PkgRadar

Go modules · proxy.golang.org

github.com/microsoft/go-crypto-openssl

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged v0.0.0-20260602094349-4d656068110f

SeveritySignalEvidence
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/microsoft/[email protected]/internal/fakecgo/update_tool.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260602094349-4d656068110fReview122026-06-10
v0.0.0-20260604144336-3f43797a7fb0Review122026-06-05
v0.0.0-20260604050240-f712391bfd85Review122026-06-05
v0.0.0-20260603102920-ac86e6a4b864Review122026-06-04
v0.0.0-20260601193623-c4e5f33276f2Review122026-06-02
v0.0.0-20260528080148-3cda41a15b98Review122026-05-29

Block this in CI

PkgRadar gates github.com/microsoft/go-crypto-openssl (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/microsoft/[email protected]