Go modules · proxy.golang.org

github.com/open-rails/openrails

Remote Payload, Obfuscation Density

Why PkgRadar flagged v0.121.0

Severity	Signal	Evidence
medium	Remote Payload	—
medium	Remote Payload	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.121.0`	Review	24	2026-07-23
`v0.120.0`	Review	24	2026-07-23
`v0.119.1-0.20260721131241-03b36769e22b`	Review	24	2026-07-22
`v0.119.1-0.20260721120709-588067885df3`	Review	24	2026-07-22
`v0.119.0`	Review	24	2026-07-22
`v0.118.1-0.20260720195003-b96d98963577`	Review	24	2026-07-21
`v0.118.1-0.20260720164438-19d457f89265`	Review	24	2026-07-21
`v0.118.1-0.20260720152005-c8b9ba25e0bf`	Review	24	2026-07-21
`v0.118.1-0.20260720125716-31041d8b0bb4`	Review	24	2026-07-21
`v0.118.1-0.20260720123739-52780b230e50`	Review	24	2026-07-21
`v0.118.1-0.20260720122435-2497c9ec8163`	Review	24	2026-07-21
`v0.118.1-0.20260717172619-84d7b4c06aec`	Review	24	2026-07-21

Block this in CI

PkgRadar gates github.com/open-rails/openrails (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/open-rails/[email protected]