PkgRadar

Go modules · proxy.golang.org

github.com/orris-inc/orris

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged v0.2.6

SeveritySignalEvidence
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/orris-inc/[email protected]/internal/application/forward/usecases/generateinstallscript.go
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/orris-inc/[email protected]/internal/application/node/usecases/generatenodeinstallscript.go
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/orris-inc/[email protected]/internal/domain/shared/routing/routeconfig.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.2.6High risk412026-06-15
v0.2.5Review412026-05-31
v0.2.4Review412026-05-30

Block this in CI

PkgRadar gates github.com/orris-inc/orris (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/orris-inc/[email protected]