Go modules · proxy.golang.org

github.com/okp4/okp4d

Remote Payload

Why PkgRadar flagged v1.2.1-0.20220512141142-55d52efceff6

Severity	Signal	Evidence
medium	Remote Payload	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v1.3.1-0.20221011151403-4dc7f4d08d09`	Low risk	0	2026-08-30
`v1.3.1-0.20230620072048-5c2a8345d3f1`	Low risk	0	2026-08-30
`v1.3.1-0.20230117132956-5f2028e617c6`	Low risk	0	2026-08-30
`v1.3.1-0.20221004163410-584851c5b248`	Low risk	0	2026-08-30
`v1.3.1-0.20230716081545-56a5f92f97db`	Low risk	0	2026-08-30
`v1.3.1-0.20221004163410-434d4181a114`	Low risk	0	2026-08-30
`v1.2.1-0.20220512141142-55d52efceff6`	Review	12	2026-08-30
`v1.3.1-0.20230608134816-5c0d0fcc6efc`	Low risk	0	2026-08-30
`v1.3.1-0.20230407075038-58c7efdd7d37`	Low risk	0	2026-08-30
`v1.3.1-0.20230620072052-5b60b4c3d09d`	Low risk	0	2026-08-30
`v1.3.1-0.20221130141738-3c198f7fd1b7`	Low risk	0	2026-08-30
`v1.2.1-0.20220627150230-309193aae612`	Low risk

Block this in CI

PkgRadar gates github.com/okp4/okp4d (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/okp4/[email protected]

Prefer zero config? Install the GitHub App and it gates every pull request automatically — no pipeline edits, no API key.