Go modules · proxy.golang.org

github.com/markphelps/flipt/build

Remote Payload, Tls Verification Disabled, Credential file access

Why PkgRadar flagged v0.0.0-20260807083934-19dbf47a7b51

Severity	Signal	Evidence
medium	Remote Payload	—
medium	Tls Verification Disabled	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260807083934-19dbf47a7b51`	Review	39	2026-08-08
`v0.0.0-20260806133945-d15ff717c622`	Low risk	0	2026-08-08
`v0.0.0-20260802105137-2194b91c25af`	Review	39	2026-08-04
`v0.0.0-20260730224253-7fe1a15c5ba5`	Low risk	0	2026-08-04
`v0.0.0-20260728102058-42111b08d51e`	Review	39	2026-07-29
`v0.0.0-20260727092559-f69b718c0e0e`	Low risk	0	2026-07-29
`v0.0.0-20260724060235-374cc21b1f31`	Review	39	2026-07-25
`v0.0.0-20260723195930-b7aec5312d9e`	Low risk	0	2026-07-25
`v0.0.0-20260718212446-eefd8c5313a9`	Review	39	2026-07-20
`v0.0.0-20260718011037-2ba78353193a`	Low risk	0	2026-07-20
`v0.0.0-20260716034934-9e848049aa37`	Review	39	2026-07-17
`v0.0.0-20260716030431-22b82033c0cb`	Low risk	0	2026-07-17

Block this in CI

PkgRadar gates github.com/markphelps/flipt/build (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/markphelps/flipt/[email protected]