Go modules · proxy.golang.org

github.com/osolmaz/brokerkit

Remote Payload, Go Cgo Preamble, Obfuscation Density

Why PkgRadar flagged v0.2.1-0.20260715143532-726166ae6c90

Severity	Signal	Evidence
medium	Remote Payload	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.2.1-0.20260715143532-726166ae6c90`	Review	12	2026-07-17
`v0.2.0`	Low risk	0	2026-07-17
`v0.1.0`	Low risk	0	2026-07-12
`v0.0.0-20260710205807-bae6a37495a2`	Low risk	0	2026-07-11
`v0.0.0-20260710204251-bf05ec3d1d56`	Low risk	0	2026-07-11
`v0.0.0-20260710183131-9b95618b34a7`	Low risk	0	2026-07-11
`v0.0.0-20260710164252-865d1cc06bfd`	Low risk	0	2026-07-11
`v0.0.0-20260710161847-589762c7c9ba`	Low risk	0	2026-07-11
`v0.0.0-20260710152651-56cfaa412122`	Low risk	0	2026-07-11
`v0.0.0-20260710152011-9b77613e8652`	Low risk	0	2026-07-11
`v0.0.0-20260710151450-30c9c8279e0c`	Low risk	0	2026-07-11
`v0.0.0-20260710142445-2af4deb6809a`	Low risk	0	2026-07-11
`v0.0.0-20260710122410-bf9b0f17b71a`

Block this in CI

PkgRadar gates github.com/osolmaz/brokerkit (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/osolmaz/[email protected]