Go modules · proxy.golang.org

github.com/medizininformatik-initiative/aether

Remote Payload, Credential file access

Why PkgRadar flagged v1.2.0

Severity	Signal	Evidence
medium	Remote Payload	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v1.2.0`	Review	15	2026-08-21
`v1.1.1-0.20260819111228-728057825438`	Review	15	2026-08-20
`v1.1.0`	Review	15	2026-08-20
`v1.0.0`	Review	15	2026-08-18
`v0.17.1-0.20260811005322-c3b69ece9009`	Review	15	2026-08-13
`v0.17.0`	Review	15	2026-08-13
`v0.16.1-0.20260806044711-27d699dc252c`	Review	15	2026-08-07
`v0.16.0`	Review	15	2026-08-07
`v0.15.1-0.20260804125344-a1a7e03a87e0`	Review	15	2026-08-05
`v0.15.0`	Review	15	2026-08-05
`v0.14.1-0.20260714005406-3973c41d1463`	Review	2	2026-07-15
`v0.14.0`	Review	2	2026-07-15
`v0.13.0`	Low risk	0	2026-07-11
`v0.11.1-0.20260708194051-deaac0715c01`	Low risk

Block this in CI

PkgRadar gates github.com/medizininformatik-initiative/aether (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/medizininformatik-initiative/[email protected]

Prefer zero config? Install the GitHub App and it gates every pull request automatically — no pipeline edits, no API key.