Go modules · proxy.golang.org

github.com/ossf/scorecard/v4

Remote Payload

Why PkgRadar flagged v4.4.1-0.20220718195453-10681dad95ad

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v4.4.1-0.20220718195453-10681dad95ad`	Review	24	2026-08-24
`v4.3.1-0.20220523212439-720a04946469`	Review	24	2026-08-24
`v4.3.2-0.20220606213122-4bd3391a36ef`	Review	24	2026-08-24
`v4.4.1-0.20220629171015-3957460c2b20`	Review	24	2026-08-24
`v4.4.1-0.20220713133846-5d9d75b2e466`	Review	24	2026-08-23
`v4.1.1-0.20220414012005-4d1c5316907e`	Review	24	2026-08-22
`v4.8.1-0.20221108135916-556405dc46bf`	Review	24	2026-08-22
`v4.8.1-0.20221110134744-07a111ee5ece`	Review	24	2026-08-22
`v4.12.1-0.20230925134700-fa31d56694c4`	Review	24	2026-08-22
`v4.10.6-0.20230420133652-ef7708290849`	Review	24	2026-08-22
`v4.0.2-0.20220127085106-15a204fe1daa`	Review	24	2026-08-21
`v4.3.1-0.20220524201537-96fac8a941af`	Review

Block this in CI

PkgRadar gates github.com/ossf/scorecard/v4 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/ossf/scorecard/[email protected]

Prefer zero config? Install the GitHub App and it gates every pull request automatically — no pipeline edits, no API key.