PkgRadar

Go modules · proxy.golang.org

github.com/pulumi/registry/tools/mktutorial

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged v0.0.0-20260616001517-5a4db00996e8

SeveritySignalEvidence
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/pulumi/registry/tools/[email protected]/main.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260616001517-5a4db00996e8Review122026-06-17
v0.0.0-20260615115624-17c1d9b5778cReview122026-06-16
v0.0.0-20260613184049-9f474369b6a7Review122026-06-15
v0.0.0-20260613082846-2ddff26c36deReview122026-06-14
v0.0.0-20260613051822-d09c0aed8ad9Review122026-06-14
v0.0.0-20260612235338-fa577e7c244eReview122026-06-14
v0.0.0-20260611235418-d511b399b1f7Review122026-06-13
v0.0.0-20260611200131-4b93fd52c24fReview122026-06-12
v0.0.0-20260610235811-b79addd2b39fReview122026-06-12
v0.0.0-20260608115134-a29258a32180Review122026-06-09
v0.0.0-20260607154940-40d65c27727fReview122026-06-09
v0.0.0-20260603052257-07c53b94b07cReview122026-06-04
v0.0.0-20260531155013-42b88321804fReview122026-06-01
v0.0.0-20260529053741-efcd6045044bReview122026-05-30
v0.0.0-20260529052424-ac2ee1efdd9aReview122026-05-30
v0.0.0-20260528235431-5e4f378494faReview122026-05-30

Block this in CI

PkgRadar gates github.com/pulumi/registry/tools/mktutorial (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/pulumi/registry/tools/[email protected]