PkgRadar

Go modules · proxy.golang.org

github.com/modelcontextprotocol/registry

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged v1.7.10-0.20260605070833-fecef4f9ed5a

SeveritySignalEvidence
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/modelcontextprotocol/[email protected]/tools/extract-server-schema/main.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v1.7.10-0.20260605070833-fecef4f9ed5aReview122026-06-07
v0.0.0-20260605070833-fecef4f9ed5aReview122026-06-07
v0.0.0-20260603145643-685e354b2fa3Review122026-06-05
v0.0.0-20260531072300-5d91ce7c2e83Review122026-06-02
v1.7.10-0.20260531072300-5d91ce7c2e83Review122026-06-02

Block this in CI

PkgRadar gates github.com/modelcontextprotocol/registry (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/modelcontextprotocol/[email protected]