PkgRadar

Go modules · proxy.golang.org

github.com/pbs-plus/pbs-plus

Remote Payload: matched "github.com/pbs-plus/pbs-plus/releases/download"

Why PkgRadar flagged v0.92.3

SeveritySignalEvidence
mediumRemote Payloadmatched "github.com/pbs-plus/pbs-plus/releases/download" · github.com/pbs-plus/[email protected]/internal/server/web/api/plus.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.92.3Review122026-06-15
v0.94.0Review122026-06-15
v0.93.4Review122026-06-14
v0.93.2Review122026-06-14
v0.93.1Review122026-06-14
v0.93.0Review122026-06-14
v0.91.6Review122026-06-13
v0.91.4Review122026-06-12
v0.91.3Review122026-06-12
v0.91.2Review122026-06-04
v0.89.1Review122026-05-31
v0.89.4Review122026-05-31
v0.90.1-0.20260529161929-794aec128bd5Review122026-05-31
v0.89.2Review122026-05-31
v0.90.0Review122026-05-31
v0.89.0Review122026-05-31
v0.89.3Review122026-05-31
v0.89.5Review122026-05-30

Block this in CI

PkgRadar gates github.com/pbs-plus/pbs-plus (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/pbs-plus/[email protected]
Start free — 25 scans / moView full evidence