PkgRadar

Go modules · proxy.golang.org

github.com/navikt/ghep

Remote Payload: matched "api.github.com/graphql"

Why PkgRadar flagged v0.0.0-20260611095018-21238db32097

SeveritySignalEvidence
mediumRemote Payloadmatched "api.github.com/graphql" · github.com/navikt/[email protected]/internal/github/pulls.go
mediumRemote Payloadmatched "api.github.com/graphql" · github.com/navikt/[email protected]/internal/github/user.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260611095018-21238db32097Review242026-06-12
v0.0.0-20260609072213-e5a3a447d565Review242026-06-10
v0.0.0-20260608044403-42d5419527c2Review242026-06-09
v0.0.0-20260603132411-3a8d27d8c49eReview242026-06-05
v0.0.0-20260602130734-65f43c0c652aReview242026-06-03
v0.0.0-20260601140646-5b393e6f5516Review242026-06-03
v0.0.0-20260529085653-5792a3b7766cReview242026-05-30

Block this in CI

PkgRadar gates github.com/navikt/ghep (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/navikt/[email protected]
Start free — 25 scans / moView full evidence