1.25.14Low risk02026-06-03
v1.25.13Low risk02026-06-03
v1.25.11Low risk02026-06-03
v1.25.9Low risk02026-06-03
v1.25.8Low risk02026-06-03
v1.25.6Low risk02026-06-02
v1.25.7Low risk02026-06-02
v1.25.5Low risk02026-06-02
v1.25.4Low risk02026-06-02
v1.25.3Low risk02026-06-01
v1.25.2Low risk02026-06-01
v1.25.0Low risk02026-05-31

Block this in CI

PkgRadar gates github.com/luxfi/consensus (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/luxfi/[email protected]
Start free — 25 scans / moView full evidence