Go modules · proxy.golang.org

github.com/posit-dev/ptd/lib

Remote Payload, Credential file access

Why PkgRadar flagged v0.0.0-20260729202201-6f716584388c

Severity	Signal	Evidence
medium	Remote Payload	—
medium	Credential file access	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260729202201-6f716584388c`	Review	27	2026-07-31
`v0.0.0-20260717225255-5f64a36c29dd`	Review	27	2026-07-19
`v0.0.0-20260715165651-7e713883997b`	Review	27	2026-07-17
`v0.0.0-20260714204317-85aad6ecce2e`	Review	27	2026-07-16
`v0.0.0-20260713223118-7d3654d7bb76`	Review	27	2026-07-14
`v0.0.0-20260710183710-a0faa53a8e16`	Review	27	2026-07-14
`v0.0.0-20260708171156-f776d06f74be`	Review	27	2026-07-10
`v0.0.0-20260706135735-bfc45ca59c00`	Review	27	2026-07-08
`v0.0.0-20260701132127-445b25343a47`	Review	27	2026-07-03
`v0.0.0-20260626195354-d31dc6c4e7a7`	Review	15	2026-06-29
`v0.0.0-20260613121434-b1e68b089777`	Low risk	0	2026-06-17
`v0.0.0-20260602164504-1f8f385c3628`	Low risk	0	2026-06-03

Block this in CI

PkgRadar gates github.com/posit-dev/ptd/lib (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/posit-dev/ptd/[email protected]