Go modules · proxy.golang.org

github.com/odvcencio/gotreesitter

Remote Payload, Credential file access

Why PkgRadar flagged v0.0.0-20260731100127-d5fff69d574a

Severity	Signal	Evidence
medium	Remote Payload	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260731100127-d5fff69d574a`	Review	15	2026-08-01
`v0.47.2-0.20260731094744-7c47a369bee3`	Review	15	2026-08-01
`v0.0.0-20260731094044-64544d3374ca`	Review	15	2026-08-01
`v0.0.0-20260731093714-a17fad162d33`	Review	15	2026-08-01
`v0.47.2-0.20260730202825-96671b92f2c6`	Review	15	2026-07-31
`v0.0.0-20260730202825-96671b92f2c6`	Review	15	2026-07-31
`v0.47.2-0.20260730035411-8dedd4f8b78b`	Review	15	2026-07-31
`v0.0.0-20260730035411-8dedd4f8b78b`	Review	15	2026-07-31
`v0.0.0-20260729233042-83548f551337`	Review	15	2026-07-30
`v0.47.2-0.20260729214138-5bfc3f21e6bd`	Review	15	2026-07-30
`v0.0.0-20260729214138-5bfc3f21e6bd`	Review	15	2026-07-30
`v0.0.0-20260729212038-45c2b3f547d2`	Review	15

Block this in CI

PkgRadar gates github.com/odvcencio/gotreesitter (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/odvcencio/[email protected]