PkgRadar

Go modules · proxy.golang.org

github.com/osmandapp/osmand-ios

Remote Payload: matched "wget "

Why PkgRadar flagged v0.0.0-20260528062941-06b336fd2830

SeveritySignalEvidence
mediumRemote Payloadmatched "wget " · github.com/osmandapp/[email protected]/prepare.sh

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260615150758-004a5c2011c2Low risk02026-06-16
v0.0.0-20260615022043-ea2978603b0fLow risk02026-06-16
v0.0.0-20260612144620-8fe7406e7318Low risk02026-06-13
v0.0.0-20260612113905-a9bac16895e7Low risk02026-06-13
v0.0.0-20260611120226-b0f3bfebb89aLow risk02026-06-12
v0.0.0-20260611104526-e714d41e231bLow risk02026-06-12
v0.0.0-20260611084343-4614d003ca1cLow risk02026-06-12
v0.0.0-20260610185633-854c641c4c85Low risk02026-06-11
v0.0.0-20260609144022-fd0bed481349Low risk02026-06-11
v0.0.0-20260608143618-379f0f314f99Low risk02026-06-09
v0.0.0-20260608080116-130ce307cef2Low risk02026-06-09
v0.0.0-20260605140117-26691fea0b83Low risk02026-06-06
v0.0.0-20260605133442-c8ab59b0b2a8Low risk02026-06-06
v0.0.0-20260605112356-dea9c9b203aeLow risk02026-06-06
v0.0.0-20260604130117-f68713f35476Low risk02026-06-05
v0.0.0-20260603100122-3d3e968e2ac3Low risk02026-06-05
v0.0.0-20260602143341-36884e7a4981Low risk02026-06-03
v0.0.0-20260602103714-d02f96b86106Low risk02026-06-03
v0.0.0-20260601165457-79d1400347deLow risk02026-06-03
v0.0.0-20260601154149-4bd81bbde0baLow risk02026-06-02
v0.0.0-20260601132352-1533e51aa5a5Low risk02026-06-02
v0.0.0-20260531180106-a81010f2845bLow risk02026-06-02
v0.0.0-20260530162740-08a88fff0235Low risk02026-05-31
v0.0.0-20260529064140-a431ff3be42eLow risk02026-05-30
v0.0.0-20260528143138-2d97d71016b2Low risk02026-05-29
v0.0.0-20260528062941-06b336fd2830Review122026-05-29
v0.0.0-20260528011144-e7b98a5963aeReview122026-05-29

Block this in CI

PkgRadar gates github.com/osmandapp/osmand-ios (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/osmandapp/[email protected]
Start free — 25 scans / moView full evidence