PkgRadar

Go modules · proxy.golang.org

github.com/public-transport/transitous

Remote Payload: matched "wget "

Why PkgRadar flagged v0.0.0-20260527233250-831bc42228da

SeveritySignalEvidence
mediumRemote Payloadmatched "wget " · github.com/public-transport/[email protected]/ansible/roles/motis-staging/files/motis-update-feeds.sh
mediumRemote Payloadmatched "wget " · github.com/public-transport/[email protected]/ansible/roles/motis/templates/motis-update-feeds-secondary.sh

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260616012040-62baafcb9934Low risk02026-06-17
v0.0.0-20260615145433-ab87c4c37ef0Low risk02026-06-16
v0.0.0-20260615073804-793fee415f0eLow risk02026-06-16
v0.0.0-20260614184155-083d4c5a2d68Low risk02026-06-16
v0.0.0-20260614143457-1122a150baa6Low risk02026-06-15
v0.0.0-20260613135853-4c0d568db2a3Low risk02026-06-15
v0.0.0-20260612160900-8ba0e6616327Low risk02026-06-13
v0.0.0-20260611192610-45bccc3d40c8Low risk02026-06-13
v0.0.0-20260609110613-dc6060b9dee4Low risk02026-06-11
v0.0.0-20260607222421-12de16ba629fLow risk02026-06-08
v0.0.0-20260607212706-8195923c0e6fLow risk02026-06-08
v0.0.0-20260607205906-ee2ed831d0ceLow risk02026-06-08
v0.0.0-20260607205347-f68a062ff721Low risk02026-06-08
v0.0.0-20260531124121-e3365d1bdb35Low risk02026-06-01
v0.0.0-20260527233250-831bc42228daReview242026-05-29

Block this in CI

PkgRadar gates github.com/public-transport/transitous (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/public-transport/[email protected]
Start free — 25 scans / moView full evidence