PkgRadar

Go modules · proxy.golang.org

github.com/partite-ai/wacogo

Remote Payload: matched "github.com/bytecodealliance/wasm-tools/releases/download"

Why PkgRadar flagged v0.0.0-20260601004924-5e687b021449

SeveritySignalEvidence
mediumRemote Payloadmatched "github.com/bytecodealliance/wasm-tools/releases/download" · github.com/partite-ai/[email protected]/wasmtools/fetch.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260601004924-5e687b021449Review122026-06-02
v0.0.0-20260530012429-06b376786a90Review122026-05-31
v0.0.0-20260529151406-f887466cbe60Review122026-05-30
v0.0.0-20260529143534-ca453150746aReview122026-05-30
v0.0.0-20260529012923-31211237ef20Review122026-05-30
v0.0.0-20260529012318-e76a7028c200Review122026-05-30
v0.0.0-20260528222354-48d949c739e6Review122026-05-29

Block this in CI

PkgRadar gates github.com/partite-ai/wacogo (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/partite-ai/[email protected]