Go modules · proxy.golang.org

github.com/maszynka/gh-crfix

Remote Payload

Why PkgRadar flagged v0.0.0-20260830232834-9e3083608e93

Severity	Signal
medium	Remote Payload

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260830232834-9e3083608e93`	Review	12	2026-09-01
`v0.0.0-20260829142724-671d1edc0206`	Review	12	2026-08-30
`v0.0.0-20260829020948-44b30d42ea96`	Review	12	2026-08-30
`v0.0.0-20260826040440-3581d6961ffb`	Review	12	2026-08-27
`v0.0.0-20260825224314-0c00b8f60bd2`	Review	12	2026-08-27
`v0.0.0-20260825194416-74c787c5f170`	Review	12	2026-08-27
`v0.0.0-20260825165329-3acf3d154582`	Review	12	2026-08-26
`v0.0.0-20260825155755-d12671a7dd0a`	Review	12	2026-08-26
`v0.0.0-20260825094935-bdd90aadda67`	Review	12	2026-08-26
`v0.0.0-20260812115615-9904692a09fb`	Review	12	2026-08-13
`v0.0.0-20260812101836-051dcc971ed4`	Review	12	2026-08-13
`v0.0.0-20260806000906-322d26f3c440`	Review	12	2026-08-07

Block this in CI

PkgRadar gates github.com/maszynka/gh-crfix (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/maszynka/[email protected]

Prefer zero config? Install the GitHub App and it gates every pull request automatically — no pipeline edits, no API key.