PkgRadar

Go modules · proxy.golang.org

github.com/r266-tech/wechat-local-mcp

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged v1.6.19

SeveritySignalEvidence
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/r266-tech/[email protected]/cmd/wechat-cli/update.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v1.6.19Review122026-06-09
v1.6.18Review122026-06-09
v1.6.17Review122026-06-06
v1.6.16Review122026-06-06
v1.6.15Review122026-06-06
v1.6.14Review122026-06-06
v1.6.13Review122026-06-06
v1.6.12Review122026-06-05
v1.6.11Review122026-06-05
v1.6.9-0.20260603080901-9687eca470dfReview122026-06-04
v1.6.8Review122026-06-04
v1.6.6Low risk02026-06-02
v1.6.7Review122026-06-02

Block this in CI

PkgRadar gates github.com/r266-tech/wechat-local-mcp (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/r266-tech/[email protected]
Start free — 25 scans / moView full evidence