Go modules · proxy.golang.org

github.com/open-horizon/anax

Remote Payload

Why PkgRadar flagged v0.0.0-20260720150311-2f3fa5a506d6

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20170928151802-2f19090d13ff`	Low risk	0	2026-07-26
`v0.0.0-20260720150311-2f3fa5a506d6`	Review	24	2026-07-22
`v0.0.0-20260716190313-47a9dfb96b41`	Review	24	2026-07-18
`v0.0.0-20260715190609-e079149cade3`	Review	20	2026-07-17
`v0.0.0-20260630140625-6abbce23b273`	Low risk	0	2026-07-03
`v0.0.0-20181005144851-24b9572a8136`	Low risk	0	2026-06-27
`v0.0.0-20181008211841-995e890c27d5`	Low risk	0	2026-06-27
`v0.0.0-20180727010216-ec1bba76d7ce`	Low risk	0	2026-06-27
`v0.0.0-20180920191753-1ed9ed5dc024`	Low risk	0	2026-06-27
`v0.0.0-20180301183520-a7270298b2bf`	Low risk	0	2026-06-27
`v0.0.0-20181205195516-486241635741`	Low risk	0	2026-06-27

Block this in CI

PkgRadar gates github.com/open-horizon/anax (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/open-horizon/[email protected]