Go modules · proxy.golang.org

github.com/pingcap/kvproto

Remote Payload: matched "wGet "

Why PkgRadar flagged v0.0.0-20170311101658-55b670bb63ef

Severity	Signal	Evidence
medium	Remote Payload	matched "wGet " · github.com/pingcap/[email protected]/pkg/kvrpcpb/kvrpcpb.pb.go

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260608022438-934094768e0f`	Low risk	0	2026-06-09
`v0.0.0-20170311101658-55b670bb63ef`	Review	12	2026-06-09
`v0.0.0-20160513031802-f6f294b8d925`	Low risk	0	2026-06-06
`v0.0.0-20260602124456-1e6ff1c80df2`	Low risk	0	2026-06-03
`v0.0.0-20260602101655-f8184e7702eb`	Low risk	0	2026-06-03
`v0.0.0-20260602082559-b7a415182b4f`	Low risk	0	2026-06-03
`v0.0.0-20260601035955-b2b3bb492278`	Low risk	0	2026-06-02

Block this in CI

PkgRadar gates github.com/pingcap/kvproto (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/pingcap/[email protected]