Go modules · proxy.golang.org

github.com/maintainerd/auth

Shell Credential File Read

Why PkgRadar flagged v0.0.0-20260622054452-82af06d9fdfc

Severity	Signal	Evidence
high	Shell Credential File Read	github.com/maintainerd/[email protected]/internal/platform/jwt/jwt.go

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260622054452-82af06d9fdfc`	High risk	45	2026-06-25
`v0.0.0-20260620095824-c716a22dbd2b`	Low risk	0	2026-06-21
`v0.0.0-20260619083201-c07bda4feccd`	Low risk	0	2026-06-21
`v0.0.0-20260601152923-4128ded80499`	Low risk	0	2026-06-02
`v0.0.0-20260601052713-9dcda0ada60e`	Low risk	0	2026-06-02
`v0.0.0-20260601050544-814d7ceb4637`	Low risk	0	2026-06-02
`v0.0.0-20260601045252-2e5785623ebf`	Low risk	0	2026-06-02
`v0.0.0-20260601042424-27bfa5b16bed`	Low risk	0	2026-06-02
`v0.0.0-20260601040936-12ea71be3975`	Low risk	0	2026-06-02
`v0.0.0-20260601033810-863f311b5adb`	Low risk	0	2026-06-02
`v0.0.0-20260601032516-3d51585ceebd`	Low risk	0	2026-06-02
`v0.0.0-20260601031108-2d585842aa0d`	Low risk	0	2026-06-02
`v0.0.0-20260601022604-a88a69477380`	Low risk	0	2026-06-02

Block this in CI

PkgRadar gates github.com/maintainerd/auth (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/maintainerd/[email protected]