Go modules · proxy.golang.org
github.com/rancher/shepherd
Remote Payload: matched "wget "
Why PkgRadar flagged v0.0.0-20260610155614-87d8cd812564
| Severity | Signal | Evidence |
|---|---|---|
| medium | Remote Payload | matched "wget " · github.com/rancher/[email protected]/extensions/clusters/import.go |
| medium | Remote Payload | matched "raw.githubusercontent.com" · github.com/rancher/[email protected]/extensions/clusters/kubernetesversions/all.go |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
v0.0.0-20260610155614-87d8cd812564 | Review | 39 | 2026-06-11 |
v0.0.0-20260608123935-6b47605d2157 | Review | 34 | 2026-06-09 |
v0.0.0-20260602170443-db6955599de5 | Review | 34 | 2026-06-03 |
v0.0.0-20260528164738-9dd51ca067d1 | Review | 39 | 2026-05-29 |
v0.0.0-20260528164733-7cb7386cb6b8 | Review | 39 | 2026-05-29 |
v0.0.0-20260528150743-4489f4f47007 | Review | 39 | 2026-05-29 |
v0.0.0-20260528150740-bac291adfd0b | Review | 39 | 2026-05-29 |
v0.0.0-20260528150731-ef2dbe2ca4ca | Review | 34 | 2026-05-29 |
Block this in CI
pkgradar gate --ecosystem go github.com/rancher/[email protected]