PkgRadar

Go modules · proxy.golang.org

github.com/oursky/nexus

Remote Payload: matched "github.com/${NEXUS_REPO}/releases/download"

Why PkgRadar flagged v0.51.1

SeveritySignalEvidence
mediumRemote Payloadmatched "github.com/${NEXUS_REPO}/releases/download" · github.com/oursky/[email protected]/install.sh

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.41.0Low risk02026-06-03
v0.46.9Low risk02026-06-03
v0.46.1Low risk02026-06-03
v0.46.6Low risk02026-06-03
v0.47.0Low risk02026-06-03
v0.50.0Low risk02026-06-03
v0.51.0Low risk02026-06-03
v0.52.0Low risk02026-06-03
v0.52.3Low risk02026-06-03
v0.52.4Low risk02026-06-03
v0.52.5Low risk02026-06-03
v0.52.6Low risk02026-06-03
v0.52.7Low risk02026-06-03
v0.52.8Low risk02026-06-03
v0.52.9Low risk02026-06-03
v0.53.0Low risk02026-06-03
v0.53.1Low risk02026-06-03
v0.53.2Low risk02026-06-03
v0.53.3Low risk02026-06-03
v0.53.4Low risk02026-06-03
v0.53.5Low risk02026-06-03
v0.53.6Low risk02026-06-03
v0.54.0Low risk02026-06-03
v0.54.1Low risk02026-06-03
v0.55.0Low risk02026-06-03
v0.55.1Low risk02026-06-03
v0.56.0Low risk02026-06-03
v0.56.1Low risk02026-06-03
v0.59.0Low risk02026-06-03
v0.60.0Low risk02026-06-03
v0.60.1Low risk02026-06-03
v0.60.4Low risk02026-06-03
v0.51.1Review122026-05-29

Block this in CI

PkgRadar gates github.com/oursky/nexus (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/oursky/[email protected]