PkgRadar

Go modules · proxy.golang.org

github.com/markphelps/flipt

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged v1.61.2-0.20260602045603-5279cf2fdba5

SeveritySignalEvidence
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/markphelps/[email protected]/cmd/flipt/config.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v1.61.2-0.20260602045603-5279cf2fdba5Review122026-06-03
v0.0.0-20260602045603-5279cf2fdba5Review122026-06-03
v0.0.0-20260601173013-c7d6fb353c0aReview242026-06-03
v0.0.0-20260530103329-949f798c08efReview122026-05-31
v1.61.2-0.20260530103329-949f798c08efReview122026-05-31
v0.0.0-20260529153310-e93418bf9e75Review242026-05-31
v0.0.0-20260528061026-a130436ecc08Review222026-05-29
v1.61.2-0.20260528061026-a130436ecc08Review222026-05-29
v0.0.0-20260527230738-e7645dbff4c4Review292026-05-29

Block this in CI

PkgRadar gates github.com/markphelps/flipt (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/markphelps/[email protected]