Go modules · proxy.golang.org

github.com/ossf/package-analysis

Remote Payload, Credential file access

Why PkgRadar flagged v0.0.0-20260721002336-c5c45008da69

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260721002336-c5c45008da69`	Review	29	2026-07-22
`v0.0.0-20260719232517-479144d75812`	Review	29	2026-07-21
`v0.0.0-20230824031824-d7ccb9d72769`	Review	24	2026-07-09
`v0.0.0-20220323034210-3013bdc4fd90`	Review	1	2026-06-25
`v0.0.0-20220405034757-ce5687e01bd1`	Review	1	2026-06-25
`v0.0.0-20220405041239-21b96d4db5ca`	Review	1	2026-06-25
`v0.0.0-20220405042048-fa03d4d5bda4`	Review	1	2026-06-25
`v0.0.0-20220411032633-8c95f183805b`	Review	1	2026-06-25
`v0.0.0-20220509044320-d0506c8df321`	Review	1	2026-06-25
`v0.0.0-20220510053730-2561f169bf75`	Review	1	2026-06-25
`v0.0.0-20220516235741-0957e1d4eb80`	Review	1	2026-06-25
`v0.0.0-20220517000319-31aedf77c941`	Review	1	2026-06-25

Block this in CI

PkgRadar gates github.com/ossf/package-analysis (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/ossf/[email protected]