Go modules · proxy.golang.org

github.com/microsoft/vscode-python

Credential file access, Obfuscation Density

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v2026.4.1-0.20260825191745-a4fa16eced0c+incompatible`	Review	3	2026-08-31
`v0.3.12-0.20210121234027-c0fe6b53ced9`	Low risk	0	2026-07-20
`v0.3.12-0.20201215235412-b1008e0699b5`	Low risk	0	2026-07-20
`v0.3.12-0.20201111192854-ab63f02232c3`	Low risk	0	2026-07-20
`v0.3.12-0.20201119032510-0609d3d65443`	Low risk	0	2026-07-20
`v0.3.12-0.20201027212324-3e137f29445d`	Low risk	0	2026-07-20
`v0.3.12-0.20221103043558-5b2cd4657227`	Low risk	0	2026-07-20
`v0.3.12-0.20221012181852-347094f01761`	Low risk	0	2026-07-20
`v0.3.12-0.20220804201338-16af70cc57f6`	Low risk	0	2026-07-20
`v0.3.12-0.20221101161514-e8ab9be6f4dd`	Low risk	0	2026-07-20
`v0.3.12-0.20220901185855-814e9b716a94`	Low risk	0	2026-07-20
`v0.3.12-0.20221006171445-456ca377b815`

Block this in CI

PkgRadar gates github.com/microsoft/vscode-python (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/microsoft/[email protected]+incompatible

Prefer zero config? Install the GitHub App and it gates every pull request automatically — no pipeline edits, no API key.