Go modules · proxy.golang.org

github.com/parca-dev/parca

Remote Payload, Obfuscation Density

Why PkgRadar flagged v0.28.1-0.20260727183301-3b5647cd9e2a

Severity	Signal	Evidence
medium	Remote Payload	—
medium	Remote Payload	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.14.1-0.20221124105950-221bef995415`	Low risk	0	2026-07-30
`v0.14.1-0.20221122072756-b443ea976d1d`	Low risk	0	2026-07-30
`v0.14.1-0.20221122043101-0caae5087b60`	Low risk	0	2026-07-30
`v0.14.1-0.20221121071130-a6df07c9f050`	Low risk	0	2026-07-30
`v0.14.1-0.20221117153033-56c7e13cdf40`	Low risk	0	2026-07-30
`v0.14.1-0.20221116224639-82ec5c47003d`	Low risk	0	2026-07-30
`v0.14.1-0.20221117161549-13cdaf008486`	Low risk	0	2026-07-30
`v0.13.1-0.20221109102412-0b1285b6be9a`	Low risk	0	2026-07-30
`v0.13.1-0.20221025002346-005ac5ad732e`	Low risk	0	2026-07-30
`v0.12.2-0.20221018154527-5d06484489b4`	Low risk	0	2026-07-30
`v0.14.1-0.20221206091411-f9d9dea9b3c3`	Low risk	0	2026-07-30
`v0.14.1-0.20221129130333-32660c63e7b5`	Low risk

Block this in CI

PkgRadar gates github.com/parca-dev/parca (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/parca-dev/[email protected]