Go modules · proxy.golang.org

github.com/pingcap/tidb-cdc

Remote Payload, Obfuscation Density

Why PkgRadar flagged v0.0.0-20260716102731-f681fdf29b2b

Severity	Signal	Evidence
medium	Remote Payload	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260716102731-f681fdf29b2b`	Review	12	2026-07-18
`v0.0.0-20260715080110-a8db25c6cb33`	Review	12	2026-07-16
`v0.0.0-20260629132427-979ae7086fbf`	Review	12	2026-07-02
`v0.0.0-20191023040634-7e3f80d29d98`	Low risk	0	2026-07-02
`v0.0.0-20260624132310-9174f8a36885`	Review	12	2026-06-29
`v0.0.0-20260617133522-8a7d5ba2b15e`	Review	10	2026-06-20
`v0.0.0-20191028072642-a1468804d279`	Low risk	0	2026-06-20
`v0.0.0-20260616123348-15ccdcab35bd`	Review	6	2026-06-17
`v0.0.0-20260611084718-e4a15d2e9dc0`	Review	1	2026-06-12
`v0.0.0-20260609081942-0973ec7c35ad`	Low risk	0	2026-06-10
`v0.0.0-20260603025118-02e60d212e14`	Low risk	0	2026-06-05

Block this in CI

PkgRadar gates github.com/pingcap/tidb-cdc (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/pingcap/[email protected]