PkgRadar

Go modules · proxy.golang.org

github.com/melvinsh/subfaster/v2

Tls Verification Disabled, Remote Payload

Why PkgRadar flagged v2.10.1

SeveritySignalEvidence
mediumTls Verification Disabledgithub.com/melvinsh/subfaster/[email protected]/pkg/subscraping/agent.go
mediumRemote Payloadgithub.com/melvinsh/subfaster/[email protected]/pkg/subscraping/sources/github/github.go

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

VersionVerdictScoreScanned (UTC)
v2.10.1Review242026-06-22
v2.4.5Review362026-06-22
v2.5.1Review242026-06-22
v2.5.6Review242026-06-22
v2.5.7Review242026-06-22
v2.6.0Review242026-06-22
v2.6.5Review242026-06-22
v2.6.3Review242026-06-22
v2.6.1Review242026-06-22
v2.4.7Review242026-06-22
v2.13.0Review242026-06-22
v2.6.7Review242026-06-22
v2.7.0Review242026-06-22
v2.12.0Review242026-06-22
v2.4.9Review242026-06-22
v2.5.3Review362026-06-22
v2.5.9Review242026-06-22
v2.16.2Review242026-06-22
v2.16.1Review242026-06-22
v2.16.0Review242026-06-22
v2.6.4Review242026-06-22
v2.5.0Review242026-06-22
v2.6.6Review242026-06-22
v2.5.2Review242026-06-22
v2.15.1-0.20260621112116-ff72c750bdefReview242026-06-22
v2.15.0Review242026-06-22

Block this in CI

PkgRadar gates github.com/melvinsh/subfaster/v2 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/melvinsh/subfaster/[email protected]