PkgRadar

Go modules · proxy.golang.org

github.com/razshare/frizzante

Remote Payload: matched "github.com/air-verse/air/releases/download"

Why PkgRadar flagged v1.46.8-0.20260608023109-139ec7bc0375

SeveritySignalEvidence
mediumRemote Payloadmatched "github.com/air-verse/air/releases/download" · github.com/razshare/[email protected]/cli/generations/air.go
mediumRemote Payloadmatched "github.com/oven-sh/bun/releases/download" · github.com/razshare/[email protected]/cli/generations/bun.go
mediumRemote Payloadmatched "github.com/sqlc-dev/sqlc/releases/download" · github.com/razshare/[email protected]/cli/generations/sqlc.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v1.46.8-0.20260608023109-139ec7bc0375High risk362026-06-11
v1.46.7High risk362026-06-08
v1.46.3High risk362026-06-07
v1.46.4High risk362026-06-07
v1.46.5High risk362026-06-01

Block this in CI

PkgRadar gates github.com/razshare/frizzante (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/razshare/[email protected]
Start free — 25 scans / moView full evidence